Key Takeaways
- Spanish police, acting on a request from German authorities, arrested a 35‑year‑old German citizen in Mallorca for allegedly relaunching the dark‑web marketplace Crimenetwork.
- The new version of Crimenetwork went live just days after the original site was shut down and its administrator arrested in December 2024.
- The relaunched platform attracted over 22,000 users and more than 100 vendors, facilitating trade in stolen data, narcotics, forged documents and other illicit goods.
- Criminal proceeds exceeded €3.6 million ($4.24 million); investigators seized roughly €194,000 ($228,400) in assets and collected extensive user‑transaction data for further intelligence.
- The original Crimenetwork administrator was sentenced in March 2025 to seven years and ten months in prison, with the court ordering the forfeiture of over €10 million.
- The operation highlights continued German‑Spanish cooperation, as well as assistance from Moldova’s National Investigation Inspectorate Center for Combating Cybercrimes.
- The BKA released a tongue‑in‑cheek video in German to publicize its success and warn that cybercrime does not pay.
Overview of the Operation
German and Spanish law‑enforcement agencies jointly disrupted a freshly launched incarnation of the notorious dark‑web marketplace Crimenetwork. Acting on a request from the Frankfurt am Main Public Prosecutor’s Office – Central Office for Combating Internet Crime (ZIT) and the Federal Criminal Police Office (BKA), Spanish investigators detained a 35‑year‑old German national at his residence in Mallorca last week. The arrest culminated a rapid investigative response that began shortly after the original Crimenetwork platform was taken offline and its administrator apprehended in December 2024. By moving swiftly, authorities prevented the new marketplace from establishing a durable foothold in the illicit ecosystem.
Arrest in Mallorca
The suspect, identified only as a German citizen, was taken into custody after Spanish police executed a search warrant at his home in Mallorca. Investigators allege that he was the mastermind behind the technical infrastructure that revived Crimenetwork just days after its predecessor’s shutdown. During the raid, officers seized electronic devices, server logs, and documentation that linked the individual to the operation of the marketplace. The arrest was carried out in close coordination with the ZIT and BKA, underscoring the depth of bilateral cooperation between Germany and Spain in tackling transnational cybercrime.
Infrastructure and Relaunch
According to the BKA, the accused built an entirely new online infrastructure to host Crimenetwork within a matter of days after the original site was closed. The relaunched marketplace quickly gathered momentum, amassing more than 22,000 registered users and over 100 active vendors. Its offerings mirrored those of the earlier version: stolen personal data, narcotics, forged identification documents, counterfeit currency, and a variety of other illegal goods and services. The platform primarily served customers from German‑speaking countries, reflecting the linguistic and geographic focus that had defined the original Crimenetwork since its inception in 2012.
Financial Impact and Seizures
The BKA reported that the new Crimenetwork generated revenues exceeding €3.6 million (approximately $4.24 million). Income derived from a commission on each transaction, coupled with monthly fees that vendors paid for advertising and sales licences. In the course of the operation, authorities seized roughly €194,000 ($228,400) in assets tied to the marketplace, including cryptocurrency wallets and fiat holdings. Additionally, investigators extracted extensive user and transaction data from the seized servers, which they intend to analyse for intelligence that could lead to further arrests and the identification of downstream criminal networks.
Legal Consequences and Sentencing
The administrator of the original Crimenetwork, who was arrested in December 2024, received a sentence of seven years and ten months in prison in March 2025. The court also ordered the forfeiture of assets valued at over €10 million, reflecting the scale of the earlier operation. The BKA indicated that the recently detained Mallorca suspect will face similar charges in a German court, including operating criminal trading platforms on the internet and trafficking in narcotics. Should he be convicted, he could anticipate a lengthy prison term and substantial financial penalties, reinforcing the judiciary’s stance that dark‑web facilitation will be met with severe punishment.
Collaboration with International Partners
Beyond the German‑Spanish effort, the BKA noted cooperation with Moldova’s National Investigation Inspectorate Center for Combating Cybercrimes. While the specifics of Moldovan involvement were not disclosed, the reference underscores the increasingly multinational nature of dark‑web investigations. Criminal operators often host servers, launder proceeds, or recruit vendors across borders, necessitating a coordinated response that leverages mutual legal assistance treaties, joint investigation teams, and real‑time information sharing among EU member states and partner nations.
BKA’s Video and Public Messaging
To publicize the success of the operation and deter future offenders, the BKA released a tongue‑in‑cheek video in German. The clip combines dark humor with factual statements about the seizure, emphasizing that cybercrime does not pay and that law‑enforcement agencies possess the tools and resolve to dismantle illicit online markets. By using an accessible format, the BKA aims to reach both potential offenders and the general public, reinforcing the message that participation in dark‑web marketplaces carries significant legal risk.
Conclusion
The swift takedown of the relaunched Crimenetwork demonstrates the effectiveness of coordinated international action against dark‑web commerce. From the arrest of a German national in Mallorca to the seizure of assets and data, the operation disrupted a multimillion‑euro illicit marketplace that had sought to capitalize on the vacuum left by its predecessor’s closure. Ongoing analysis of the seized information promises to yield further leads, while the legal proceedings against both the former and current administrators signal a firm judicial commitment to curbing cyber‑enabled crime. As law‑enforcement agencies continue to refine their techniques and strengthen cross‑border partnerships, the message remains clear: the dark web is not a safe haven for criminal enterprise.