# TorLinks, the Tor Market Atlas, full text > Verified 2026-07-17. Every plate and guide flattened to markdown. Site: https://torlinks.shop Language: English Use: reference --- # Plate I: Nexus Market Also known as: Nexus. Established 2023. Languages: English. Coins: BTC, LTC, XMR. Status: Charted, active. Tagline: The market that gets the boring parts right. Verified onion mirrors: - http://nexusb2l7jnnbmofyik5fqdemwg6inbg4e3i2pi75uewuw34zwvx2ryd.onion - http://nexusma2iekjhhyenua3u4zlyfsj2ubwxr2nt6gdte5rvwukzze63fyd.onion - http://nexusabcdrstn74osnr67fsbzbo44kjpxqbbz5ymcwhlxjg6dloyhoyd.onion ## Survey If this atlas has a prime meridian, Nexus is it. Every other plate gets measured against how this one handles the fundamentals. It is an English-language market that opened in 2023 and spent its first year doing unglamorous work: fast onboarding, a login flow that does not fight you, mirrors that are actually signed, and payment support that covers what buyers reach for. The pitch is not a feature list. It is the absence of friction. An account takes a couple of minutes to make. The catalogue loads. Search returns. Vendors carry a deal count and a dispute ratio at the top of the profile so a read takes a minute rather than an afternoon. None of that is exciting on paper and all of it matters the third time you use the market and find everything where you left it. Three coins are accepted, which is one more than most of the atlas. The escrow behaves the way escrow is supposed to behave. The map here is dense and well travelled, which is exactly why it works as the point everything else is triangulated from. ## Access and phishing The single most reliable way people lose money on a Tor market is phishing, not the market itself vanishing. Nexus builds its access flow around that fact. The login captcha renders the real onion address into the image, so you can hold what you typed against what the server printed and catch a lookalike before you enter a password. The onion reprints in the page header on every load, a second place to cross-check. The mirror list is signed with a key you can verify on Dread. None of these three closes the phishing hole completely on its own. Together they raise the cost of a convincing clone enough that most attempts fall apart on inspection. The surveyor's instruction is unchanged from every other plate in this atlas: copy an address from a verified list, never type a fifty-six character string from memory, and glance at the captcha address before the password field. Ten seconds of habit against the most common way to get robbed. ## Payment and coins Bitcoin, Litecoin and Monero. That spread is deliberate and it covers three different reasons a buyer picks a coin. Monero is the privacy default, the one to use when the reason you are on Tor at all is that you do not want the payment legible on a public chain. Its ledger hides amounts and parties by design. Litecoin is the small-order coin. Bitcoin fees can make a modest purchase absurd, and Litecoin settles faster and cheaper for the times the number is small and you do not want to overpay the network for the privilege. Bitcoin sits in the list because a share of vendors still price in it and have not moved on. Deposit addresses are issued per order. Fund the escrow, and the coin sits in the multisig contract until the order closes. The practical rule is the same across the atlas: keep the balance on the market sized to the order in front of you, not the year of orders behind you. ## Escrow and disputes Escrow runs the way a buyer expects. You fund an order, the vendor ships, you confirm receipt, and the coin releases. If you never confirm, the order auto-finalises after a few days so a vendor is not left waiting on a buyer who wandered off. Disputes route through moderators who read PGP-signed evidence from both sides before deciding. New vendors post a bond and run escrow-only for a probation window before they earn the right to ask for finalise-early. That probation is a real filter. A scammer has to sink a bond and survive a stretch of fully-escrowed orders before the mechanism they need for a clean exit even unlocks, which makes the market a poor venue for the smash-and-grab. The one move that gives up all of this is finalising early on a vendor who has not earned your trust. The atlas position is blunt: do not finalise before the package is in your hands, whatever the reason offered. ## Verdict Nexus earns the first plate because it is the market you can hand a careful first-timer without a page of caveats. The phishing defences are layered, the escrow is honest, the coin support is broad, and the interface stays out of the way. The catalogue is deep because the market has had time to fill it. If you want one working address and one market to learn the shape of the whole territory on, start here and read the rest of the atlas against it. --- # Plate II: