📖 Darknet Terminology

📝 Basic Terms

Every darknet market has its own house jargon, but this core set shows up almost everywhere. Knowing it saves you from asking a vendor to explain an abbreviation mid-order.

DNM (Darknet Market)
An online marketplace reachable only through Tor, not the surface web.
FE (Finalize Early)
Releasing payment before receiving the product. Vendors sometimes request it; new buyers should be wary of any vendor who requires it by default.
NDD (Next Day Delivery)
Domestic express shipping, usually listed as a paid upgrade.
DD (Direct Deal)
A transaction arranged outside the market's escrow system, which also means outside its dispute protection.
Stealth
Packaging designed to disguise contents from anyone who intercepts or inspects the parcel.
Vendor Bond
A refundable deposit a seller pays the market before they're allowed to list products.
Auto-Finalize
Automatic release of escrowed payment after a set number of days, whether or not the buyer confirmed delivery.
💡 Tip: FE requests specifically are worth remembering — most markets already restrict them for new vendors, precisely because the term shows up so often in scam post-mortems.

💰 Crypto Terms

Payment vocabulary matters more here than on a regular shopping site, since the choice of coin and wallet has real privacy consequences.

XMR (Monero)
A cryptocurrency that hides sender, receiver, and amount by default through ring signatures and stealth addresses.
BTC (Bitcoin)
The original cryptocurrency; pseudonymous, not anonymous, since every transaction sits on a public ledger.
Tumbling / Mixing
Obscuring the origin of coins by combining them with other users' funds before they reach their destination.
CoinJoin
A specific, trustless mixing protocol where participants jointly build one transaction, each signing only their own part.
Atomic Swap
A trustless cross-chain exchange, commonly BTC to XMR, with no custodian holding funds mid-swap.
Cold Storage
Keeping crypto in a wallet that has never touched the internet, typically a hardware device.
Hot Wallet
An online, internet-connected wallet used for active spending rather than long-term storage.
Seed Phrase
The backup words that let you restore a wallet. Anyone who has them controls the funds.
Subaddress
A Monero receiving address that can't be linked to your other subaddresses, even by someone who has one of them.
💡 Tip: "Pseudonymous, not anonymous" is the single most important distinction in this list — it's the whole reason Monero and Bitcoin get treated so differently in every guide here.

🔐 Security Terms

This is the vocabulary that shows up in OPSEC discussions and, occasionally, in the headlines about a market that didn't survive.

OPSEC (Operational Security)
The habits and practices that keep your real identity separate from your market activity.
PGP (Pretty Good Privacy)
An encryption standard used to sign messages and verify authenticity, and to encrypt delivery details.
2FA (Two-Factor Authentication)
A second login verification step, usually PGP-based on darknet markets, on top of a password.
Tails
An amnesic live operating system that forgets everything on shutdown unless you explicitly save it.
Whonix
A two-VM Tor-based operating system that isolates your workstation from the network gateway.
EXIF
Metadata embedded in image files that can contain location and device information; strip it before posting photos.
Dox / Doxxing
Revealing someone's real identity, usually maliciously, based on details they let slip.
LE (Law Enforcement)
Shorthand used across the community for police and federal agencies; also used loosely to accuse someone of being an informant.
Honeypot
A trap service, sometimes an entire market, operated by authorities to identify users.
Exit Scam
A vendor or an entire market disappearing with funds still held in escrow. It is the single most common way markets end.
💡 Tip: "Exit scam" and "honeypot" describe two different failure modes, not one — a market can end either way, and the warning signs for each look completely different.

⚠️ Important Warnings

  • 🚩 A vendor requesting FE by default, especially a new one, is the single term on this list worth acting on immediately
  • ⚖️ "Pseudonymous" (Bitcoin) and "anonymous" (Monero) are not interchangeable — the difference matters for real OPSEC decisions
  • 🍯 A honeypot and an exit scam look identical from the outside while they're happening — the warning signs only become clear afterward
  • 📖 New terms show up regularly — the full guide library covers most of them in context, not just as a definition