Dossier · payments and security
Black Ops Market Payments: Monero-Only and Mandatory PGP
Two design decisions define the black ops market more than anything else in the record: it accepts Monero and nothing else, and it forces PGP on every user. Both are documented, corroborated — and both are marketed harder than they deserve.
What the sources agree on
This is rare in the BlackOps record, so it is worth stating precisely: every source that mentions payments says Monero-only. Sam Bent's April 2025 video opens with it ("it runs Monero only transactions that require mandatory PGP for all users"). The EverybodyWiki draft says the marketplace "conducts transactions using Monero". Even the promotional portals, which disagree with each other about fees and dates, agree there is no Bitcoin. When link farmers and researchers say the same thing, the fact is probably real.
Mandatory PGP is documented the same way, with one elaboration: a portal review describes deposit addresses being PGP-encrypted to each individual user — a design that, if accurate, addresses the classic deposit-swap phishing trick in which a buyer copies an address from a tampered page.
Why Monero-only became a cohort identity
Black Ops is not alone. DrugHub (launched August 2023 by people claiming White House Market pedigree) is Monero-only with mandated PGP login; Darkmatter (September 2022) is Monero-only and "walletless". The Monero-only cohort comparison covers all three. The shared logic is traceability: Chainalysis's 2026 Crypto Crime Report shows law enforcement and analysts following Bitcoin flows across darknet markets in near-real time, using exchange inflows and inter-market transfers as evidence. Monero's opaque ledger removes that class of blockchain evidence — it does not remove any of the others.
What the security model does not do
The portals sell "Monero + PGP" as safety. The documented history of the ecosystem says otherwise, and the distinction matters to anyone studying the black ops darknet market:
- It does not stop exit scams. Incognito Market ran through March 2024 with a security-first pitch and still exit-scammed — with a blackmail twist against its own vendors. Abacus followed in July 2025. Privacy coins change what investigators can trace, not what administrators can do. See the exit-scam record.
- It does not stop infiltration or seizures. Operation SpecTor (May 2023) arrested 288 vendors across nine countries; Operation Bayonet's Hansa takeover tracked users who believed they had migrated safely. PGP authenticates messages; it does not authenticate people. See the operations timeline.
- It does not stop phishing. The fake-link economy around this market — "original links" repositories, cloned portals, cloned wikis — targets exactly the users who believe cryptography already protects them. See the phishing audit.
- It does not make anything legal. Buying controlled substances or stolen data is the offence, whatever the rail it is paid on.
Reading the design choices as market positioning
There is a cooler analytical point here. Monero-only plus mandatory PGP plus employee accounts plus a variable fee is a vendor-recruitment package, not a buyer-safety package. Every feature reduces friction and risk for sellers — the scarce resource after a seizure wave emptied the western markets in mid-2025. Sam Bent made the same observation in April 2025: the market "leans heavily vendor-friendly". Whatever the black ops market's operators say in their banners, the architecture says they were courting supply in a supply crisis. The 2025 wave event file reconstructs that crisis from Chainalysis and NDARC data.
Dossier rule: this page explains payment and security design as documented facts about a market. It contains no account-creation steps, no wallet instructions, no addresses, and never will.
Next: fees, employee accounts and automated upgrades — the vendor-side record.