This article is intended to provide general, educational information and is not legal advice.
There's plenty to see on the web, everything from the scores of your favorite sports teams to weather reports, reviews of the new French restaurant in town, and gossip from your friends and family members on social media platforms. But there's another world on the web that's mostly hidden from view and requires special browsers to access: the dark web.
If that name sounds sinister, it's because the dark web encourages activity that people would rather hide from view. The dark web is where people can buy illegal drugs and firearms. It's also dotted with sites that specialize in illicit pornography, including child pornography. It’s a part of the internet that you can’t find with traditional search engines such as Google.
Because it is hidden, getting to the dark web isn't easy. Most visitors first download Tor, or The Onion Router, a browser that allows users to search the internet anonymously. You can download this browser at torproject.org.
Finding specific sites on the dark web isn't easy, though. You have to know what you want. You can visit thehiddenwiki.org to see a list of dark web sites. Be careful when browsing that list, though. There are plenty of illegal sites on it.
The dark web was created, then, for people interested in surfing the internet anonymously, and the sites within the dark web often cater to illegal activity.
But are you breaking the law just by visiting the dark web?
The dark web itself: Illegal or not?
The simple answer? The dark web itself is not illegal*. What’s illegal is some of the activity that occurs on the dark web. There are sites, for instance, that sell illegal drugs and others that allow you buy firearms illegally. There are also sites that distribute child pornography.
The dark web itself, though, is not illegal. It offers plenty of sites that, while often objectionable, violate no laws. You can find, for instance, forums, blogs, and social media sites that cover a host of topics such as politics and sports which are not illegal.
Is it illegal to access and browse the dark web?
Using Tor to access and browse the dark web is not illegal*. You will, though, have to be cautious. Surfing the dark web might not be illegal. But visiting certain sites, or making certain purchases, through the dark web is illegal.
If you use the dark web to purchase illegal drugs or firearms, that’s illegal. You won’t be committing criminal acts, though, if you use the dark web to participate in forums or to read hidden blog posts anonymously. There are exceptions. You could potentially be participating in illegal behavior if you participate in certain forums, especially if it includes threats, hate speech, or inciting or encouraging criminal behavior.
The key here is to use common sense. If something is illegal outside of the dark web, it will be illegal in this hidden section of the internet, too.
How much illegal activity is there on the dark web?
Looking for something illegal on the dark web? You’ll find plenty of options. In 2015, Daniel Moore and Thomas Rid, researchers at King's College in London, studied 2,723 sites on the dark web during a five-week period. The researchers said 57 percent of those sites hosted illicit material.
Of course, 2015 is a long time ago. The amount of illegal activity on the dark web has continued to grow. A University of Surrey 2019 study found the number of harmful dark web listings increased 20 percent since 2016. That accounted for 60 percent of all listings.
If you search the dark web, for instance, you’ll find online marketplaces that sell everything from Netflix passwords to stolen credit card account numbers. You’ll find other sites where you can buy illegal software, prepaid debit cards, and hackers for hire.
One of the better-known illegal sites on the dark web was Silk Road, an online trading site that sold fake IDs, heroin, and other illegal materials, that became a booming, if illicit, business after its founding in 2011. The site's operator, using the pseudonym Dread Pirate Roberts, became a sort of folk hero of the dark web, offering online surfers the chance to buy illegal goods anonymously using bitcoin.
The FBI, though, shut down Silk Road in late 2013. The agency also arrested Ross Ulbricht, the real person behind the Dread Pirate Roberts fake name. Ulbricht is now serving life in prison without the possibility of parole.
Two more recent examples of thriving criminal enterprises on the dark web were AlphaBay and Hansa. The FBI, U.S. Drug Enforcement Agency and the Dutch National Police, along with Europol, shut down these online marketplaces in the summer of 2017. According to Europol, AlphaBay and Hansa were responsible for the trading of more than 350,000 illegal commodities.
The marketplaces sold illegal drugs, firearms and malware. AlphaBay hosted more than 250,000 online listings for illegal drugs and more than 100,000 listings for stolen IDs, malware, firearms and counterfeit goods. Europol estimated that $1 billion of sales were made through AlphaBay since its founding in 2014.
Hansa wasn't quite so busy but ranked as the third-largest marketplace on the dark web as of its takedown in 2017, according to law-enforcement agencies.
It’s important to remember, though, that the dark web isn’t used solely for criminal activities. There’s a dark web version of Facebook, for instance, that people can use if they live in a country that censors social media. Reporters might use the dark web, too, to communicate with sources who want to protect their identities from hostile governments.
Is it safe to access and browse the dark web?
If you’re careful, you can safely access and browse the dark web. First, download the Tor browser, which will give you access to dark web sites and keep you anonymous while searching the sometimes-seedier corners of the internet.
Tor will allow you to visit websites that have the .onion extension. That’s why Tor’s full name is The Onion Router.
You might consider investing in a VPN, or virtual private network, too, when accessing and searching the dark web. A VPN helps keeps you anonymous when searching the internet, whether you are scanning the surface web or the dark web. When using a VPN, most likely only you and your VPN provider will know what sites you have visited. While it is legal to use a VPN in the U.S., it is always the user’s responsibility to familiarize themselves with other countries’ laws before using a VPN outside the U.S.
I found my personal information on the dark web. What should I do?
What if you find your own credit card, bank account, or other personal information on the dark web? What if you find sites selling your Social Security number or checking account number online?
Unfortunately, there’ s not much you can do to remove your information from the dark web once it’s there. You should, of course, change the passwords you use to access your banking and credit card accounts. You might also want to update your login credentials to any services you subscribe to (like Amazon Prime, Netflix, or a meal delivery service, for example) and your healthcare and insurance accounts.
You might also consider placing a credit freeze with each of the national credit bureaus, Experian, Equifax, and TransUnion. When you enable a credit freeze — which is free — you restrict access to your credit report which means lenders won’t be able to pull your credit. This can help prevent thieves from opening new credit cards or taking out loans in your name.
A credit freeze, though, cannot stop all criminal activity. If identity thieves have gained access to your credit card account, for instance, they can still use your card to make fraudulent purchases.
You should also order your credit reports from Experian, Equifax, and TransUnion. You are entitled to one free copy of each of your three reports once a year. You can order your reports from AnnualCreditReport.com.
Once you do, study these reports for anything unfamiliar or unusual. If your reports list a credit card account under your name that you don’t remember opening, that might be a sign that thieves have used your personal information to sign up for a card in your name. Call that credit card provider and tell them that you never opened the account.
If you suspect that you have been the victim of identity theft, file a report with the Federal Trade Commission here. Next, contact the companies at which the fraud occurred — usually your bank or credit card providers. Inform each of the three major credit bureaus, too.
Finally, consider investing in a credit-monitoring service that can alert you whenever potentially suspicious activity occurs on one of your financial accounts. This type of monitoring could help you catch identity theft before extensive damage is done.
You might consider signing up for Norton 360 with Lifelock, which provides identity theft protection, device security, and online privacy — all of which can be helpful in protecting your information from being accessed.