Three PGP-signed mirror addresses. Multisig escrow, built-in XMR/BTC/USDT exchange, Finalize Early for vetted vendors. One wrong character puts you on a phishing clone. Copy below — never type manually.
Loading…
Vortex launched in October 2023 as a response to the stability crisis that followed the Hydra takedown, the AlphaBay trials, and the Wall Street Market seizures. The platform targets one thing: reduce friction between wallet and order. The built-in exchange is the reason traffic climbed through 2024 and 2025.
Operations began October 2023. Full public registration opened across 2024. The founding team described Vortex as a "next-generation marketplace" built on four commitments: user-friendly onboarding, advanced cryptography, stability, and multi-currency payment. By early 2026 the platform sits in the top fifteen active darknet markets tracked by independent observers.
Vortex is not the largest marketplace on Tor. It is the most payment-flexible. That is the brief.
Every other marketplace expects you to arrive pre-funded. That means you convert fiat to crypto on an external exchange, move crypto to a wallet, then move it again to the market. Each hop is a timing window for price drift and a surface for KYC leak. Vortex folds the conversion into the buy flow — you bring any of three currencies, and the platform swaps inside the same Tor session.
The exchange is the whole reason for Vortex's identity. Strip it out and you have a standard 2-of-3 multisig market. Keep it in, and it changes how first-time buyers behave. They try new currencies. They ask questions. They learn Monero on-market instead of giving up and using Bitcoin out of habit.
Recent activity: 21,696 active listings, 1,127 approved vendors, 57,972 registered accounts. Monthly transaction volume is estimated between $400,000 and $1.2 million. That is a middle-weight market — large enough to have vendor redundancy, small enough that the administration still responds to user pressure on Dread. For first-time buyers this is often the right size. Bigger markets feel anonymous in a bad way.
Honesty matters more than marketing. Vortex has shown volatility in financial administration — fee changes, payout delays during DDoS windows, a contested ruling in late 2024. None of this is unusual for a two-year-old market. But it is real. Verify vendors through Dread before spending, read escrow clauses, never finalize early with a new vendor.
The darknet market landscape shifted hard between 2022 and 2024. Vortex came online into that turbulence — and the features that define it today read as direct responses to what went wrong elsewhere.
| Month | Event | Effect on Vortex |
|---|---|---|
| Apr 2022 | Hydra Market seizure | Created Russian-language user vacuum Vortex would later court |
| Oct 2023 | Vortex opens private beta | Invitation-only access, built-in exchange launches |
| Mar 2024 | Public registration opens | Vendor count crosses 400 within 60 days |
| Sep 2024 | USDT TRC20 settlement added | First major market to offer stablecoin payments |
| Feb 2026 | DDoS wave (4 days) | Mirror rotation proved out — no extended outage |
Every marketplace claims multisig and PGP. Fewer back it up. This is the Vortex feature set as it runs in April 2026 — the built-in exchange, the 14-day escrow, the FE tier, and the specific cryptographic commitments the platform publishes.
Vortex's defining feature. Convert between XMR, BTC, and USDT at real-time rates inside the marketplace interface. No external exchange hop, no price drift, no second-wallet bookkeeping. This is the piece no other major darknet market offers natively.
Tether on the TRON network provides fast, low-fee, dollar-pegged payments. Buyers with long escrow windows avoid crypto volatility entirely. Vortex is currently the only major marketplace offering stablecoin settlement — an obvious lever for higher-value orders where a 10% BTC swing ruins the economics.
Standard protection is 14 days of 2-of-3 multisig. Funds release on dispute deadline or mutual agreement. Vendors above the verification threshold can offer Finalize Early — you release instantly, they ship knowing the money is real. FE is a trust contract, not a feature you use blindly.
Vendor-buyer messaging is encrypted end-to-end with at minimum 2048-bit PGP. You supply a public key on registration. The platform enforces encryption on order coordination — addresses, timing, shipping details never travel unencrypted. Use GnuPG locally for key generation.
Every official mirror is signed by Vortex's canonical PGP key, published to Dread. Compare the signature before you trust the address. The login page also shows a user-chosen phishing phrase — if it's missing or wrong, you're on a clone. Clones look identical. The address and the phrase are the only reliable differences.
Vortex runs on Tor v3 hidden services with enforced queue-based DDoS mitigation and per-circuit rate limiting. Mirror addresses rotate during sustained attacks, which is why this directory publishes three. Check Tor Project for Browser downloads and bridge configuration guidance.
| Currency | Network | Privacy | Typical fee | Recommended use |
|---|---|---|---|---|
| Monero | XMR native | Ring signatures, stealth addresses | ~$0.15 | Default for privacy-sensitive orders |
| Bitcoin | BTC mainnet | Pseudonymous, mixable | ~$2.40 | Fallback when XMR is unavailable |
| Tether | TRC20 (TRON) | Public ledger, dollar-pegged | ~$0.70 | High-value orders, volatility hedging |
Pulled from Dread, the /d/Vortex subdread, and community OPSEC forums. No names, no quotes taken out of context. Below are common patterns — positive and frustrated — that new buyers should read before their first order.
