Keep Factually independent

Whether you agree or disagree with our analysis, these conversations matter for democracy. We don't take money from political groups - even a $5 donation helps us keep it that way.

Loading...Time left: ...
Loading...Goal: $500

Fact check: What are some common signs of a .onion site scam?

Checked on August 7, 2025

1. Summary of the results

Based on the analyses provided, several common signs of .onion site scams have been identified:

Primary Scam Types:

  • "Rip and runs" - vendors who take payment and disappear without delivering products [1]
  • Referral scams - fraudulent schemes involving fake referrals [1]
  • Vendor impersonations - criminals posing as legitimate sellers [1]
  • Blackmail schemes - extortion attempts targeting users [1]
  • Backdoor malware - malicious software designed to compromise user systems [1]
  • Phishing attacks - attempts to steal credentials and personal information [1]

Red Flags to Watch For:

  • Promises of guaranteed products or services - unrealistic guarantees are often scam indicators [2]
  • Requests for payment in cryptocurrency - while common on dark web, can indicate scams when combined with other red flags [2]
  • Lack of transparency about site operations or ownership [2]
  • Sites found through unreliable sources like HiddenWiki, random search engines, Telegram channels, or untrusted websites [2]

Fraudulent Data Techniques:

  • Recycling old public leaks as new data [3]
  • Fabricating entirely fake data [3]
  • Mixing real with fake data to appear legitimate [3]

2. Missing context/alternative viewpoints

The original question lacks important contextual information about the scale and prevalence of criminal activity on .onion sites. According to the analyses, 95% of content on onion sites consists of criminal activity, including drugs, cybercrime, and counterfeit money [4].

Alternative platforms and risks:

  • Telegram has become an appealing alternative to traditional dark web platforms due to its default encryption and wider reach [4], suggesting scammers are diversifying their operations beyond .onion sites.

Legitimate resources for verification:

The analyses reveal that reputable directories exist for finding trustworthy .onion sites, including:

Law enforcement perspective:

The FBI and international partners actively target these sites, with over 400 .onion addresses being targeted in global enforcement actions, including dozens of dark market websites [5]. This demonstrates that legitimate authorities are working to combat these scams.

Broader security implications:

Using Tor and .onion sites poses additional cybersecurity risks including bypassing security controls, exposing corporate networks to malware, and potential reputational damage [6].

3. Potential misinformation/bias in the original statement

The original question appears neutral and factual in its request for information about scam identification. However, it lacks important context about:

  • The overwhelming prevalence of criminal activity (95%) on .onion sites [4]
  • The existence of legitimate resources and directories that can help users avoid scams [2]
  • Specific safety practices such as only ordering domestically and avoiding direct cryptocurrency transfers from exchanges to dark net market deposit addresses [2]

The question could benefit from acknowledging that while information about scam identification is valuable for awareness and research purposes, engaging with .onion sites carries inherent legal and security risks regardless of scam avoidance measures [6].

Want to dive deeper?
What are the most common types of scams on .onion sites?
How can I verify the authenticity of a .onion website?
What are the risks of using .onion sites for financial transactions?
Can .onion sites be used for legitimate purposes, and if so, what are they?
How do law enforcement agencies track and shut down .onion scam sites?