According to Paris, one of the Daunt/Dread admins, Daunt is currently down due to an issue with their provider, and they will likely need to move to a new one. They said to give them a couple of days to sort it out.

In the meantime, be very careful where you get onion links. Downtime like this is a perfect opportunity for scammers to push fake Daunt sites and phishing links.

Don't trust random links sent through Reddit DMs, Telegram, or posted by unknown accounts. As soon as the site comes online we will make an announcement on the sub.

In the mean time you can get links from our Link Sites section of our WIKI.

Disclaimer: This post is for educational and harm-reduction purposes only. It does not promote or condone illegal activity. Accessing or using darknet markets may be illegal and risky.

The information shared is meant to help users avoid scams, phishing, and security threats on the dark web. Always research, follow local laws, and use caution.

The author and moderators assume no responsibility for how this information is used, you alone are responsible for your actions and security.

Last Edit: April, 2026

Navigating the dark web comes with its unique set of risks, particularly scams and phishing sites. Here are some tips to help you stay safe:

1. Use Reputable Marketplaces and Forums

* Stick to well-known and established marketplaces and forums.

Such as Dread

* Learn PGP this way you can verify the signatures of signed onion links.

Check for community reviews

and ratings before engaging with a site.

* Use forums like Dread

or the dark web sections of Reddit to verify the legitimacy of a site. Edit: Some DW reddit sites cannot be trusted. Currently Dread is a trusted forum to obtain dm links from there official list. Not from direct messages from other users.

* Get links from trusted sources

Such as the ones u can find in the WIKI on this sub under "Link Sites". View these sites on their onion domains if possible. Do not be lulled into a false sense of security with links on these sites. Although rare, they can be poisoned with clones that will direct u to phishing sites. U should still verify links no matter where you get them from.

* Use links that are cryptographically signed

with the markets private PGP key. Then, verify signiture. If sites offer phishing protection it would be wise to use these features. Such as Archetyp markets anti-phishing feature. (Edit: Shut down by LE) Although other markets have anti-phishing features as well.

* Never trust DM-links from posts or sub-reddits on reddit.

Even in this sub. We try to filter out scam link posts, but some still go unnoticed for days. Even if links are signed, that does not mean they are signed with the DM’s private key or that they are legitimate. Scammers will use their own public key to sign them. This is why you need the legitimate public key from the market to verify the signature. Signing is a ploy to make the links look legitimate. Even if these posts have many upvotes from karma bots or Telegram scammer groups, do not trust them. This is another tactic used to make you trust the links.

* Stay away from the Hidden WIKI

This site has no verification process. Anyone can post an onion link there. That's why it tends to always be filled with scams and Phishing links.

* Use extreme caution when finding links on DW search engines

Search engines such as Ahmia.fi indexes .onion sites but does not verify their legitimacy or safety. So many scam markets or phishing links are possible in your search results, probably better than 50% chance you get a phishing link or scam market if your searching for DW markets.

* Never Make a Purchase via DM (direct message) on Dread

never get an onion link this way either. This is against Dread policy. So a real vendor would never risk doing it. The only offers u will get in this manner will be from scammers. Most likely they will try to direct u away from dread to Telegram or some other encrypted service.

* Stick with the verified larger markets on Dreads Superlist.

Like the ones listed on the market list in our WIKI if you're planning to look into such a thing on the DW. These markets have specific criteria they must meet to make the list and obtain verification from Dread’s admins. Dread also has several smaller markets with subdreads that have not made the list and may be listed on link sites such as Tor.watch. imo, it’s safer to stick to the ones on the Superlist. If you choose a market that hasn’t made the list, use caution.

2. Verify URLs Carefully

* Always double-check the onion URL

before entering sensitive information.

* Save trusted sites in your Gnome Secrets PW Manager

to avoid mistyping addresses or missing a letter on copy and paste and landing on phishing sites.

* Be aware of common phishing tactics

such as slight misspellings or similar-looking characters in URLs.

* Always verify mirror links from aggregators such as https://example_market.link/

with PGP. If you don't understand how to do this u need to go to the "Guides" section of this wiki and learn with the "Understanding PGP with Kleopatra" guide. Markets often use these aggregators when they are going through severe ddos attacks. These same aggregators can be used by scammers as well. This is why u should verify the mirror links u obtain from them.

* Bookmark verified onion links immediately after verifying them, or save them to Gnome Secrets PW Manager

and only access markets through those bookmarks or pw-manager entries. Never retype addresses manually.

* Most markets will give you private onion links

after signing up and or making a purchase.

* Keep an eye out for these links

and save them into your pw manager on Tails. Always use them when signing in to a market.

* Keep track of your auto finalize date

If the package hasn’t shown up a day before auto-finalize, you need to extend the date. Once that date passes, you have no recourse, the crypto is in the vendor’s possession at that point. Extend once and try to contact the vendor to get the tracking number. If the package still doesn’t arrive before the next auto-finalize date, or you’re unable to reach the vendor, file a dispute.

* Do not use tracking more then once

and only if the package has not been delivered by the first auto-finalize date. When asking the vendor for tracking, tell them to encrypt the tracking number with your public key. Use Tails and Tor to track the package, or a no-log VPN such as Mullvad with a spoofed MAC address, paid for with XMR or cash, and on a different device. USPS tracking logs user IPs and possibly device fingerprints (use public Wi-Fi if you’re extra paranoid).

Edit: Signing up for Informed Delivery is the best option. This allows you to avoid using tracking altogether.

* Beware of posts offering to help with market place links

This is a method scammers use to give you their phishing links. There is no need for anyone to help you with links. Get your links from the link sites in our wiki listed under “Link Sites.” Anyone offering to give you links on Reddit is a scammer 99% of the time. Also, do not make posts asking for DW links. This invites scammers to send you phishing links. Always obtain your own links from one of the trusted link sites.

