Dark Web

What Is on the Dark Web?

Ask what is on the dark web and you will get two kinds of answer: sober reporting, and folklore. The folklore is louder — hidden markets for everything, secret services for anything, an underworld the size of a city. The reporting is quieter and more complicated: a small network with lawful uses, illegal markets, and a great many scams. This guide separates the two.

By Abdul Hannan · Published 14 November 2026 · Updated 14 November 2026

How to read this guide

Every claim below is labelled by how we know it. Documented means it has been reported by researchers, news organisations, or law enforcement with evidence. Reported means it is widely described but hard to verify independently. Folklore means it is repeated often with no credible evidence behind it. If a claim has no evidence, this guide says so — that is the point.

Documented: lawful uses

• Journalists' tip lines. News organisations run onion services so sources can contact them without revealing their identity. These are among the best-documented lawful uses of the dark web, and they exist precisely because the technology protects the source.
• Whistleblowing platforms. Secure drop boxes used by journalists allow documents to be sent anonymously. They are run by newsrooms and non-profits, in the open, and their existence is public.
• Privacy email and chat. Privacy-focused email and messaging services operate as onion services so that neither the user nor the service has to reveal a location.
• Libraries and archives. Public-domain libraries and archives have run onion mirrors so that their collections can be reached where the ordinary web is blocked.
• Forums under censorship. In countries where the internet is filtered, forums and discussion spaces on Tor are a way for people to read and speak without being easily traced.
• Researchers and security teams. Security researchers study onion services to understand threats, and law enforcement uses the same tools in investigations.

Documented: illegal markets

Illegal marketplaces are real, and pretending otherwise would be dishonest. Researchers and law enforcement have documented markets selling illegal drugs, stolen data, counterfeit goods, and hacking services. Several of the largest marketplaces in history were seized, and their operators and users were prosecuted in ordinary courts for ordinary crimes: drug trafficking, fraud, and weapons offences.

Three things about these markets are worth knowing, because they cut against the mythology:

• They are one part of a small network. The dark web is thousands of onion services, not millions, and marketplaces are a minority of them.
• They get shut down. Law enforcement understands these networks, runs undercover operations on them, and seizes them. The dark web is not a lawless zone.
• They are full of scams. Sellers take payment and never deliver. Fake marketplaces collect deposits and vanish. Buyers have no customer protection, no refund, and no regulator to complain to — and scammers know it.

Reported: the grey area

Some things are widely reported but hard to verify independently, because the evidence is partial or the sources are anonymous:

• Stolen data sales. Data from breaches is traded on forums and markets. Researchers confirm this happens, but the scale is hard to measure and individual claims about specific breaches should be treated as unproven until a named source confirms them.
• Hacking services. Forums advertise hacking services of every kind. Some of these are genuine criminal services; many are scams, and some are law enforcement operations. There is no way for a visitor to tell which is which.
• Extremist and hate content. Forums hosting extremist material exist on Tor as they do on the ordinary web. Their existence is documented; their size and influence are often exaggerated.

Folklore: what is not true

These claims are repeated constantly, and they have no credible evidence behind them:

• "Hitmen for hire." Advertisements for contract killings appear on forums and marketplaces. Researchers who have investigated them have repeatedly found them to be scams — and no credible evidence of a genuine murder-for-hire market has ever been published. The adverts exist to steal money from people foolish enough to pay.
• "Red rooms" — live-streamed harm for paying viewers. A staple of horror stories and creepypasta. There is no credible evidence that these exist as a real service; the stories trace to fiction and to scams that charge for access to nothing.
• "The dark web is 90 percent of the internet." A misreading of a 2001 estimate about the deep web, repeated for decades. The dark web is a small fraction of the internet.
• "Everything on the dark web is illegal." The lawful uses listed above — journalists, libraries, archives, whistleblowing platforms — are documented and public. Treating the whole network as criminal misunderstands both the technology and its users.
• "You can buy anything, including a human being." Human trafficking is a real and serious crime, and it is investigated by law enforcement — but the dark web "human market" of legend is not a documented reality. Claims of this kind are used to sell fear, and they distract from the real, documented ways trafficking is investigated and fought.

Why the folklore survives

Folklore survives because the dark web is hidden. A claim about a hidden place is hard to check, which makes it easy to repeat. Three groups benefit from exaggeration: vendors, who inflate the threat to sell security products; media, which inflates it to win attention; and scammers, who inflate it to take money from the curious.

The practical defence is a habit, not a tool: when a claim about the dark web sounds dramatic, ask who reported it, how they know, and when. A claim with a named source, a method, and a date is reporting. A claim with none of those is folklore — however often you have heard it.

The honest summary

The dark web contains real journalism and real crime, real libraries and real scams, in a network far smaller than the legends suggest. The most dangerous thing about it for an ordinary person is not some secret underworld — it is the ordinary, unglamorous risk of being scammed, infected with malware, or drawn into illegal activity by a marketplace that has no customer protection at all.

Sources

• Tor Project — A short introduction to Tor (Tor Specifications, accessed 14 November 2026)
• Tor Project — Download Tor Browser (accessed 14 November 2026)
• Onion services — Wikipedia (accessed 14 November 2026)

Incident and marketplace claims on this page are described only where they have been publicly reported by researchers or law enforcement; no unconfirmed incident is presented as fact. Last checked: 14 November 2026.

Frequently asked questions

What is actually on the dark web?

A mix. Documented lawful uses include journalists tip lines, whistleblowing platforms, privacy email and chat, libraries and archives, and forums for people under censorship. Illegal marketplaces exist too, alongside a large number of scams. It is a small network with mixed uses, not a single thing.

Are there really hitmen for hire on the dark web?

The adverts exist, but researchers who have investigated them have repeatedly found them to be scams. No credible evidence of a genuine murder-for-hire market has been published. Anyone advertising such a service is almost certainly trying to steal your money — or worse.

Can you buy drugs on the dark web?

Illegal drug marketplaces have existed and have been reported by researchers and law enforcement, and several of the largest were seized and their operators prosecuted. Buying drugs is illegal, and marketplaces are also full of scams where sellers take payment and never deliver.

Is everything on the dark web illegal?

No. Journalists, researchers, activists, libraries and ordinary privacy seekers use onion services for lawful reasons. Illegal activity is one part of the ecosystem, and treating the whole network as criminal misunderstands both the technology and its users.

Why do people exaggerate what is on the dark web?

Drama sells. Vendors inflate the threat to sell security products, headlines inflate it to win clicks, and rumours survive because the network is hidden and hard to check. The reliable way to judge a claim is to ask who reported it, how they know, and when.