Selective Scamming — How Vendors Build Trust Then Vanish

The most dangerous vendor on a darknet market is rarely the one with a 3.9 rating and a hundred angry buyer reviews. It is almost always the one with a spotless track record, thousands of successful sales, and a reputation so solid that new buyers skip the escrow timer without a second thought. The selective scam-the practice of building trust over months only to vanish with a specific haul of funds-remains the quietest and most effective form of fraud in the ecosystem. Unlike the dramatic market-wide exit scam, which takes down entire platforms and makes headlines in seizure logs, the selective vendor scam operates like a slow leak. It is harder to spot, harder to trace, and far more common than most users want to admit.

The Economics of a “Good” Reputation

Individual vendors often reach a point of “reputation maturity” where they have sold enough product to accumulate both significant standing and escrowed funds. At that moment, the calculus shifts. Rather than compete at a higher-volume, higher-priced level with all the operational risk that entails, many simply choose to exit with the funds they already hold. This is not an act of desperation; it is a calculated business decision. The Wikipedia analysis of exit scams frames it bluntly: exit scams are a tempting alternative to a non-fraudulent shutdown when the operation is inevitably going to end anyway-whether from law enforcement pressure, burnout, or supply chain collapse.

But the selective scam is a more refined instrument. Instead of shutting down entirely, the vendor continues to fulfil most orders normally, maintaining the reputation that took a year to build. The scam only surfaces on specific targets: large orders, new buyers who have not yet learned the vendor’s patterns, or transactions where the risk of a dispute is low. By keeping the legitimate side of the business running, the vendor avoids the immediate red flags that follow a full exit. There is no sudden withdrawal of listings, no flood of “where is my pack?” threads on forums. Just a handful of buyers left holding nothing but a finalised order.

Why Physical Goods Are the Perfect Vehicle

The mechanics favour this approach. For physical products-which dominate most darknet catalogues-buyers must reasonably expect to wait before receiving orders. This grants the perpetrator a considerable grace period before the scam can no longer be plausibly denied. A buyer who orders on Monday and hears nothing by Friday assumes a postal delay. By the following Wednesday, they may open a dispute, but by then the vendor has already moved the funds. Compare this to digital goods, where buyers expect delivery within minutes and will raise the alarm immediately. The asymmetry is stark, and it is why selective scams cluster around physical shipping categories.

This grace period also allows the vendor to continue operating normally while the first, second, and even third victims are still waiting. By the time the disputes pile up, the vendor has already churned through more victims or is preparing to abandon the account entirely. The pattern repeats across markets with a grim regularity that experienced users recognise but rarely discuss openly.

Multisig Is Not the Shield It Appears to Be

Markets have tried to mitigate this with escrow systems, most notably the 2-of-3 multisig wallet, where the buyer, seller, and market administrator each hold a signing key. In theory, funds are safe because no single party can access them without another’s approval. In practice, the design has structural weaknesses that a determined vendor can exploit.

The most obvious flaw is administrator trust concentration. The administrator holds the third signing key, creating a central point of failure. In a dispute, the admin acts as arbiter-but the admin is also the one who can collude with a vendor or simply look the other way. Automated timer loopholes make this worse. Auto-release mechanisms send funds to the vendor after a set period (typically 7 to 14 days) unless the buyer raises a dispute. If a vendor executes a selective scam on a large order and the buyer is slow to open a dispute-perhaps because they are waiting on a reshipment promise-the funds release automatically. No administrator intervention needed. No red flags raised.

Evolution, the market that collapsed in 2015 with an estimated $12 million in bitcoin held in escrow, remains the canonical example of how even the most trusted administrators can turn. But the same vulnerability exists at the vendor level. A vendor with a long history of clean multisig transactions has effectively built a case for trust. When they finally choose to cash out on a single large order, the escrow system does nothing to stop them. It only slows them down slightly.

