Anubis Market FAQ

Anubis Market has no single permanent address and no clearnet site. It publishes three onion addresses, all of which resolve to the same market with the same account and balance. Copy a current one from the mirror list, open it in Tor Browser, and check it against the login screen before you type anything.

Three. They run in parallel and all point at the same market. When one is slow or taking attack traffic, you switch to another. Your account, balance, and open orders do not move between them, and the coin a vendor accepts does not change with the address. The reason for running three at once is on the rotation page.

No. It is a Tor hidden service reached only through Tor Browser. Any ordinary web page claiming to be Anubis Market is a phishing operation. This site is the exception to that rule: it is a clearnet reference that lists the real onion addresses, and it does not host the market.

Copy the address from this site, open it in Tor Browser, and hold the address in your bar against the one the login screen prints. They must match before you enter a password. Never type a 56-character onion from memory. The full method, including what to do if they differ, is on the verify address page.

Give a single attempt a full minute before judging it. A cold connection to a hidden service crosses roughly six relays with no caching anywhere, so tens of seconds of nothing is the normal state rather than a fault. If it still will not open, move to the next mirror rather than reloading the same one, because a reload rebuilds the same failing path. The full set of fixes is on the troubleshooting page.

Four: Bitcoin, Litecoin, Ethereum, and Monero. That is the widest coin spread on Tor, and it is the thing Anubis is known for. Monero is the private default because it keeps the payment off a readable public ledger. The other three leave a permanent record of what you paid and to whom. The full breakdown is on the coins page.

Yes. Anubis is one of the very few Tor markets that accepts Ethereum natively, alongside Bitcoin, Litecoin, and Monero. If you are holding Ethereum and want to spend it on a Tor market, this is more or less the only door that opens. Note that Ethereum is not private, so if privacy is the goal, use Monero instead.

Monero by default for privacy. Bitcoin, Litecoin, or Ethereum when they fit your situation, but only Monero keeps the payment off a public ledger. The deposit address is fresh per order, so the coin you pick is the one decision here with permanent consequences. The trade-offs are on the coins page.

Fund your market wallet in any of the four coins. The deposit address is generated fresh per order, so you do not reuse an old one. The full path, including what the fresh address means and what to check before you send, is on the deposit page.

Your coins are held by the market and released to the vendor only after you confirm receipt and finalize. The model is 2-of-3 multisig, which means two of three keys must sign for the funds to move. The catch is the 14-day auto-finalize: if you do not open a dispute within that window, the escrow releases on its own and the risk moves to you. The full mechanics are on the escrow page.

A timer that releases escrow to the vendor automatically fourteen days after the order is confirmed, whether or not you have finalized it. It favors the vendor and the market over the buyer, and a dispute that misses it is unrecoverable. Open any dispute before the window closes. The detail is on the escrow page.

The whole path, in the order it happens: check the vendor, encrypt the shipping details to the vendor key, deposit, wait for the escrow to hold, and then finalize once you have the goods. The 14-day window starts at confirmation, not at delivery. The step-by-step is on the first order page.

It is a real, operating Tor market that opened in 2024 and takes four coins. Like every darknet market, it carries the usual risks: a 14-day auto-finalize that favors the vendor if you miss it, and phishing clones that copy the storefront. The 2026 review covers what it does well and where it leaves you exposed.

As safe as any darknet market, which means the safety comes from your habits, not from the platform. One Tor Browser profile, a fresh username, encrypted shipping details, and the address check before you log in. The moments when clones catch people are specific, and they are on the phishing page.

A clone is a one-character-off onion that copies the storefront and harvests credentials. It surfaces at the exact moment you are searching for the address, which is why the search itself is the risk. The three checks that stop it before a password is typed are on the phishing page.

It depends on what you lost. The recovery phrase restores an account you have locked out of, but the payment PIN is non-recoverable, and a lost recovery phrase is not something the market can replace. What is possible and what is not is on the account recovery page.

Yes. You can convert between the coins you hold and the coin a vendor takes inside the market wallet, without leaving for an external exchange. The trade-off is the rate: in-platform conversion takes a fee, so for large amounts it is worth benchmarking against an external service first. The detail is on the review page.

The login screen uses a six-tile captcha with decoy input fields whose names rotate on every page load. It is there to frustrate automated phishing kits. Solve the tiles in the visible field only, and do not fill the decoy fields. The full login flow is on the login page.

Yes, in two places. Shipping details are encrypted to the vendor key at checkout, and the market offers a server-side PGP tool for messages. Server-side PGP is better than plaintext, but client-side encryption is the safer option because your plaintext never leaves your device. The trade-off is on the review page.