- Aug 31, 2013
- 21,023
- 38,572
Are you thinking about doing business on Black Hat World? Well then, you're in luck!
This 2024 market safety guide is meant to supplement my original one, so if you haven't done so already, read my 2016 guide titled, "Avoiding Scams & Staying Safe On Black Hat World" as much of the information on there is still applicable in 2024.
I've also made this guide to be applicable not just to the Black Hat World marketplace, but any other marketplace on the internet.
Use The Market's Chat System
Most markets on the internet have some sort of buyer protection system. Here on Black Hat World, we have the Dispute Resolution section.
Something many online markets have in common is that their buyer protection is limited to transactions and conversations that take place on the platform (i.e., the market's chat system). Our chat system here on Black Hat World is our conversations system.
Sure, some smaller markets may accept off-market evidence, but as they grow, they realise they cannot review every unverifiable off-site chat log they get sent. For whatever inane reason, we still loosely accept these in our dispute section occasionally as supplementary evidence only.
Summarised, if you want protection as a vendor or a buyer of the market, you're expected to use these systems. If you forfeit using these systems because you want the convenience of an instant messaging service where a scammer can delete the chat logs the second you send them money, well, you get the picture.
Interacting With Vendors
Interacting With Vendors Anonymously
The main thing to take away in this section is that you want to limit the possibility of your information being gathered and sold as much as possible. Corporations do it, small businesses do it, and marketplace vendors do it. It's annoying, but there's nothing stopping this behaviour at the moment, so this means you have to look out for yourself.
Even if a vendor doesn't sell your information, they might spam your inbox with a bunch of annoying offers that you can't opt out of. You don't want this on your main e-mail accounts. So first and foremost, get yourself some disposable e-mails and use those when you interact with a new vendor. You don't need to go full Tails with Tor here, just make sure your real information is not used anywhere.on the new e-mail.
Once you place an order, you'll likely have to message the vendor at some point. This is where you keep things professional and matter-of-fact. They are not your friend, so don't start sending emojis and don't start talking about sports.
Suspicious Behaviour
Go through their reviews and ratings, and take note of what you see.
There are two easy ways you can interact with your customers without exposing yourself too much: anonymously or through the use of an alias. Obviously, don't use your real identity or company name.
Anonymously
This is the safest, yet least trustworthy option you could pick. If it's clear to your customers that you're trying your best to hide your identity, then they're going to be less likely to work with you.
Still, depending on what you're selling, you might still get some customers.
Through An Alias
There's nothing wrong with using an alias. In fact, I bet you're using one right now on this forum. The great thing about using your forum alias is that you can still build up trust without jeopardising your safety, unless you use this alias elsewhere.
You can also use a business-sounding alias when you sell your products and services. "The Dark Link Builders Ltd " or something would suffice. Maybe something a little less edgy. Just keep in mind that if you're not representing a business entity, your customers will feel misled if they find out it's just one guy.
Choose The Right Payment Method
Different payment methods offer different benefits and levels of protection. This is why it's important to understand each payment method you have access to.
Generic Payment Processing Companies
PayPal and Stripe might come to mind. These two think they're banks and try to behave as such, but they're not. PayPal in particular being known for limiting or banning accounts at the drop of a hat.
However, one good thing about these two is that they have a decent resolution process for buyers that can be used if a transaction goes wrong. If you're a vendor, well, it's best to use something else as mass disputes in their very long 180-day dispute period have happened in the past. If you offer digital goods and services, you're less likely to win the dispute.
They're also very convenient. Maybe a little too convenient...
Peer-to-peer mobile payment apps
Venmo, Cash App, and Zelle are some of the most well-known in this category. Similarly to cryptocurrency and PayPal Friends & Family, payments made through these apps are non-refundable. There's no buyer protection and it's difficult to reach anyone for support. However, I do know from experience that you can at least inconvenience a scammer by reporting them, at least with Zelle. If they identify another user as being a risk, they'll potentially shut down their accounts.