The Warning Signs Are There-If You Look

The Abacus market collapse in mid-2025 offers a useful case study in how these events unfold, even if it was a market-level exit rather than a vendor-level scam. On-chain analysis showed daily deposits collapsing from around $230,000 a day to roughly $13,000 a day in the weeks before the lights went out. The public-facing site still looked normal. The money flow did not. That same pattern repeats at the vendor level: withdrawals get slow or “under maintenance,” communication tapers off, and the informed buyers leave early. The vendors who are about to selective scam often start delaying shipments slightly, offering excuses about postal strikes or customs delays. They may also begin demanding finalise-early (FE) on larger orders, bypassing escrow entirely.

One recurring signal is the vendor who suddenly shifts their terms. A vendor who previously insisted on escrow for everything may start pushing for FE on a specific listing or for a particular customer. Markets often require FE for new vendors until they establish reputation, but a veteran vendor requesting it on a large order is a red flag. The auto-finalize window-typically 7 to 14 days-can also be weaponised. A buyer who is told “your pack is on the way, just wait a few more days” may hesitate to open a dispute, and the timer runs out.

The Role of Vendor Bonds and Market Fees

Markets attempt to filter out bad actors through vendor bonds-typically $200 to $500 in cryptocurrency paid by new vendors to register. These bonds reduce spam vendors and scammers at the entry level, but they do little to deter a vendor who has already accumulated far more in reputation than the bond is worth. Once a vendor has thousands of dollars in escrowed funds or has built a name that allows them to command FE terms, the bond becomes an acceptable loss. Market fees and commissions, typically 2 to 10% per sale, also factor into the decision. A vendor who is profitable at current volume may calculate that a single large score is worth more than months of paying commissions on smaller sales.

This is not a hypothetical. The pattern has been observed across markets and across years. Wall Street Market, which was seized in 2019, had $14.2 million in cryptocurrencies stolen just before authorities shut it down-an exit scam tied to a market shutdown, but a number that demonstrates the scale of funds flowing through these platforms. The overall damage caused by exit scams was estimated to exceed $4.3 billion in 2019 alone. Vendor-level selective scams do not generate headlines at that scale, but they happen far more frequently.

What the Buyer Can Actually Do

The unpleasant truth is that escrow protects you from a rogue vendor only if you use it correctly-and even then, only within limits. The core weakness lies in centralising trust within administrators and in the auto-release mechanisms that favour vendors. For a buyer, the practical rules are simple but rarely followed. Never leave money on a market longer than a single trade needs. Treat any balance left in a market wallet as money you have chosen to gamble. And perhaps most importantly, do not let a clean track record lull you into skipping the dispute window on a large order.

The marketplace ecosystem in 2026 is dominated by several platforms, and the vacuum left by Abacus has been filled by others, including Torzon, which built uptime and recruited vendors during Abacus’s decline. But the change of platform changes nothing about the underlying dynamics. A vendor who has built a reputation on one market can do the same on another, and the same behavioural patterns apply. The selective scam is not a bug in the system; it is a feature of any environment where trust is commoditised and enforcement is absent.

Research Only, Not a How-To

This analysis is provided for research and harm-reduction purposes only. It is not a guide to defrauding anyone, nor does it endorse the use of darknet markets, which operate outside the law in most jurisdictions. The anonymity of these platforms means there is no recourse when a transaction goes wrong. Cryptocurrency payments are irreversible and cannot be recovered through a chargeback. Any funds sent to a vendor who decides to selectively scam are gone, and contacting law enforcement is not a viable option for participants who are themselves knowingly engaging in illegal activities.

The lesson of selective scamming is simple, even if it is uncomfortable: reputation on a darknet market is a liability you cannot insure. It is built through dozens of successful transactions and lost in a single decision. The vendor who vanishes after months of clean service is not a traitor to the community-they are a rational actor who has calculated that the value of their reputation is lower than the value of the funds they hold. Until users internalise that reality, the selective scam will remain the most effective fraud in the ecosystem.