Do not have gold bars delivered to your home!

The administrator of one of the most well-known darknet platforms of the 2010s was not exposed through classic digital mistakes or server breaches, but through a far more “physical” detail – buying and having gold delivered directly to a home address.

The case concerns the alleged main administrator of Dream Market, one of the largest criminal darknet marketplaces before its shutdown in 2019. In a joint operation by US and German law enforcement, German citizen Owe Martin Andresen was arrested. Investigators link him to the platform’s financial operations and to laundering criminal proceeds through cryptocurrency and physical assets.

The key detail of the case is almost symbolic of the digital crime era. According to investigators, after withdrawing funds from cryptocurrency wallets linked to Dream Market revenues, the suspect converted a significant portion into physical gold bars worth around $1.7 million. More importantly, the gold was not stored in bank vaults or offshore structures, but ordered for delivery directly to his home in Germany. This transaction trail became one of the key leads that allowed investigators to identify and locate him.

Dream Market, according to the US Department of Justice, operated from 2013 to 2019 and was one of the largest darknet marketplaces. It facilitated the sale of illegal drugs, fake documents, stolen personal data, and other illicit goods and services. The platform operated via Tor, which anonymizes internet traffic, and used cryptocurrency for payments, allowing users to obscure the origin and destination of funds. Investigators say the scale was significant, involving tens and hundreds of kilograms of various drugs including heroin, cocaine, methamphetamine, oxycodone, and fentanyl. In practice, Dream Market became a full-scale shadow economy infrastructure combining digital anonymity with global drug trafficking logistics.

Law enforcement paid special attention to the platform’s internal structure. Over the years, several administrators and moderators operating under aliases such as “Oxymonster,” “KITT3N,” and “GOWRON” were identified and convicted. However, the main administrator known as “Speedstepper” remained unidentified for a long time. According to investigators, he controlled the key cryptocurrency wallets where commission revenues were accumulated.

After Dream Market was shut down in 2019, these wallets remained dormant, forming a kind of “frozen capsule” of illicit funds on the blockchain. However, in late 2022, investigators detected sudden activity: funds began moving and consolidating into new cryptocurrency addresses. According to the indictment, only someone with access to the original private keys – believed to be “Speedstepper” – could have initiated these transactions.

In 2023, these funds were gradually moved out of the crypto ecosystem and used to purchase physical assets. Through a US-based cryptocurrency service provider, gold bars were acquired and subsequently shipped to Germany. The total laundering volume exceeded $2 million and continued until 2025.

The final phase of the operation took place in May 2026, when coordinated US and German law enforcement actions led to the arrest of the suspect. Searches of his residence and related properties uncovered gold bars worth about $1.7 million, more than $23,000 in cash, and data pointing to additional cryptocurrency wallets and bank accounts allegedly linked to Dream Market proceeds. For purchasing gold from international suppliers, he reportedly used a US-based crypto payment processor (likely BitPay). The overall laundering scheme followed a chain: cryptocurrency → aggregated wallets → purchase of physical assets → delivery to Europe, totaling over $2 million in illicit funds.

The central irony of the case is that the attempt to “materialize” digital money ultimately led to the exposure of the scheme. Blockchain did not hide the transactions, and physical gold did not hide the owner.

Andresen has been charged with 12 counts of money laundering in the US and Germany. In the United States, he faces up to 20 years in prison per count. However, he is presumed innocent until proven guilty in court.

This case once again confirms that the era of “total anonymity” in the darknet is long over. Digital traces can still be hidden, but financial flows are almost impossible to erase.