Crimenetwork reboot – German authorities shut down a relaunched Crimenetwork and arrested its operator, highlighting how darknet markets rapidly reemerge after raids.
A relaunch of the German darknet marketplace Crimenetwork has been shut down after authorities arrested the man accused of rebuilding it—less than days after the previous version was dismantled.
German authorities said they took action against a rebooted “Crimenetwork” that brought in more than 3.6 million euros.. The operation. described as a major hub for cybercrime. had been designed to continue trafficking in illegal services. substances. and stolen data.. The case centers on how quickly such marketplaces can reappear after law-enforcement pressure and what that means for monitoring. disruption. and prosecution.
Crimenetwork had been operating since 2012 and was described as Germany’s largest online cybercrime marketplace at the time. with around 100. 000 registered users.. Over the years. it functioned as a marketplace model for illicit goods and services. including access to stolen information and other criminally obtained materials.
In late 2024, coordinated action targeted the original operation.. Authorities including the Public Prosecutor’s Office in Frankfurt am Main. the Central Office for Combating Cybercrime (ZIT). and the Federal Criminal Police Office (BKA) dismantled the marketplace by seizing the platform and arresting one of its administrators.. Just days later, a new version appeared under a fresh setup.
That rapid reappearance set the stage for the current crackdown.. Investigators said a new version emerged on new infrastructure managed by a different operator.. The BKA described the suspected administrator’s alleged role in rebuilding the technical foundation so quickly after the prior shutdown and the December 2024 arrest.
This week, the accused administrator—described as a 35-year-old German man—was arrested at his residence in Mallorca, Spain. The arrest was carried out by a special unit of the Spanish National Police, acting under a European arrest warrant.
According to the BKA. the suspect is accused of constructing and administering a completely new technical infrastructure only a few days after the earlier Crimenetwork was taken down and the former administrator was arrested in December 2024.. In this reboot, investigators say the name Crimenetwork was used again.
The rebooted platform, authorities said, offered a similar range of illicit goods and services. It also reportedly grew quickly, reaching 22,000 users and more than 100 vendors soon after it began operating.
Evidence gathered during the police action suggests the renewed operation had already produced at least €3.6 million in revenue.. Investigators also reported seizing about €194,000 in allegedly illicit assets, along with substantial amounts of user and transaction data.. That data is intended to support further investigation and help identify participants in the broader criminal ecosystem.
Speaking after the shutdown. Carsten Meywirth. Director at the Federal Criminal Police. said the reboot had failed and that another administrator would have to answer in a German court.. He emphasized that law enforcement will continue to act with national and international partners even in the darknet. adding that cybercrime does not pay.
Authorities also highlighted the case with a seizure banner displayed on the seized online portal, informing visitors that the operation had been interrupted. The message underlined the intent to disrupt access while investigations move toward the next stage.
The arrested administrator now faces charges under Section 127 of the German Criminal Code and Sections 29a and 30a of the German Narcotics Act. These charges carry potential prison time, reflecting that investigators view parts of the marketplace’s activity as connected to serious criminal conduct.
The crackdown also follows legal developments from the prior case. The operator of the original Crimenetwork marketplace was sentenced in March to seven years and 10 months in prison and ordered to forfeit more than €10 million in criminal proceeds. Investigators noted that ruling is not yet final.
For investigators and the public. the timeline in this case underscores a persistent problem in darknet enforcement: disrupting one instance may not end a marketplace if administrators can pivot quickly to new infrastructure.. The rapid shift—first from the seized platform to a new operator. and then to freshly built infrastructure—illustrates why police focus not only on takedowns. but also on tracking infrastructure changes. user activity. and transaction patterns.
While this latest shutdown removed one more operational node. the seized user and transaction data could be pivotal in connecting buyers. vendors. and administrators across versions.. The legal action. combined with the evidence described by authorities. may also help clarify how darknet markets maintain continuity after disruption—particularly when infrastructure is rebuilt in a matter of days.
Crimenetwork darknet marketplace cybercrime enforcement BKA cybersecurity investigation European arrest warrant law enforcement takedown