요약
- U.S. authorities charged two Jacksonville brothers with operating “BarbaraWhite,” a prolific darknet vendor account accused of distributing counterfeit pills containing highly potent nitazenes.
- Blockchain analytics helped investigators trace cryptocurrency activity from darknet marketplace sales to a wallet network, ultimately linking the operation back to one of the arrested brothers.
- The case demonstrates the real-world value of tracing illicit crypto activity: investigators were able to identify the alleged operators behind a darknet vendor linked to at least 12 overdoses across the U.S. in recent years, including three fatalities.
Over the past decade, synthetic opioids have deepened America’s drug crisis, accounting for roughly 69% of the more than 100,000 overdose deaths recorded at the crisis’s peak in 2023. Counterfeit pills, often sold online and disguised as legitimate medications, have become a particularly deadly part of the illicit drug supply.
Darknet marketplaces that accept cryptocurrency play a major role in this ecosystem, making it easier for criminal drug vendors to reach potential customers. They rely on crypto to send and receive illicit payments, giving the vendors an air of perceived anonymity.
But crypto’s role cuts both ways. The same technology used to move funds across illicit drug networks can also help expose them. Crypto tracing tools allow investigators to bust open illicit networks and expose the individuals behind online drug operations.
A newly unsealed federal case illustrates this dynamic. On Aug. 28, the U.S. Justice Department announced that two Jacksonville brothers were arrested for conspiracy to distribute nitazenes, a class of highly potent synthetic opioids that can be even more dangerous than fentanyl. The charges cap a multi-year investigation into “BarbaraWhite,” a prolific darknet vendor linked to at least 12 overdoses across the U.S. in recent years, including three fatalities. Authorities allege that brothers Vladislav and Stanislav Chernyshov were behind the operation.
Active since at least 2020, BarbaraWhite sold hundreds of thousands of pills across major darknet markets, including pills marketed as “FENT FREE” that frequently contained highly potent nitazenes. Investigators combined blockchain analytics with marketplace data, postal records, surveillance, and undercover purchases to trace the operation from its online activity to its alleged real-world operators.
Tracing narcotics vendors who use crypto
Blockchain analytics software provided investigators with another view of the alleged operation, helping to uncover the financial infrastructure behind the darknet sales and link BarbaraWhite’s activity back to Stanislav directly.
Investigators reviewing data obtained through a separate investigation identified several Bitcoin addresses that BarbaraWhite allegedly used to withdraw proceeds from drug sales on darknet marketplace Nemesis, Bohemia and Abacus. Blockchain analysis of this network led the investigators to Stanislav.
The graph below — a recreation of the Chainalysis Reactor graph investigators included in the affidavit — shows how funds flowed between wallets linked to BarbaraWhite and other addresses associated with potential buyers and other vendors.
Blockchain analysis of the BarbaraWhite wallet cluster revealed telling payment activity. According to the affidavit, the wallets in question received approximately $220,000 from darknet marketplaces and sent $230,000 in cryptocurrency, including payments to a postage service, another drug vendor, and a China-based chemical supplier.
Notably, approximately $7,210 flowed to a China-based research chemical supplier, which investigators allege was a source of the nitazenes sold by BarbaraWhite. Suppliers like this often sell analogs of synthetic drugs under the guise of being for “research purposes” or “not for human consumption.” However, these substances can be chemically modified to create new versions of controlled drugs, allowing the illicit market to evolve fast, often faster than testing and regulation can keep pace.
Tracing these payments helped investigators map the wider infrastructure surrounding the alleged operation and ultimately link BarbaraWhite to Stanislav. Investigators identified common interactions between BarbaraWhite wallets and other wallets that could be traced to Stanislav’s mobile payment account.
This investigation demonstrates how blockchain analytics software can help connect elements of an investigation beyond cryptocurrency itself. In this case, tracing crypto payments helped connect marketplace activity, suppliers, and services across the internet, ultimately linking this activity back to real world individuals and providing a broader picture of day to day operations.
If you’re interested in learning more about Chainalysis’ crypto tracing tools, request a demo of Reactor.
FAQ
What was BarbaraWhite?
BarbaraWhite was a prolific darknet drug vendor that U.S. authorities allege was operated by Jacksonville brothers Vladislav and Stanislav Chernyshov. According to the FBI affidavit, BarbaraWhite had operated since at least 2020 across darknet marketplaces including Bohemia, Nemesis, and Abacus, selling counterfeit pills and other drugs. Records from just three marketplaces indicate that BarbaraWhite sold more than 95,000 counterfeit pills, signalling the scale of the operation.
How do investigators trace drug vendors who use crypto?
Federal investigators can use crypto-tracing tools like Reactor to recreate complex financial networks, including drug payments from customer to vendor, and procurement payments that vendors make to their suppliers. Crypto tracing tools provide agents with valuable insights into who the various entities are. Agents can utilize this information to target their investigation and obtain subpoenas that break through the perceived anonymity of cryptocurrency.
How was cryptocurrency used in the BarbaraWhite operation?
According to the affidavit, investigators identified Bitcoin addresses allegedly used by BarbaraWhite to receive and send cryptocurrency. Blockchain analysis of this activity showed funds moving between wallets associated with BarbaraWhite and several counterparties, including darknet marketplaces, another alleged drug vendor, a cryptocurrency-based postage service, and a China-based chemical supplier. In total, the target wallets identified by investigators had received approximately $220,000 and sent approximately $230,000 in cryptocurrency.
How did blockchain analytics help investigators identify BarbaraWhite?
Investigators used darknet marketplace data to identify Bitcoin addresses that BarbaraWhite allegedly used and then were able to identify connections between the BarbaraWhite wallet activity and wallets that transacted back to a mobile payment app account belonging to Stanislav Chernyshov.
Why is the BarbaraWhite case significant?
The case demonstrates how crypto tracing can complement traditional investigative techniques to connect pseudonymous online activity with real-world actors and infrastructure. That attribution can have significant real-world consequences: investigators linked BarbaraWhite drug shipments to multiple fatal and non-fatal overdoses around the U.S.
이 웹사이트에는 links 이 관리하지 않는 제3자 사이트로의 링크가 포함되어 있습니다. 체이널리시스, Inc. 또는 그 계열사(이하 총칭하여 “체이널리시스”)의 통제 하에 있지 않은 제3자 사이트로의 링크([email protected])를 포함하고 있습니다. 이러한 정보에 대한 접근이 해당 사이트 또는 그 운영자와의 제휴, 지지, 승인 또는 추천을 의미하는 것은 아닙니다 체이널리시스 해당 사이트나 그 운영자와의 제휴, 지지, 승인 또는 추천을 의미하지 않으며, 체이널리시스 해당 사이트에 게시된 제품, 서비스 또는 기타 콘텐츠에 대해 책임을 지지 않습니다.
본 자료는 정보 제공만을 목적으로 하며, 법률, 세무, 금융 또는 투자 자문을 제공하기 위한 것이 아닙니다. 수신자는 이러한 유형의 결정을 내리기 전에 본인의 자문가와 상담해야 합니다. 체이널리시스 는 수신자가 본 자료를 이용함에 따라 내린 어떠한 결정이나 기타 행위 또는 부작위에 대해서도 어떠한 책임도 지지 않습니다.
체이널리시스 본 보고서에 포함된 정보의 정확성, 완전성, 시의성, 적합성 또는 유효성을 보장하거나 보증하지 않으며, 해당 자료의 어느 부분에서든 발생하는 오류, 누락 또는 기타 부정확성으로 인해 제기되는 어떠한 청구에 대해서도 책임을 지지 않습니다.