Other Financial Services
These include Interbank networks or Wise. Bear in mind that these vary wildly, to some that don't give out any of your information to others that send the recipient your name, address, etc.
Cryptocurrency
Cryptocurrency is a great choice for buyers and sellers if your preference is anonymity. On the other hand, there's absolutely no protection if you're a buyer outside of maybe being able to report a vendor if they used one of the major exchanges. But that doesn't get you your money back, does it?
Speaking of which, think you're completely anonymous with cryptocurrency? Think again. With all of the regulations various agencies and corporations are trying to put in place to control cryptocurrency, it isn't the same as it was in 2014. The major exchanges are known for banning its users if they send money to flagged wallet addresses. If you're going to use cryptocurrency, make sure you transfer your crypto from your exchange account to your wallet, and then to the vendor.
They key here is that if you're going to use cryptocurrency, don't just "use cryptocurrency": use the right cryptocurrency the right way. What do I mean by this? If you care about being anonymous, use a privacy coin such as Monero (XMR).
Large Versus Small Transactions
Once you've determined the an appropriate payment method to use, it's time to figure out how you'll be completing that transaction.
Small Transactions
Contrary to what you may believe, small transactions are not less likely to result in a scam.
Large Transactions
Good grief, don't send it all at once, especially without an escrow. Just don't. It doesn't matter how reputable the vendor is.
Partial payments are an option, but keep in mind that depending on the payment methods and the total amount, a vendor can get desperate enough to run off even with 25% of what they would've received.
Really, the answer to large transactions is using an escrow service. After all, the funds will only be released once the product or service has been delivered.
It's become a common sight to see others seek the convenience of whatever they're used to over safety, and this is the first place they go wrong.
However, even if you try your best to do your own due diligence, something can still go wrong: vendors can go rogue, buyers can go rogue, or you can just miss something you should've seen before.
The point is, never jeopardise your safety for convenience in a black hat marketplace.
This 2024 market safety guide is meant to supplement my original one, so if you haven't done so already, read my 2016 guide titled, "Avoiding Scams & Staying Safe On Black Hat World" as much of the information on there is still applicable in 2024.
I've also made this guide to be applicable not just to the Black Hat World marketplace, but any other marketplace on the internet.
Use The Market's Chat System
Most markets on the internet have some sort of buyer protection system. Here on Black Hat World, we have the Dispute Resolution section.
Something many online markets have in common is that their buyer protection is limited to transactions and conversations that take place on the platform (i.e., the market's chat system). Our chat system here on Black Hat World is our conversations system.
Sure, some smaller markets may accept off-market evidence, but as they grow, they realise they cannot review every unverifiable off-site chat log they get sent. For whatever inane reason, we still loosely accept these in our dispute section occasionally as supplementary evidence only.
Summarised, if you want protection as a vendor or a buyer of the market, you're expected to use these systems. If you forfeit using these systems because you want the convenience of an instant messaging service where a scammer can delete the chat logs the second you send them money, well, you get the picture.
Interacting With Vendors
Interacting With Vendors Anonymously
The main thing to take away in this section is that you want to limit the possibility of your information being gathered and sold as much as possible. Corporations do it, small businesses do it, and marketplace vendors do it. It's annoying, but there's nothing stopping this behaviour at the moment, so this means you have to look out for yourself.
Even if a vendor doesn't sell your information, they might spam your inbox with a bunch of annoying offers that you can't opt out of. You don't want this on your main e-mail accounts. So first and foremost, get yourself some disposable e-mails and use those when you interact with a new vendor. You don't need to go full Tails with Tor here, just make sure your real information is not used anywhere.on the new e-mail.
Once you place an order, you'll likely have to message the vendor at some point. This is where you keep things professional and matter-of-fact. They are not your friend, so don't start sending emojis and don't start talking about sports.
Suspicious Behaviour
Go through their reviews and ratings, and take note of what you see.
- Are they all from new accounts? Red flag.
- Are the reviews all glowing? Red flag, no service is perfect.
