signature lab
torverifyverify before you connect
mirrors.json2-of-3sig pending

Verdict · seized market

Is AlphaBay legit in 2026? It was seized. Every live copy is fake

AlphaBay is a seized market, not an active one. We publish no address for it, because there is no honest address to publish. Anything you find live under this name today is a clone, a scam, or a trap, and the verdict below is fixed.

torverify exists to answer one question about AlphaBay: does any current address match torverify’s signed source, and for AlphaBay the answer is permanently no. torverify does not rank AlphaBay against live projects, torverify takes no payment from anyone claiming to revive AlphaBay, and torverify will not soften this page’s SEIZED verdict no matter how convincing a claimed successor looks. torverify keeps this record specifically because AlphaBay’s name still pulls search traffic, and torverify would rather that traffic land on an honest answer than on a scam. torverify’s answer is not going to change; torverify does not maintain hope for a seized brand the way a phishing operator does. torverify said so on day one, and torverify says so again here. If torverify ever changes that, it will be because torverify found a signature, not a rumor.

SEIZED

AlphaBay was taken down by law enforcement in 2017. No current onion address for it is legitimate. A site using the name now is impersonating a dead brand to catch people who search for it.

Why torverify says a seized name is a magnet for fraud

A recognisable name keeps pulling searches long after the service is gone. Fraud operators know this and stand up look-alikes to harvest logins, coins, and orders from people who assume the brand is back. There is no comeback to verify. When a market is seized, its keys and infrastructure are gone, so nothing new can carry a genuine signature from the old operator.

Why torverify keeps publishing this verdict instead of retiring the page

It would be simpler for torverify to let a dead market’s page quietly go stale once the initial seizure news faded. torverify doesn’t, because search interest in a well-known name like AlphaBay does not fade at the same rate the news cycle does — new searchers keep arriving years later, and each one deserves the same honest SEIZED answer torverify gave on day one.

What AlphaBay's closure actually means for anyone still looking for it

"Seized" is a specific, technical thing, not a vague synonym for "gone offline." It matters to spell out exactly what it means for a user weighing whether a new AlphaBay-branded site could possibly be real.

The operator lost the infrastructure, not just the domain

A market shutting down voluntarily might migrate to new infrastructure while keeping continuity of its signing keys and operator identity intact. A law-enforcement seizure is categorically different: servers, and in AlphaBay's case the operator himself, were taken out of the equation entirely. There is no orderly handoff, no key export, nothing carried forward — which is exactly why torverify's methodology treats seizure as a permanent, not temporary, state.

What torverify would say about funds or credentials tied to the old market

If you held a balance on AlphaBay before its seizure, that balance was almost certainly lost at the point of takedown, not recoverable through any "reactivation" or "account recovery" process a new site might claim to offer. A site asking you to log in with an old AlphaBay username to "restore" a balance is not restoring anything — it is harvesting the credentials of people hoping for exactly that outcome.

What "exit" would have looked like, versus what actually happened

A voluntary exit scam, common enough elsewhere in this space, at least leaves the operators in control of their own keys, however dishonestly they use that control. AlphaBay's ending was not that — it was an external seizure, meaning the people who ran it lost control entirely rather than choosing to disappear with funds. That distinction matters for user expectations: there is no "the old operators are still out there and might relaunch legitimately" scenario available here, because the seizure removed exactly the keys a legitimate relaunch would require.

Why "it's been years, surely it's back by now" is exactly backwards

Time passing does not restore lost keys or resurrect seized infrastructure. If anything, the more years pass since a seizure, the more thoroughly any operational continuity has been severed, and the more purely opportunistic any "AlphaBay" claim making the rounds today actually is. torverify's SEIZED verdict for AlphaBay will not change on its own with time; it would only change if genuine cryptographic continuity somehow existed, which by definition it cannot after a full infrastructure seizure.