Anubis Market Also known as: Anubis. Established 2024. Languages: English. Coins: BTC, LTC, ETH, XMR. Status: Charted, active. Tagline: Four coins, and the only ETH door worth using. Verified onion mirrors: - http://anubisgbozgus4ixulnqwqnofh7fekylnzew5alb3iklijcke2cvviid.onion - http://anubisgpdzwmwlo42mr7g3n75lfusb7uolh7y63ysubvdp6hrezduuad.onion - http://anubisqe2yramasw5yvlnipaknraza5rzb5uxb7zqhxuxroobvvm6aid.onion ## Survey Anubis is the plate to open when the question is which coin the market takes rather than which market takes the coin. It accepts Bitcoin, Litecoin, Ethereum and Monero, the broadest spread charted in this atlas. If you are holding Ethereum and want to spend it on a Tor market, this is more or less the only door that opens. The market itself opened in 2024 and runs in English. Under the coin list it behaves like the rest of the shortlist: escrow, bonds, moderated disputes, profiles that show what you need before an order. The distinguishing terrain is the payment layer and a login gate built to frustrate automation. Treat the coin breadth as a convenience, not a reason to be careless about which one you pick. The right coin still depends on what you are optimising for, and the atlas has a whole survey page on that question. ## Access and phishing The login captcha on Anubis is six tiles, each a tilted character, sitting next to a decoy input field. A bot fills the wrong field and trips the trap. A human reads the tiles and solves it in about ten seconds. The form field names rotate on every page load so a script cannot cache the layout and replay it. There is usually more than one onion live at once. When one address is being flooded the others stay reachable, and a fresh one rotates into the pool within a few hours. The instruction that follows from this is to never bookmark a single address as if it were permanent. Bookmark the signed mirror list and check it when something stops resolving. Verify the list against the market PGP key before you trust a new address. An address that is not on the signed list does not get your password, however similar it looks to one that is. ## Payment and coins Four coins, each with a job. Monero for privacy, the default when you actually care about the payment being unreadable afterward. Bitcoin for the vendors who have not switched. Litecoin for small orders where Bitcoin fees would be out of proportion to the purchase. Ethereum for the specific case where that is what you are holding and moving it into something else first is friction you would rather skip. Being able to pay in Ethereum is genuinely rare on Tor. It is worth knowing the trade: Ethereum's chain is as public as Bitcoin's, so paying in it buys convenience, not privacy. If the reason you are here is to keep the payment private, the answer is still Monero, and the extra coins are there for the orders where privacy is not the constraint. Deposit addresses generate fresh per order across all four coins. The multisig escrow behind them does not care which coin funded it. ## Escrow and disputes The escrow flow matches the atlas standard. Fund, ship, confirm, release, with an auto-finalise backstop if the buyer never confirms. Vendors who have not earned finalise-early stay escrow-only and the profile says so plainly, so you can see a vendor's standing before you commit rather than after. Dispute outcomes are visible on the profile as well, which turns a vendor's history into something you can actually read. A vendor who loses disputes leaves a trail. Moderators stay active on Dread for the escalations that need a human, and a signed-evidence process keeps the decision anchored to what both sides can prove. Same caution as everywhere: escrow-only exists to protect you, and finalising early on an unproven vendor hands that protection back for nothing. ## Verdict Anubis is the answer to a specific question. If the coin in your wallet is the constraint, this is the plate that solves it, and the Ethereum support has no real competitor on the map. The anti-automation login and the rotating mirror pool are solid, and the escrow gives up nothing to the rest of the shortlist. Pick it for the payment flexibility. Just remember that flexibility and privacy are different axes, and choose the coin for the axis you care about. --- # Plate III: Awazon Also known as: Awazon Market. Established 2024. Languages: English. Coins: BTC, XMR. Status: Charted, active. Tagline: A Tor market that copied a normal shop, on purpose. Verified onion mirrors: - http://awazoneqkwtrk5ylid5aammako4zc4qz2lvo4n47t62isvnet63usaid.onion - http://awazonloedcyl2otgftfg7qm6e2klbgg2dhouyli3hdno6gdkueh6byd.onion - http://awazonozc4jwyrveu4473igv5ldt2hnccl2s7lerm2z27cvrc22e4uyd.onion ## Survey Awazon is what a Tor market looks like when it bothers to copy a normal online shop. Product cards, a category sidebar, vendor profile pages, an order history, a search box that