In a significant crackdown on cybercrime, US law enforcement has seized 145 domains and cryptocurrency wallets linked to BidenCash, a notorious darknet marketplace specializing in the sale of stolen credit card data and personal information 1 2 3. The operation, announced on June 4, 2025, marks a major step in the ongoing battle against digital financial crime.
How BidenCash Operated
BidenCash emerged in March 2022 and quickly became a hub for cybercriminals, offering stolen credit card numbers, login credentials, and sensitive personal details for sale. The platform charged a fee for each transaction, amassing over $17 million in revenue during its operation. At its peak, BidenCash boasted more than 117,000 users and facilitated the trade of over 15 million compromised payment card records 1 2 3.
To attract new users, the marketplace periodically released millions of stolen credit card details for free. For example, between October 2022 and February 2023, it published 3.3 million stolen cards as a promotional tactic. The leaked data included not only card numbers and expiration dates but also CVV codes, names, addresses, email addresses, and phone numbers 1 2 3.
The Takedown and Its Impact
The recent enforcement action was led by the US Secret Service and the FBI, with support from international partners including the Dutch National High Tech Crime Unit, The Shadowserver Foundation, and Searchlight Cyber 2 3 4. Authorities obtained court orders to seize both the marketplace’s domains and the cryptocurrency used for illegal transactions. While the exact amount of crypto seized remains undisclosed, on-chain data suggests that at least $43,000 in USDT (Tether) was confiscated 1.
Visitors to the seized BidenCash domains are now redirected to a law enforcement-controlled server, where a banner informs them of the site’s seizure 1 2 3. Despite this success, security analysts have noted that several BidenCash-related domains remain active, highlighting the resilience of such criminal networks and the challenges of completely dismantling them 1.
Broader Context and Ongoing Challenges
This operation is part of a broader effort by US authorities to target crypto-enabled criminal networks on the dark web. In 2025 alone, law enforcement has taken down hundreds of darknet-related domains and servers. However, cybercriminals continue to adapt, creating new channels to maintain their operations 1 3.
Key Takeaways
• Scope: 145 domains and crypto wallets seized, linked to a $17 million darknet marketplace.
• Data Impact: Over 15 million payment card records and personal details traded.
• User Base: More than 117,000 customers at its peak.
• Promotional Tactics: 3.3 million stolen cards released for free to attract users.
• Enforcement: Led by US Secret Service and FBI, with international support.
• Resilience: Some BidenCash domains remain active, underscoring the difficulty of total disruption 1 2 3.
Related Links
• US Department of Justice Statement
