Why Link Verification Matters
Phishing sites are the number one way users lose funds on the darknet. These fake sites look identical to real markets but are designed to steal your login credentials and cryptocurrency deposits. Always verify links before logging in or depositing funds.
Verification Methods
Most legitimate markets use PGP-signed mirrors. This means the market operators digitally sign a list of official URLs using their PGP key. To verify:
- Find the market's official PGP public key from multiple trusted sources
- Import the key into your PGP software (Kleopatra, GPG Suite, etc.)
- Verify the signed mirror list against the public key
- Only use URLs that appear in verified, signed documents
Red Flags for Phishing Sites
Watch for these warning signs that indicate a phishing attempt:
- Links from untrusted sources, forums, or search engines
- Site asks for your mnemonic/recovery phrase
- Unusual captcha or verification requirements
- Site looks slightly different from usual
- Certificate warnings or security notices
- Links sent via unsolicited messages
✅ Best Practice
Bookmark verified links immediately after verification. Never click links from external sources, always use your bookmarks. Consider using a dedicated browser profile for darknet access.