- Is the seller liking these suspicious reviews? Massive red flag?
There are two easy ways you can interact with your customers without exposing yourself too much: anonymously or through the use of an alias. Obviously, don't use your real identity or company name.
Anonymously
This is the safest, yet least trustworthy option you could pick. If it's clear to your customers that you're trying your best to hide your identity, then they're going to be less likely to work with you.
Still, depending on what you're selling, you might still get some customers.
Through An Alias
There's nothing wrong with using an alias. In fact, I bet you're using one right now on this forum. The great thing about using your forum alias is that you can still build up trust without jeopardising your safety, unless you use this alias elsewhere.
You can also use a business-sounding alias when you sell your products and services. "The Dark Link Builders Ltd " or something would suffice. Maybe something a little less edgy. Just keep in mind that if you're not representing a business entity, your customers will feel misled if they find out it's just one guy.
Choose The Right Payment Method
Different payment methods offer different benefits and levels of protection. This is why it's important to understand each payment method you have access to.
Generic Payment Processing Companies
PayPal and Stripe might come to mind. These two think they're banks and try to behave as such, but they're not. PayPal in particular being known for limiting or banning accounts at the drop of a hat.
However, one good thing about these two is that they have a decent resolution process for buyers that can be used if a transaction goes wrong. If you're a vendor, well, it's best to use something else as mass disputes in their very long 180-day dispute period have happened in the past. If you offer digital goods and services, you're less likely to win the dispute.
They're also very convenient. Maybe a little too convenient...
Peer-to-peer mobile payment apps
Venmo, Cash App, and Zelle are some of the most well-known in this category. Similarly to cryptocurrency and PayPal Friends & Family, payments made through these apps are non-refundable. There's no buyer protection and it's difficult to reach anyone for support. However, I do know from experience that you can at least inconvenience a scammer by reporting them, at least with Zelle. If they identify another user as being a risk, they'll potentially shut down their accounts.
Other Financial Services
These include Interbank networks or Wise. Bear in mind that these vary wildly, to some that don't give out any of your information to others that send the recipient your name, address, etc.
Cryptocurrency
Cryptocurrency is a great choice for buyers and sellers if your preference is anonymity. On the other hand, there's absolutely no protection if you're a buyer outside of maybe being able to report a vendor if they used one of the major exchanges. But that doesn't get you your money back, does it?
Speaking of which, think you're completely anonymous with cryptocurrency? Think again. With all of the regulations various agencies and corporations are trying to put in place to control cryptocurrency, it isn't the same as it was in 2014. The major exchanges are known for banning its users if they send money to flagged wallet addresses. If you're going to use cryptocurrency, make sure you transfer your crypto from your exchange account to your wallet, and then to the vendor.
They key here is that if you're going to use cryptocurrency, don't just "use cryptocurrency": use the right cryptocurrency the right way. What do I mean by this? If you care about being anonymous, use a privacy coin such as Monero (XMR).
Large Versus Small Transactions
Once you've determined the an appropriate payment method to use, it's time to figure out how you'll be completing that transaction.
Small Transactions
Contrary to what you may believe, small transactions are not less likely to result in a scam.
Large Transactions
Good grief, don't send it all at once, especially without an escrow. Just don't. It doesn't matter how reputable the vendor is.
Partial payments are an option, but keep in mind that depending on the payment methods and the total amount, a vendor can get desperate enough to run off even with 25% of what they would've received.
Really, the answer to large transactions is using an escrow service. After all, the funds will only be released once the product or service has been delivered.
Summary: Safety Over Convenience
Did you know that most of the disputes I've dealt with didn't even happen on Black Hat World? They happened on Telegram, Skype, Discord, etc.It's become a common sight to see others seek the convenience of whatever they're used to over safety, and this is the first place they go wrong.
However, even if you try your best to do your own due diligence, something can still go wrong: vendors can go rogue, buyers can go rogue, or you can just miss something you should've seen before.
The point is, never jeopardise your safety for convenience in a black hat marketplace.
Last edited: