Rydox Dark Web Marketplace Operator Pleads Guilty to Identity Theft and Money Laundering
A Kosovar national has pleaded guilty to operating Rydox, an illegal online marketplace that sold stolen personal information, login credentials, credit card data, and cybercrime tools.
Kosovo law enforcement and Albania’s Special Anti-Corruption Agency (SPAK) arrested Ardit Kutleshi, 28, along with two other Rydox administrators, Jetmir Kutleshi and Shpend Sokoli, in December 2024.
The arrests were part of a joint international law enforcement operation that shut down Rydox. Authorities seized the Rydox domain and its server in Kuala Lumpur with help from the Royal Malaysian Police.
Ardit Kutleshi was extradited to the United States from Kosovo in 2025 to face charges related to his role as a Rydox administrator. The charges included conspiracy to commit identity theft, aggravated identity theft, two counts of identity theft, access device fraud, and money laundering.
“Rydox offered for sale cybercrime tools and sensitive data, including stolen identities and login information for thousands of people,” said FBI Cyber Division Deputy Director Brett Leatherman. “The FBI and its foreign partners shut down the marketplace, and now the man who created and ran it has pleaded guilty.”
Rydox sold stolen data and cybercrime products
According to court documents, between February 2016 and Rydox’s closure in 2024, marketplace sellers completed more than 7,600 sales involving login credentials, credit card information, and stolen personal data, including Social Security numbers, names, and addresses belonging to thousands of U.S. citizens.
Rydox also sold more than 321,000 other “cybercrime products,” including devices, software tools, and materials used to commit cybercrimes. The products were sold to more than 18,000 users.
Rydox accepted cryptocurrency payments
Rydox users had to deposit cryptocurrency into their accounts before making purchases. The marketplace accepted Bitcoin (BTC), Monero, Ripple, Ethereum, Litecoin, Perfect Money, Tron, and Verge.
The payments were deposited into cryptocurrency wallets controlled by Rydox and could then be used to purchase illegal products, services, tools, and programs from marketplace sellers.
Rydox also charged users a one-time fee of between $200 and $500 to become authorized sellers. Sellers received 60% of their sales proceeds, while the marketplace retained the remaining 40%.
Rydox operator faces prison sentence
Kutleshi pleaded guilty to aggravated identity theft and conspiracy to commit money laundering. He is scheduled to be sentenced on February 9, 2027.
He faces a minimum sentence of two years in prison for aggravated identity theft and a maximum sentence of 20 years for money laundering.
Earlier this year, the operator of the Incognito dark web drug market was sentenced to 30 years in prison. A California man who sold fentanyl and methamphetamine on the Nemesis dark web market was sentenced to more than 26 years in federal prison.
Join Mikko Hypponen and security leaders from the NFL, Chanel, and Atlassian for a 2-hour digital summit about what will change with AI speed attacks, what defenders should stop doing, and how to verify, decide, fix, and revalidate at machine speed.
Source: www.bleepingcomputer.com