works. If you have ever bought anything on the clear web you already know how to use it, and on this terrain that familiarity is rare enough to be the whole point. It opened in 2024 and runs in English. The name is a wink at the obvious retail comparison and the interface leans into it without apology. For a first crossing, the value is that you spend your attention on the parts that actually carry risk, verifying the address and choosing a coin, instead of burning it on figuring out where the buttons are. This is the plate to hand someone who has never done this before. The map is legible on the first read. ## Access and phishing The captcha is six characters of text, case sensitive, with a couple of decoy input fields next to the real one. Bots fill a honeypot field and the script never reaches the real login. The field names rotate on every page load so the layout cannot be memorised by automation. Mirror updates are posted with a PGP signature, which is one of the checks that gets a market onto a serious list in the first place. Before you trust an address, confirm it appears on the signed list. The familiar interface does not change the one rule that never bends: verify the door before you knock on it. For a first-timer the trap to avoid is assuming that because the shop looks ordinary, the safety habits are optional. They are not. The address discipline is the same here as on the most spartan market in the atlas. ## Payment and coins Bitcoin and Monero. Use Monero if privacy is any part of why you are here, because it is the coin that keeps the payment off a readable public ledger. Use Bitcoin when a vendor takes only Bitcoin and you have no choice, which still happens. The deposit address is generated fresh for each order, so you are not reusing an address and you do not have to think about the bookkeeping. Fund the order, and the coin sits in escrow until you close it out. For a first purchase the atlas advice is to keep it small, keep it cheap, and use it to learn the flow rather than to stock up. The coin you can afford to lose on a learning order is the right size for a learning order. ## Escrow and disputes Vendors post a bond, and new ones cannot use finalise-early until they have run a few clean orders. Each vendor page shows a deal count and a dispute ratio. Read both before you order. It takes about a minute and it is the single most useful minute you will spend on the market. The escrow flow is the standard one: fund, ship, confirm, release. For a first order the instruction is to let escrow do its job. Do not confirm receipt until the package is physically in your hands, whatever a vendor tells you about their shipping being reliable. The friendly interface makes it easy to move fast. Move slow on the first order. The habits you build on the gentle market are the habits that keep you safe on the spartan one. ## Verdict Awazon is the recommended first crossing. The interface removes the friction that trips new users up and lets you spend your attention on the parts that matter. Coin support is narrow but covers the important case, and the escrow and mirror discipline match the rest of the shortlist. Learn the shape of the territory here, where the map is easiest to read, and the harder plates make more sense afterward. --- # Plate IV: Crown Market Also known as: Crown. Established 2024. Languages: English. Coins: BTC, XMR. Status: Charted, active. Tagline: Treats the interface like a product. PGP on by default. Verified onion mirrors: - http://crowncahzxbrm4rgqqkx7yhmwkie7ompgqocrjayoqos2fsofddeigad.onion - http://crownknshitgyyx3hfzn23cw6j5psngn6ennetusrzozsmnmhp66sxad.onion - http://crownm5jmtbhqnoxhexx7nyiygqgqofp3wnjyyfl74gziohqqy6oq5id.onion ## Survey Most Tor markets look like they were built in 2009 and never revisited. Crown treats the interface as a product that someone is responsible for. Clean typography, vendor profiles you can scan in seconds, an order flow that gets out of the way. Come back a second time and you do not have to relearn where anything lives. It opened in 2024, runs in English, and is newer than most of the shortlist, which shows in the vendor count. The trade Crown asks you to make is catalogue depth for interface quality. You get fewer vendors and a market that is genuinely pleasant to use. On this map, where legibility is a survival trait and not a luxury, a market that is easy to read correctly is worth charting near the top. ## Access and phishing The detail that is easy to miss on Crown is that PGP on vendor messages is on by default. You do not have to remember to turn it on. That single default closes a class of mistakes where a buyer pastes an address into a message they think is encrypted and it is not. Mirror rotation is announced with a PGP signature on Dread, the same verification standard the rest of the atlas holds to. Confirm a new address against the signed list before you use