AlphaBay: the giant that fell over a Hotmail address

AlphaBay at a glance

Status	Seized in Operation Bayonet, July 2017
Operated	December 2014 to July 2017
Admin	Alexandre Cazes ("alpha02" / "admin"), a Canadian based in Thailand
Scale	About 400,000 users and over $1 billion in transactions at its peak
Payment	Bitcoin, plus Monero and Ethereum added later
Cause of death	A personal Hotmail address in the site's welcome emails

What AlphaBay was

AlphaBay opened in late 2014, right as the post-Silk Road scene was scrambling for a new home. It took that opening and ran. Within two years it was several times the size Silk Road had ever reached, with hundreds of thousands of users and a catalogue that went well beyond drugs into stolen data, fraud tools, and malware.

Part of the appeal was polish. AlphaBay felt like a real platform. It had a working support system, multi-signature escrow, vendor bonds to keep scammers out, and it later added Monero, which gave privacy-minded buyers a reason to prefer it. If Silk Road proved the idea, AlphaBay proved the idea could scale into something that looked almost corporate.

Why it mattered

AlphaBay normalised the darknet market as infrastructure. Vendors who had been spread across smaller sites consolidated there because that is where the buyers were, and buyers went there because that is where the vendors were. The flywheel that every market wants was spinning hard.

That concentration cut both ways. When a single market holds that much of the ecosystem, taking it down does enormous damage in one move. Law enforcement understood this, and they built a plan around the fact that AlphaBay's users would not simply quit. They would migrate. That assumption became the trap.

Operation Bayonet: the takedown

The thread investigators pulled was almost insultingly simple. When new users registered, AlphaBay sent a welcome email, and the headers of those emails contained pimp_alex_91@hotmail.com. That address traced back to Alexandre Cazes, a Canadian living comfortably in Bangkok. The most secure marketplace of its day was undone by a default mail setting nobody had scrubbed.

On July 5, 2017, Thai police arrested Cazes at his Bangkok home while a coordinated effort seized AlphaBay's servers. Then came the clever part. Dutch police had already taken quiet control of Hansa, a mid-sized competitor. As AlphaBay's homeless users poured into Hansa looking for safety, they were signing into a market that law enforcement was running. For about 27 days the Dutch collected usernames, passwords, messages, and shipping addresses from people who thought they had gotten away.

That two-step, seize one market and operate the obvious alternative, is what made Operation Bayonet a template. Every migration since gets the same question: is the place everyone is fleeing to actually safe, or is it the next Hansa? The full sequence sits in our shutdown timeline.

Alexandre Cazes

Cazes never made it to trial. About a week after his arrest, he was found dead in his Thai cell, a death authorities ruled a suicide, before he could be extradited to the United States. He was 25. Investigators had already mapped his assets, the houses, the cars, the accounts, and a chunk of it was seized.

His story rhymes with Ulbricht's in the way that matters here. A young operator, a serious technical setup, and a single careless link to his real identity that brought all of it down. You can read the original version of that mistake in our Silk Road case study.

The 2021 relaunch: is AlphaBay back?

In August 2021 the AlphaBay name reappeared. A figure called DeSnake, who claimed to have been the original security administrator and proved continuity by signing messages with an old PGP key, relaunched the market. The new version was Monero-only, ran on a current Tor address, and leaned hard on security and rules.

For a while it drew real attention. Whether it ever recaptured the original's scale is another matter, and by 2022 and 2023 the momentum had drained away as newer markets took over. So the honest answer to "is AlphaBay back" is no, not in any meaningful sense for 2026. The brand is mostly a magnet for phishing now. If you see an AlphaBay link being passed around, assume it is bait until proven otherwise, and read our anti-phishing guide before you touch it.

Is AlphaBay online in 2026? Looking for the link?

No active, trustworthy AlphaBay exists today. The original is gone, the relaunch faded, and the name now mostly serves scammers. If you searched for an AlphaBay link, URL, or onion mirror expecting to log in, there is nothing genuine waiting on the other end.

Treat this as a warning, not just trivia. AlphaBay still attracts heavy search traffic, which makes its name perfect bait. The "AlphaBay links" floating around forums and clearnet lists are phishing pages that copy the old login screen to harvest credentials and drain deposits. There is no safe AlphaBay mirror in 2026. Check our anti-phishing guide before trusting any address.

AlphaBay FAQ

Is there a working AlphaBay link or mirror?

No. There is no trustworthy AlphaBay link or onion mirror in 2026. The original is gone and the relaunch faded, so any address advertised as an AlphaBay link is almost certainly a phishing clone. Use our verified list instead.

Is AlphaBay back?

Not in any real sense. A 2021 relaunch under DeSnake drew attention but lost momentum to newer markets, and it is not a credible, active platform in 2026.

How was AlphaBay taken down?

Welcome emails carried the personal address pimp_alex_91@hotmail.com, which tied the market to Alexandre Cazes. In Operation Bayonet (July 2017) the FBI, DEA, and Europol seized AlphaBay while Dutch police ran Hansa as a honeypot to catch the users who fled there.

What happened to Alexandre Cazes?

Cazes was arrested in Bangkok on July 5, 2017, and found dead in his cell about a week later, in what authorities ruled a suicide, before he could be extradited to the US.