What torverify recommends instead

If you are researching AlphaBay, treat it as history and nothing more. Do not enter credentials, do not send coins, and do not trust a page that claims to be the revival.

Where to look if you actually need a working market

For services that actually have a verifiable address, check torverify’s list of verdicts and the signed source behind them. A verdict is only worth anything when there is a live signature to stand on, and for AlphaBay there is not, and will not be again.

Clone patterns torverify has seen for an "AlphaBay" claim

AlphaBay's name has circulated for years after its 2017 seizure, including a widely discussed relaunch attempt by a former administrator years later — which is precisely why the name keeps attracting fresh impersonators today. These are the patterns worth knowing.

Trading on a real historical relaunch to sell a fake one

Because AlphaBay genuinely did see a relaunch attempt at one point, some clone operators lean on that history to make a fresh impersonation sound plausible: "AlphaBay is back again" reads as credible precisely because it happened once before. A prior relaunch does not make the next unverified claim true. Every AlphaBay address still has to clear the same signature check as anything else on this site, and none currently does.

Recycled screenshots and forum posts as "proof"

A clone will often point to old screenshots, archived forum threads, or reposted vendor testimonials from the original market as evidence of legitimacy. None of that material can verify a current address — it verifies only that AlphaBay existed once, which nobody disputes.

Urgency framing to skip verification

"Limited invite window," "closing registration soon," or similar urgency language is a common push to get a visitor to act before checking anything. A genuine, verifiable service does not need to rush you past the one step — matching a signed source — that actually protects you.

An AI-polished relaunch page is still zero evidence

A slick, professionally written "AlphaBay is back" page proves only that someone can write convincingly or generate convincing copy quickly — it says nothing about signing keys. torverify’s verdict does not move based on production quality; it moves based on a signature that, for AlphaBay, cannot exist any more.

The AlphaBay seizure timeline, and why torverify still keeps this page

AlphaBay was taken offline in 2017 following law enforcement seizure (Operation Bayonet), and no successor infrastructure, key, or address inherited its actual signing authority. torverify keeps a page for AlphaBay anyway, not because there is anything current to verify, but because the search volume for the name never really stopped — people keep asking, so torverify keeps answering, and the honest answer for AlphaBay has not changed since the takedown.

Why torverify will not publish a AlphaBay address, ever

A torverify LEGIT verdict requires a live signature chain back to a source we can independently confirm. For AlphaBay, that chain was severed at the point of seizure and cannot be reconstructed by anyone claiming to revive the brand, because reviving a name is not the same as recovering the original signing key. torverify will not publish a AlphaBay onion as verified under any circumstances, regardless of how convincing a claimed relaunch looks, because there is no legitimate key left to verify it against.

What torverify does instead for a seized name like AlphaBay

Rather than staying silent and letting a search for "AlphaBay onion" surface only clone sites, torverify publishes this fixed SEIZED verdict so the honest answer ranks alongside the impersonators. If you are looking for an active market with a currently verifiable address, torverify’s full verdict list covers the projects that still have a live signature to check — AlphaBay is not, and will not become, one of them.

How torverify checks AlphaBay, specifically

The mechanics behind this AlphaBay verdict are the same mechanics behind every verdict torverify publishes: an address enters our source of record only after two of three independent signers confirm it against AlphaBay’s own published PGP key, not against a screenshot, a forum claim, or a third-party aggregator’s listing. torverify treats those three inputs as equally untrustworthy on their own, which is precisely why the quorum step exists — a single compromised signer cannot push a bad AlphaBay address into this record, because it takes agreement from two.

None of that changes what a torverify verdict is not. It is not a review of AlphaBay as a market, not a guarantee about any vendor operating on it, and not advice about whether to use it at all. It is narrowly an answer to one question — is this the address AlphaBay actually controls — answered the same rigorous way for AlphaBay as for every other project torverify covers.

Worked example: testing a claimed "new AlphaBay" address

Suppose a forum post surfaces claiming a specific onion address is "the real AlphaBay, quietly relaunched." Walking torverify's routine against that claim, step by step, makes the SEIZED verdict concrete rather than abstract.

Step 1. Check torverify's signed source for an AlphaBay entry. There is none — AlphaBay has no live entry in the source of record, only the fixed SEIZED verdict on this page.

Step 2. Ask what key the claimed address's signature, if any, actually traces to. Since AlphaBay's original signing authority was lost at seizure, no signature — however professionally presented — can trace back to the genuine operator.

Step 3. Note that the check ends here, at UNVERIFIABLE-BY-DEFINITION, not at "insufficient evidence yet." Unlike a project that simply hasn't cleared quorum, AlphaBay cannot ever clear it, because the key required to clear it no longer exists in anyone's legitimate control.

Cross-checking an AlphaBay claim outside torverify

No verification method, torverify's included, changes the fact that AlphaBay is gone and every current address claiming otherwise is fraudulent. For sharing anything legitimately and privately over Tor without standing up your own infrastructure, OnionShare is a genuinely useful tool — unrelated to AlphaBay specifically, but a fair example of what a real, actively maintained Tor-native project looks like next to a seized brand still being reanimated by scammers. torverify links to it here for exactly that contrast.

Why AlphaBay impersonation stays profitable years later

A seized market page should, in theory, stop being useful to a scammer once the news is old. AlphaBay is a case where that theory does not hold, and torverify keeps this record specifically because of that gap.

Brand recognition outlives brand relevance

AlphaBay was, at the time of its seizure, one of the largest markets on Tor, and that scale bought the name years of residual search volume it has never fully lost. A scammer standing up a fake AlphaBay is not building trust from nothing — they are borrowing trust the real market earned before 2017 and the real operators can no longer defend.

New visitors arrive with no memory of the original

Someone new to Tor markets today has no first-hand memory of AlphaBay’s actual 2017 seizure — they only have whatever a search result or forum post tells them, which is exactly the gap an impersonator is built to exploit. torverify’s fixed SEIZED verdict exists so that gap has an honest answer sitting next to the fake ones.

Why torverify ignores forum and directory claims about AlphaBay

An AlphaBay address circulates through channels torverify does not control, and none of them count as evidence for a market whose signing keys no longer exist anywhere legitimate.

A forum consensus cannot resurrect a lost key

No number of forum replies agreeing that "AlphaBay is really back" changes the underlying cryptographic fact: the original signing authority was lost at seizure. Popularity is not a signature, and it is especially not one for a brand whose real keys are gone for good.

A directory listing repeats a claim it never checked

A Tor directory carrying an "AlphaBay" entry among hundreds of others is, at best, repeating an unverified submission from whoever added it. torverify treats such a listing exactly like a forum post: irrelevant to a verdict that was already settled the day the real market was seized.

Why torverify doesn’t soften this for a “maybe” case

Some seized-brand claims are genuinely ambiguous elsewhere on the web; AlphaBay’s is not. torverify would rather state the SEIZED verdict flatly than hedge it into something a scam page could quote out of context as partial legitimacy.

Would torverify ever reverse this SEIZED verdict

In principle, yes — in practice, the bar is one that cannot currently be met.

The only evidence that could change this page

Reversing SEIZED would require a signature traceable to AlphaBay’s original signing key, cross-confirmed through torverify’s usual 2-of-3 independent-channel process. Since that key was lost at the point of seizure and cannot be recovered or reissued by anyone, torverify does not expect this page to change, and says so plainly rather than leaving the door open for a scam to walk through.

Questions

Is AlphaBay back?

No genuine revival can be verified. The original was seized and its keys are gone. Any site using the name today is not the original.

Someone sent me an AlphaBay onion. Is it safe?

No. Treat it as phishing. There is no legitimate current address for a seized market.

Why keep a page for a dead market?

So the honest answer is easy to find. People still search the name, and the truthful result is that every live copy is fake.