it. The clean interface does not exempt you from the address discipline, it just makes the rest of the market pleasant once you are safely inside. Moderators answer fast on the forum, which tells you most of what you need to know about how a dispute will go before you ever open one. ## Payment and coins Bitcoin and Monero, with Monero as the default. That default is the correct one and Crown setting it saves a buyer from the most common privacy mistake, which is paying in Bitcoin out of habit when Monero was right there. Bitcoin remains available for the vendors who require it. Deposit addresses generate fresh every time. The coin funds the standard multisig escrow behind the order. Nothing exotic in the payment layer, which on this terrain is a compliment. If you value a market that quietly nudges you toward the safer default without making you configure it, Crown's payment layer is built around that instinct. ## Escrow and disputes Escrow is the normal flow. Fund, ship, confirm, release. Vendor profiles show a deal count and a dispute ratio up top, so the standard one-minute profile read gives you a clear picture before you order. On a market with a smaller vendor base, that legibility matters more, because you have fewer vendors to choose between and want to read each one accurately. Moderators are quick on the forum and the dispute process is anchored to signed evidence like the rest of the shortlist. The smaller scale means escalations tend to get a human faster than on a crowded market. The finalise-early rule holds. Do not release before the package arrives, and lean on the escrow-only status the profile shows you. ## Verdict Crown is the plate for a buyer who values a market that is careful about the details. The interface is the best-drawn on the map, PGP-by-default removes a real footgun, and Monero-by-default steers you toward the safer coin without a settings menu. The cost is catalogue depth, because the market is young. Chart it when you want the experience to be clean and you can accept a shorter vendor list. Everything except vendor count clears the same bar the top plates do. --- # Plate V: Mars Market Also known as: Mars. Established 2023. Languages: English. Coins: BTC, LTC, XMR. Status: Charted, active. Tagline: More live onions at once than anyone else here. Verified onion mirrors: - http://mars24pas2vgwtr4drrsy7tlngevbvxyguejynnkeywibjzenet7knqd.onion - http://marsautbk3di5cj75eh4dakjjrngddnjwqfdltbq2sy6cf7unzkd2bad.onion - http://marsautkudspgk6j23cxdtrk36ae4fpis2eoe7izu5y2rsksvmfji2ad.onion ## Survey Mars publishes more live onions at any given moment than anyone else on the shortlist. That is the whole thesis of the plate. When the active mirror gets flooded you paste another from the signed list and keep going, instead of staring at a market that has gone dark for two days. It opened in 2023 and runs in English. Under the mirror strategy it is a conventional, well-run market: escrow, bonds, moderated disputes, readable vendor profiles. If you have used Nexus you will recognise the shape immediately. What Mars adds is redundancy, and for anyone who has lost an order because a market vanished during a flood, redundancy is not an abstraction. This is the plate to chart when uptime is the thing you cannot compromise on. ## Access and phishing Text captcha, six characters, with decoy input fields whose names rotate every page load. Bots fill the wrong field, trip a honeypot, and never reach the real login. The page header prints the onion you should be on, so you can cross-check the address bar against what the market says its own address is. The mirror list is the star of this plate. It is deep and it is signed, and the entire point of Mars is that you rotate across it freely. When one address stalls, the correct response is not to wait, it is to open the signed list and move to the next live onion. Keep the list, not a single bookmark. Verify the list against the market key. The redundancy only helps if every address you rotate to is one the market actually published. ## Payment and coins Three coins: Bitcoin, Litecoin and Monero. Monero is the one to use when privacy is the reason you are on Tor. Litecoin is there for small orders where Bitcoin's fees would be silly against the size of the purchase. Bitcoin is present because a portion of vendors still want it. The three-coin spread matches Nexus and is one of the reasons Mars reads as a serious, complete market rather than a single-trick uptime play. Deposit addresses are per order, and the coin funds the standard escrow. Pick the coin for the job. The survey page on coins in this atlas lays out the trade-offs in full if you want the reasoning rather than the summary. ## Escrow and disputes Standard escrow. Vendors post a bond, run escrow-only for a probation window, then earn finalise-early. Dispute outcomes are visible on the profile, so a vendor's track record