What Happened to AlphaBay?
Most dark web marketplace stories end with a seizure banner and an arrest. AlphaBay's story kept going — through a death in custody, a decoy marketplace, and an unexpected relaunch years later.
AlphaBay, once the largest dark web marketplace by transaction volume, was seized by international law enforcement in July 2017 as part of a coordinated operation that also involved the covert takeover of a second marketplace, Hansa, to catch displaced AlphaBay users. Founder Alexandre Cazes was arrested in Thailand and died in custody days later. AlphaBay's co-founder, known only as DeSnake, was never publicly identified and resurfaced in 2021 to relaunch the marketplace under the same name, which has continued operating with periodic law enforcement attention since.
In July 2017, one of the largest dark web marketplaces in history vanished overnight — and then, quietly, so did a second one, weeks earlier than anyone realized.
AlphaBay's users didn't just lose their marketplace. Many of them unknowingly walked straight into a second one that police were already secretly running.
TL;DR
Quick answer
AlphaBay was seized in July 2017 alongside a covert takeover of Hansa Market; founder Alexandre Cazes was arrested and died in custody days later; co-founder DeSnake was never identified and relaunched AlphaBay under the same name in 2021.
A story with more chapters than a typical takedown
From largest marketplace to seizure, death, and an unlikely sequel
Before its 2017 takedown, AlphaBay had grown into what prosecutors and researchers described as the largest dark web marketplace by transaction volume at the time, trading in drugs, stolen data, counterfeit goods, and other illicit items across a large international user base.
The operation that ended it, sometimes referred to publicly as involving components of what's been called Operation Bayonet, was unusually layered: rather than simply seizing AlphaBay and announcing it immediately, investigators also covertly took control of a second major marketplace, Hansa, running it quietly for weeks to catch displaced AlphaBay vendors and buyers migrating there after the initial shutdown.
Founder Alexandre Cazes was arrested in Thailand in July 2017 and died in custody days later, in what Thai authorities ruled a suicide. His co-founder, publicly known only by the handle DeSnake, was never named in connection with the case — and remained entirely unidentified when, in 2021, someone using that same handle resurfaced to relaunch AlphaBay, which has continued operating, with its own subsequent law enforcement attention, in the years since.
The short version
- AlphaBay was seized in July 2017 as part of a coordinated operation that also covertly took over a second marketplace, Hansa.
- Founder Alexandre Cazes was arrested and died in custody days later.
- Co-founder DeSnake was never publicly identified and relaunched AlphaBay in 2021.
AlphaBay's full arc
- 2014
AlphaBay launches and grows into one of the largest dark web marketplaces.
Became a major hub for drug and stolen data trade following Silk Road's earlier 2013 takedown.
- Early 2017
Dutch police covertly seize control of Hansa Market's servers without announcing it publicly.
Set up the second half of the coordinated operation before AlphaBay's own takedown even occurred.
- July 2017
AlphaBay is seized; founder Alexandre Cazes is arrested in Thailand.
Ended the largest dark web marketplace of its time in a single coordinated action.
- July 2017
Cazes dies in custody days after arrest, ruled a suicide by Thai authorities.
Closed the case against the identified founder before formal prosecution could proceed.
- 2021
Someone using the DeSnake handle publicly resurfaces and relaunches AlphaBay.
An unusual case of a major marketplace brand returning years after its apparent end.
Investigators quietly ran a second marketplace to catch people fleeing the first
Before publicly seizing AlphaBay, Dutch police had already covertly taken control of Hansa Market's infrastructure, then waited as displaced AlphaBay vendors and buyers migrated there in the days following the AlphaBay shutdown, walking directly into a marketplace investigators were already monitoring.
It's one of the more elegant pieces of investigative strategy documented across this whole topic area — anticipating exactly how users would react to one takedown, and positioning a second trap accordingly, ahead of time.
Luxury cars and properties, not broken encryption, reportedly helped identify the founder
Public reporting on the investigation describes Cazes being connected to AlphaBay partly through digital forensic evidence tied to his personal accounts, alongside a lifestyle involving luxury vehicles and real estate purchased using funds later linked to the marketplace's operations.
It's a recurring pattern across major dark web cases covered elsewhere in this series — the anonymity technology itself tends to hold up; it's ordinary, real-world lifestyle choices that repeatedly become the actual point of failure.
The marketplace's brand outlived the person who built it by years
Cazes died within days of his arrest in 2017, yet the AlphaBay name itself returned to active operation in 2021 — meaning the marketplace's actual public identity proved considerably more durable than the man most associated with founding it. It's an unusual outcome in this whole topic area: most major marketplace brands end permanently with their founder's downfall, but AlphaBay's name, and apparently its remaining co-founder, simply waited out the attention and came back.
AlphaBay's full timeline, step by step
- 2014
AlphaBay launches.
Emerged as a major successor marketplace following Silk Road's 2013 takedown.
- Early 2017
Dutch police covertly seize Hansa Market's infrastructure.
Positioned a second, hidden trap ahead of AlphaBay's own takedown.