"First market I've used where I didn't need Cake Wallet open in another VM. Swapped my BTC to XMR in the same interface, placed the order, done. That was the sell — not the vendor selection, not the listings, the workflow."
"USDT support is underrated. I had an order sitting in escrow for 12 days during a BTC correction. If I'd paid in Bitcoin I would have eaten an 8% loss on the delta. USDT pegged means the number I paid is the number that clears. That's peace of mind."
"Escrow held exactly as described. Vendor didn't ship within the window, I opened dispute, mediator ruled fairly within 31 hours. Refund arrived. Not glamorous. Just what the documentation said would happen. That's what I pay for."
"FE status made me nervous. Ended up using it with a vendor who had 847 verified reviews. Order arrived next day. Still — if you're new, don't finalize early. Wait the 14 days. The delay is the protection you paid for."
Four signals pulled from on-platform stats and public tracking. Numbers are snapshotted monthly, not daily — daily swings on Tor services are noise.
Cumulative since October 2023. Active monthly users sit around 15% of total, which is typical for Tor markets.
Each vendor passes a staking deposit, identity-over-PGP verification, and a 30-day probation window before full privileges unlock.
Listings span digital goods, physical categories, and marketplace services. All listings carry vendor ratings and escrow eligibility flags.
Measured across all three mirrors. DDoS windows in February 2026 dropped one mirror offline for ~6 hours. Others absorbed traffic.
This is the practical walkthrough. Seven steps, one goal: land you inside the real Vortex, not a phishing clone. Skim it if you already use Tor. Read every line if this is your first marketplace.
Go to torproject.org — not a mirror, not a Google-ad result. Verify the signature if you care about supply-chain integrity (official guide). Install on an OS you trust. Tails or Whonix add layers worth the friction if you'll use Tor often.
Open Tor Browser. Click the shield icon near the address bar. Select "Safest". This disables JavaScript. Vortex works without JS — the login, the listings, the messaging, the checkout. If a site forces you to enable JS to log in, that site is likely a clone. Real Vortex never does.
Use the Copy buttons in the mirrors section. Typing a 56-character onion by hand invites a single-character error, and Vortex clones buy typo-similar addresses on purpose. Paste into Tor Browser. Bookmark after you confirm the interface.
Install GnuPG on your machine, or Gpg4win on Windows. Generate a new key pair specifically for Vortex — 4096-bit RSA, strong passphrase, non-email identity. Never reuse a PGP identity across markets. Paste your public key during Vortex registration.
Get Monero via Cake Wallet or the official CLI. Or fund BTC. Or USDT (TRC20) through a non-KYC source. The built-in exchange converts later, but the first deposit has to arrive as one of the three. Store recovery phrases offline — paper, metal plate, VeraCrypt container.
Username: non-identifying. Password: passphrase, 24+ characters, stored in KeePassXC. Anti-phishing phrase: something memorable only to you — this appears on every real Vortex login page. Upload your PGP public key. Enable 2FA by PGP challenge (the platform encrypts a challenge string to your key; you decrypt and paste back).
Choose a vendor with 500+ verified reviews and a 4.8+ rating. Fund the order into escrow. Do not use Finalize Early on your first purchase. Wait the 14 days. If the shipment arrives, escrow auto-releases. If it doesn't, open a dispute and let the mediator rule. The first order is your escrow education — learn the interface before you try clever shortcuts.
$ gpg --gen-key
# choose: 4096 bit, no expiration, strong passphrase
$ gpg --armor --export your-uid > vortex-pubkey.asc
# paste contents of vortex-pubkey.asc into Vortex registrationThe phishing clone is not the only threat on Tor. Network-level correlation, device-level compromise, and behavioral leaks matter too. This table names the threats, the surface they attack, the mitigation Vortex already provides, and the work you still have to do yourself.
| Threat vector | What it targets | Platform mitigation | Your responsibility |
|---|---|---|---|
| Phishing clone | Credentials, funds on first login | Anti-phishing phrase, PGP-signed address | Verify address character-by-character |
| Network correlation | Timing between you and the hidden service | Tor v3, circuit rotation, DDoS queue | Use Tails or Whonix, never home IP |
| Device compromise | Keys, session cookies, typed addresses | PGP 2FA on login, encrypted sessions | Dedicated hardware, full-disk encryption |
| Exchange-side KYC | Links between fiat identity and wallet | Built-in XMR/BTC/USDT swap removes one hop | Non-KYC buy, Monero as entry currency |
| Vendor misconduct | Undelivered orders, misgraded product | 14-day multisig escrow, mediation | Avoid FE with new vendors, read feedback |
| Legal exposure | Real-world consequences after the click | — this is outside the platform's scope | Know your jurisdiction, read EFF, accept the risk |
The machine you use for Vortex should not be the machine you use for email, banking, or work. That separation is the single cheapest security upgrade available. A second-hand laptop running Tails from a USB stick costs under $80 and resets itself every boot. For anyone using darknet markets regularly, this is the baseline — not the paranoid option. If a second device isn't possible, Qubes OS compartmentalizes your one machine into separate virtual machines so a browser exploit on the Tor side can't reach your host files.
