Completed Project Case Study: Shining a Light on the Dark Net 

Summary 

Cybercrime is big business. Each year, more than $2 trillion in revenue flows through organised crime worldwide, yet less than 1% of assets are recovered. The Dark Net has become a marketplace for these activities, hosting everything from stolen data to hacking services. To address this complex challenge, a UKFin+ funded project brought together experts from Aston University and the University of Birmingham, working in partnership with Asset Reality Limited, a seized asset management company. Together, they set out to understand how criminals innovate online and how this knowledge can help protect financial services and society. 

The Challenge 

Monitoring and disrupting criminal activity on the Dark Net is notoriously difficult. Transactions happen in anonymous environments where trust and reputation are carefully built within hidden networks. Traditional cybersecurity approaches focus on technical signals but miss the social dynamics that drive these underground economies. Without new ways of combining technical and social science perspectives, financial firms, regulators, and enforcement agencies risk staying one step behind.

The Research Approach 

The project was led by Dr. Vitor Jesus (Aston University) with Dr. Endrit Kromidha and colleagues (University of Birmingham). Their collaboration combined computer science and cybersecurity expertise with entrepreneurship and social science insights, creating a genuinely multidisciplinary lens. With support from Asset Reality Limited, the team framed research questions that linked directly to industry needs and explored how findings could shape monitoring tools and services. 

The work involved analysing online markets and forums, applying machine learning to detect discussion trends, and interpreting results using entrepreneurship theory. This method demonstrated how cybercriminals innovate and collaborate, providing insights for policy and industry practices. 

Key Findings 

The study found that Dark Net markets operate much like traditional entrepreneurial ecosystems. Even with anonymity, trust and reputation are essential for facilitating transactions. New forms of criminal activity emerge collaboratively, as actors with different skills pool resources to create innovative methods of attack. 

 From a technical perspective, using AI and Machine Learning techniques, up from simple Topic Modelling, the project was able to show the feasibility of automatically detecting novel forms of “dark entrepreneurship.” For example, while tracking messages from Dread from its formation, we could anticipate which topics were becoming popular each year between 2018 and 2023; by the following year, the detected topics became, indeed, popular. 

• New slang, evolving collaboration patterns, and signals of community trust can all serve as early indicators of emerging risks. 

• Proven feasibility of effective monitoring requires socio-technical tools that combine data analytics with an understanding of social behaviour. 

• Machine Learning techniques show feasibility when attempting to detect rising trends 

• Cross-disciplinary collaboration provided the unique perspective needed to uncover these dynamics. t the urgent need for improved financial education, clearer policy guidance, and better engagement between regulators, industry, and consumers. 

The Impact 

For the financial industry, these insights offer an early-warning system for new types of threats. By looking not only at technical traces but also at human behaviours and relationships, firms can anticipate risks before they escalate. For Asset Reality, the findings align closely with their mission of helping clients seize and recover illicit assets. The research provides them with a stronger evidence base to design new services and monitoring tools, strengthening their ability to disrupt criminal markets. 

Quotes from academics: 

Reflecting on the project, Dr. Endrit Kromidha highlighted the dual nature of online black markets: 

“Online black markets are interesting places. We quite often think of them because of the harm they can cause; however, we believe there is potential in them to develop innovations and maybe learn from them to develop solutions for information security, products and services.” 

His comment underlines one of the project’s central insights: by looking beyond the harms, researchers and industry can also learn from the ways these hidden markets innovate, collaborate, and build trust. These lessons can help design stronger safeguards and inspire new approaches to resilience in the financial sector. 

What Happens Next

The collaboration has already sparked new directions. The team is preparing follow-up academic papers and exploring larger grant applications to scale up the work. Future projects aim to build prototype monitoring tools that integrate technical detection with social science insights, capable of spotting new forms of cybercrime before they spread. 

This project shows the power of collaboration across disciplines and sectors: by uniting academic expertise with industry knowledge, it lays the foundation for innovative solutions to one of finance’s most complex “wicked problems.” 

Research is published:

(PDF) DMiNority Report: On Monitoring Cyber-crime Innovation in Dark Net Markets