- July 2017
AlphaBay is publicly seized; Alexandre Cazes is arrested in Thailand.
Ended what was then the largest dark web marketplace in operation.
- July 2017
Cazes dies in custody, ruled a suicide.
Closed the case against the publicly identified founder before trial.
- 2017–2020
AlphaBay remains offline; its user base disperses to other marketplaces.
Left a gap in the marketplace ecosystem that successor platforms partially filled.
- 2021
DeSnake publicly resurfaces and relaunches AlphaBay.
An unusually late and public return for a marketplace brand presumed permanently ended.
Misconception
Both AlphaBay co-founders were identified and arrested in the 2017 takedown.
Reality
Only Alexandre Cazes was publicly identified and arrested; his co-founder, known as DeSnake, was never named in connection with the case and remains publicly unidentified.
Misconception
AlphaBay's story ended completely with the 2017 takedown and Cazes's death.
Reality
The marketplace was publicly relaunched under the same name in 2021 by someone using the DeSnake handle, and has continued operating with its own subsequent law enforcement attention since.
Misconception
Law enforcement identified Cazes by breaking Tor's underlying encryption or anonymity technology.
Reality
Public reporting describes conventional investigative methods — digital forensics tied to personal accounts and lifestyle assets — rather than any break in Tor's core anonymity protocol.
Why would DeSnake risk relaunching a brand law enforcement had already targeted once?
Given the intense scrutiny AlphaBay had already received, why bring back the same name instead of starting fresh under something new?Researchers studying dark web marketplace dynamics have noted that established brand trust and reputation carry significant value in this ecosystem, since buyers and sellers rely heavily on a marketplace's track record for reliability and dispute resolution — relaunching under a recognized name, despite the added scrutiny, may have offered a faster path to rebuilding a functioning user base than starting entirely from zero.
What investigators gained from covertly running Hansa
During the weeks Dutch police covertly operated Hansa Market, court records and public reporting describe investigators gathering substantial evidence and user information from vendors and buyers who had migrated there directly from AlphaBay, contributing to a wave of related arrests beyond the AlphaBay case itself.
It's a concrete illustration of how the AlphaBay takedown wasn't a single, isolated event — its effects rippled outward through the connected Hansa operation, generating consequences well beyond Cazes's individual arrest.
So — what actually happened to AlphaBay?
It was seized in a coordinated 2017 operation that also covertly compromised a second marketplace; its identified founder died in custody days later; its unidentified co-founder relaunched it under the same name in 2021, and it has continued operating, under continued scrutiny, since.
This is a well-documented, multi-chapter case — unusual in this topic area for continuing well past its original, apparently conclusive takedown.
Why AlphaBay's story resists a tidy ending
AlphaBay's saga is a useful reminder that dark web marketplace takedowns, however dramatic, don't always function as clean endings the way a single arrest and server seizure might suggest. Brands, user trust, and even original operators can persist well past the moment a case appears closed — a pattern that complicates the simple 'takedown equals resolution' narrative that often accompanies these stories in the news.
What to remember
- AlphaBay was seized in July 2017 alongside a covert takeover of a second marketplace, Hansa.
- Founder Alexandre Cazes was arrested and died in custody days later.
- Co-founder DeSnake was never publicly identified and relaunched AlphaBay in 2021.
- The relaunched marketplace has continued operating, with its own subsequent law enforcement attention.
Questions people ask
Where to go next
Who is DeSnake, associated with AlphaBay?
A deeper look at the co-founder who was never identified.
Timeline of major dark web marketplace takedowns
See AlphaBay's story in the context of other major cases.
Who profited from the Silk Road?
Compare with the marketplace that came before AlphaBay.
What is Monero, and why is it preferred?
See how payment method choices shifted after cases like this one.
Dark web movies based on true events
See how similar marketplace cases have been dramatized.
The takedown wasn't the ending — it was the midpoint
Most dark web stories wrap up with an arrest and a seizure banner. AlphaBay's kept going — through a death, a decoy operation, and a comeback nobody quite expected. Some stories in this space just don't end where you assume they will.
You now know
- AlphaBay was seized in July 2017 as part of a coordinated operation that also covertly took over a second marketplace, Hansa.
- Founder Alexandre Cazes was arrested and died in custody days later, ruled a suicide.
- Co-founder DeSnake was never publicly identified and relaunched AlphaBay under the same name in 2021.
Safety note
Educational, not operational
This guide is educational. It does not provide instructions for illegal activity, evading law enforcement, buying prohibited goods, or attacking systems. Laws and risks vary by country, so stay within your local rules and avoid interacting with unknown services.
Common myth
Myth vs reality
Both AlphaBay co-founders were identified and arrested in the 2017 takedown.
Only Alexandre Cazes was publicly identified and arrested; his co-founder, known as DeSnake, was never named in connection with the case and remains publicly unidentified.
FAQs
Questions people ask
Sources
Further reading
- DOJ and Europol press releases on Operation Bayonet
- Public court records related to Alexandre Cazes
Glossary
Terms in this guide
Continue learning