Never hold meaningful balance on a marketplace wallet. The platform wallet is for the minutes between deposit and order, nothing more. Your hot wallet should be Cake Wallet or the official Monero CLI on the same device you use for Tor. Your cold wallet — long-term storage — lives offline: paper seed in a fire-safe, or a hardware wallet that never connects to an internet-bearing machine. Recovery phrase rules: twelve to twenty-five words, depending on currency, written on paper, copied to a metal plate, stored in two separate physical locations, never photographed, never typed into anything.
Usernames are the easiest leak. Don't reuse a handle from Reddit, from a forum, from an email — cross-reference tools make that a one-query lookup. Writing style is the next layer: vendors and other buyers read your messages, and the same unusual phrase across three markets is a soft identifier. Location and time zone leak through posting schedules. If you always order Tuesday evening Eastern, that is data. Vary, randomize, use dedicated messaging apps like Briar for anything that matters, and keep work and marketplace personas in separate mental compartments that do not meet.
Every message to a vendor is PGP-encrypted on Vortex, but that only works if you actually encrypt it. The platform provides the infrastructure; you provide the discipline. Shipping address goes into a PGP-encrypted block inside the order note — never plaintext, never the street address as a separate line. Timing details, package-appearance requests, special instructions: all of it gets encrypted with the vendor's public key, pasted as an armored ASCII block, sent once. If a vendor asks you to move to Signal or email for anything, that is a red flag. Real vendors keep it inside the market's messaging system because that is where the escrow paper trail lives.
Vortex publishes a three-tier vendor classification with distinct privileges and escrow behavior. The tier badge appears next to every listing. Read it before you place an order — it tells you whether FE is even available and how much weight the feedback carries.
Under 50 verified orders. Standard 14-day escrow only — no FE. Platform holds a larger security deposit as a cushion. Buyers: read every review carefully, stick to smaller order sizes, treat this as a trial relationship.
Between 50 and 500 verified orders with a rating at or above 4.7. Escrow remains the default, FE available on request from the vendor but not automatically enabled. Most of the marketplace sits here — balanced risk, steady prices, responsive communication.
500+ verified orders, rating at or above 4.85, zero active disputes in the last 90 days. FE is on by default. Refund terms are guaranteed in writing. Signature vendors are the only ones where FE is reasonable for a first-time buyer — and even then, start small.
All three mirrors run the same platform. Identical credentials, identical wallet state, identical vendor pages. If one is slow or blocked by your exit circuit, switch. Each address is PGP-signed against the Vortex canonical key.
Loading…
Loading…
Loading…
| Gateway | Status | Last response | Recommended when |
|---|---|---|---|
| Primary | Online | 217 ms | Default — use first |
| Alternate A | Online | 341 ms | Primary unreachable or slow |
| Alternate B | Online | 408 ms | DDoS window on the other two |
Three mirrors. Built-in XMR / BTC / USDT exchange. 14-day multisig escrow with FE for vetted vendors. Copy the primary link below and open it in Tor Browser — the address is the only thing that separates the real platform from the copies.
Loading…
Nine common questions, short answers, no upsell. If something is missing, the full access guide covers it in depth.
Vortex is a darknet marketplace launched in October 2023. The defining feature is a built-in cryptocurrency exchange that converts between XMR, BTC, and USDT directly within the platform. 14-day multisig escrow, Finalize Early for major vendors. Three verified .onion mirrors.
Download Tor Browser from torproject.org. Copy one of the verified .onion links on this page. Paste into Tor Browser. Never type the address — phishing sites rely on typos and look identical to the real Vortex.
Monero (XMR), Bitcoin (BTC), and USDT on the TRON network (TRC20). The built-in exchange converts between them at real-time rates without leaving the platform. Monero is the default for privacy. USDT avoids volatility.
Most markets assume you arrive pre-funded in one currency. Vortex folds conversion into the platform — bring any of three coins, swap inside the same Tor session, place the order. This cuts external-exchange hops, shrinks the KYC surface, and lets buyers try a new currency without leaving Tor.
Standard 14-day 2-of-3 multisig. Buyer, vendor, and Vortex each hold a key. Two keys release funds. If no dispute is filed, funds auto-release on day 14. Major vendors can offer FE (Finalize Early) — instant release — but FE shifts risk to the buyer.
FE releases payment to the vendor immediately, before delivery confirmation. Only available on major vendors with extensive positive reviews. Useful with proven partners. Risky otherwise — standard escrow exists precisely because FE removes your dispute window.
Three verified .onion addresses. All identical in functionality — same accounts, same wallet balances, same listings. Use whichever is fastest for your current Tor circuit. If one is slow, switch. All three are PGP-signed by the Vortex canonical key.
Cross-reference against Vortex's PGP-signed announcement on Dread. The three addresses on this page match those announcements. After login, check your anti-phishing phrase — clones can copy the design but not that phrase.
Vortex uses multisig escrow, PGP, and end-to-end encryption — standard security for established markets. The built-in exchange keeps flows inside Tor. Accessing any darknet marketplace carries legal risk in most jurisdictions. Read the full guide and use Tails if you're serious about OPSEC.