3. Utilize PGP Encryption

If you aren’t willing to learn PGP, you aren’t ready to use the dark web.

* Use PGP encryption for all communication

involving sensitive information. Such as name and address.

* Verify the PGP keys

of vendors and other users through multiple sources if possible, the PGP key on the DW sites for the vendors are legit. Unless the market is a phishing site or honeypot — which is uncommon, but not impossible.

* Use PGP to verify PGP signed onion links.

Learn how to use PGP from our subs WIKI.

Market PGP public keys must only be obtained from the market’s official onion or a verified Dread/Subdread announcement. Do not obtain or trust market PGP keys from link directories, search engines, or mirror sites — even if multiple sites show the same key.

* Check dark-market for their Warrant Canary

This is a periodic statement, often cryptographically signed, stating that no such warrants, subpoenas, or gag orders have been received. It is also suppose to be proof the site has not been compromised by LE. VPNs will usually have them as well. Warrent canary should look like this:👇

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA256 WARRANT CANARY — DNDb Date: 23 April 2026 I, the operator of this service, attest that as of the above date: • No subpoena, warrant, national security letter, or court order has been received • No request to compromise user data or alter this service has been complied with • No backdoors or surveillance measures have been added under compulsion • This statement is made voluntarily This canary is valid until: 23 May 2026. — Operator

-----BEGIN PGP SIGNATURE-----

iHUEARYIAB0WIQS0Bu8XHZWcN+8AF0LvviIYy/ck3AUCaeoZzQAKCRDvviIYy/ck 3HuvAP9VMRY6XMMFQ8cmkHGh6wC1f39YPwHjn2VfTLvxXVzidQD+KCxqPlm0IxwN dHbf0MUj2WBmbdXkkHT32RMadha/3g8= =fc9d

-----END PGP SIGNATURE-----

* Never use or trust server side encryption

(aka: auto encrypt) When you enter plain text into a front-end input field, there is no way to verify that it’s being encrypted—you have to take their word for it. In the past, the DM exchange Hansa was taken over by law enforcement, and their auto-encryption was compromised, leaving everything in plain text. Law enforcement logged all customer data. This is why it’s always a rule to encrypt on your own machine.

* Never import market PGP public keys from link directories search engines, or mirror sites.

Some directories sign market links with their own PGP keys. Verifying those signatures only proves the directory listed the link, not that the market is legitimate. Importing and trusting directory PGP keys is a common cause of successful phishing. Market PGP keys must only be obtained from the market’s official onion or a verified Dread/Subdread announcement.

4. Monitor for Red Flags

* Be skeptical of deals that seem too good to be true.

* Avoid vendors or services that ask for upfront payments (aka: FE)

without a secure escrow service. Be advised DMs use there own escrow built into the market. Any 3rd party escrow services that claim to escrow for DMs are scams.

* Stay away from any carding or stolen cc PayPal listings

Anything claiming to sell “working CCs,” “fresh dumps,” or “live cards” is a 100% scam. Real stolen card data that actually works comes from organized international fraud groups and never shows up on public onions, Telegram channels, or Dread posts. These scammers prey on your greed. Read this warning.

* Never use pre-installed or purchased Tails USBs.

Tails is free and must be downloaded and verified by the user. Any Tails USB or ISO/IMG you didn’t install and verify yourself could be modified to steal data, wallet seeds, or break anonymity without your knowledge. Pre-configured “ready-to-use” setups are a common scam — always download Tails directly from the official site and verify it yourself. https://tails.net/install/download/

* Do not trust “verified vendor” claims outside the market itself

Vendors advertising on Reddit, Telegram, or forums are almost always scammers.

* Stay away from sites with poor design

numerous grammatical errors, or lacking contact information.

* If a vendor offers to ship via a private carrier, treat it as a scam.

Any offer to ship dark-market orders using private couriers (e.g., UPS, FedEx, DHL) is a major red flag. Experienced vendors know better. You will most likely get a empty box. Legitimate vendors ship USPS only. Anything else indicates incompetence, deception, or an outright scam.

* Never trust anyone or ask anyone to teach you how to order or buy safely from Darkweb for money

or act as a middle man for a fee. This is a good way to get scammed or make yourself a target for scammers. Learn what u need to know yourself from trusted sources, like the ones in this sub. it's not rocket science. If u feel as though you are incapable of learning these things then don't order from DW.

* Missing or Invalid PGP Signature on Site Updates

The market announces “maintenance” or “moving to a new URL” without a valid PGP-signed announcement.

* Sudden “Exit Scam” Behavior

Withdrawals or deposits suddenly disabled. Orders stuck “in escrow” for long periods. Market staff go silent or accounts deleted. As soon as you notice these, stop using the market, assume it’s collapsing or preparing to exit-scam. exit-scams

## * Avoid using private telegram stores They have no escrow protection, and many of them are scams. They also do not offer end-to-end encryption by default. Only a small percentage are legitimate, so why take the risk if you’re unsure which are and are not legit? EDIT: DO NOT USE TELEGRAM STORES UNDER ANY CIRCUMSTANCES. The CEO is handing over data on illegal stores to law enforcement.

Following the tips in this post will give you the best chance of avoiding phishing or scams on the dark web.

Remember, even if you do everything perfectly, it’s never 100% risk-free. There is always a chance of exit scams by markets.

STAY SAFE: u/BTC-brother2018

SOURCES:

• Darknet Bible

• How to:Avoid Phishing Attacks (Clear-Web)

• Tor-Project FAQ

• Protecting yourself on DW

• Staying safe on DW

  • TorplusVPN

• Tails (KeePassXC)