Law Enforcement Officers Closed the Underground WT1SHOP Marketplace That Sold Bank Cards and Credentials

Law enforcement agencies have completed an international operation, as a result of which control over the website and domains of the underground marketplace WT1SHOP was seized. This marketplace sold stolen bank cards, documents, and millions of credentials.

Let me remind you that we also wrote that The FBI charged a Russian who ran a criminal marketplace, and also that the New Dark Web Marketplaces Allegedly Linked to Mexican Drug Cartels.

underground marketplace WT1SHOP

Vitaly Kremez
Vitaly Kremez

WT1SHOP was one of the largest marketplaces for trading credentials and personal data, and criminals often scooped logins and passwords for hacking accounts, bank cards from which they later made purchases, as well as identity cards necessary for various frauds, including complete identity theft. As a rule, WT1SHOP was advertised on Russian-language hacker forums and subreddits dedicated to fraud and cybercrime.

WT1SHOP served primarily carders and scammers involved in capturing other people’s accounts, and offered its services to many criminal communities.Vitaly Kremez, head of AdvIntel, said.

As the US Department of Justice has now reported, the Portuguese authorities seized the WT1SHOP website, and US law enforcement officers confiscated four marketplace domains:,, and Other domains used by WT1SHOP (,, and do not appear to have been affected, but since the site has been taken over by the authorities, visiting any of these addresses will no longer grant access to the marketplace.

The Maryland District Attorney’s office and the FBI say the site traded the personal information of millions of users, including stolen credentials, bank account information, bank cards, and scans of identification documents, including passports and driver’s licenses.

A law enforcement review of WT1SHOP in December 2021 showed that the number of users and merchants on the site was 106,273 users and 94 merchants. At the same time, about 5.85 million credentials were available for enforcement officers say.

As of June 2020, sales through WT1SHOP were estimated to be worth $4 million in bitcoin, according to Dutch police estimates.

The US Department of Justice said in a statement that bitcoin payments, email addresses and accounts of WT1SHOP administrators were traced back to 36-year-old citizen of the Republic of Moldova Nikolai Kolesnikov. The authorities believe that Kolesnikov is the administrator of the now closed marketplace, and now he is accused in absentia of collusion and trading in unauthorized access devices. If arrested and found guilty, he faces up to 10 years in prison.
User Review
0 (0 votes)
Comments Rating 0 (0 reviews)

Daniel Zimmermann

Daniel Zimmermann has been writing on security and malware subjects for many years and has been working in the security industry for over 10 years. Daniel was educated at the Saarland University in Saarbrücken, Germany and currently lives in New York.

Related Articles

Leave a Reply

Your email address will not be published. Required fields are marked *


This site uses Akismet to reduce spam. Learn how your comment data is processed.

Back to top button