is legible before you order. Moderators answer fast on Dread, which is one of the things that got Mars onto a serious list and one of the things that keeps it there. The uptime advantage has a quiet second benefit for disputes: a market that stays reachable is a market where you can actually open and follow a dispute when you need to, rather than discovering the venue is offline at the exact moment you need the moderators. The finalise-early caution is the same as every plate. Do not release early on an unproven vendor. ## Verdict Mars is the plate for buyers who have been burned by downtime. The deep, signed mirror pool means the market is there when you need it, and everything else, coins, escrow, moderation, matches the top of the shortlist. There is no meaningful sacrifice here, just an added margin of reachability. Chart it as your default if the failure mode you most want to avoid is a market going dark mid-order. --- # Plate VI: Osiris Market Also known as: Osiris. Established 2024. Languages: English. Coins: BTC, XMR. Status: Charted, active. Tagline: Several onions kept warm, fast moderators. Verified onion mirrors: - http://osirisdaec7ufbb3sbe3r355b2s7lwvw726l4z4oumg6kdddnomht3qd.onion - http://osirisdtn7lmphfz722ay24timiezf4kp6plofxg23dgu5tu2ouy4mid.onion - http://osirislivpetlbabbl3zzqhupurfkxxbzbheu3bkrshkaiwg2hcxbyqd.onion ## Survey Osiris is the market to point people at when DDoS season arrives. Most Tor markets disappear for hours or days when someone decides to flood them. Osiris keeps several onions warm at once, so when one gets hammered the others stay up and traffic just rotates over. It opened in 2024 and runs in English. Where Mars leans on the sheer number of published addresses, Osiris pairs a deep mirror pool with fast moderator response, and the combination is what makes it a resilience pick rather than a redundancy pick. The market stays reachable, and when something needs a human the human turns up quickly. If Mars and Osiris look like near neighbours on the map, that is because they are. They answer the same question from slightly different angles, and both belong on a serious chart. ## Access and phishing On phishing Osiris does the basics correctly: the onion is embedded in the captcha image, the onion reprints in the page header, and moderators active on Dread can confirm a mirror is legitimate when someone asks. Fast forum response is one of the traits the atlas weights heavily, and Osiris scores well on it. The mirror list lives on Dread, signed with the market key. Check the list before logging in if a mirror is behaving strangely. The rule is stated plainly on the plate and it is the rule for the whole atlas: if the address you typed is not on the signed list, do not type your password. The deep pool means you have somewhere to rotate to when an address is under pressure. Use it. Reachability is only useful if you actually move to a live address instead of waiting on a dead one. ## Payment and coins Bitcoin and Monero. Monero for anything you care about keeping private, which is most of what people are on Tor for. Bitcoin for the vendors who have not moved to Monero yet. The two-coin spread is narrower than Mars but covers the cases that matter. Deposit addresses are issued fresh, and the coin funds the standard escrow. There is nothing unusual in the payment layer, which on a resilience-focused market is the right call. The interesting engineering on Osiris is in staying online, not in reinventing how deposits work. Default to Monero unless a vendor forces Bitcoin. The atlas coin survey covers the reasoning if you want it in full. ## Escrow and disputes Escrow is the same flow you see across the shortlist: fund, ship, confirm, release. Finalise-early stays locked until a vendor has earned it, and the profile shows a vendor's standing. Fast moderator response is the standout, and it matters most exactly when you have a dispute open and want it moving rather than sitting. A resilient market is also a market where the dispute process stays available under pressure. When a flood knocks lesser venues offline, the ability to reach moderators and follow a case through is itself a form of buyer protection that downtime quietly removes. Same closing caution as every plate. Do not finalise early on a vendor who has not earned it. ## Verdict Osiris is the resilience plate. Deep mirror pool, fast moderators, correct phishing basics, honest escrow. It sits beside Mars as the answer to the downtime problem, tilted slightly toward moderator responsiveness rather than raw address count. Chart it when your worst-case is a market vanishing under a flood at the moment you needed it, and you want the moderators reachable when they are needed most. --- # Plate VII: TorZon Market Also known as: TorZon. Established 2022. Languages: English. Coins: BTC, XMR. Status: Charted, active. Tagline: A queue at the door and a withdrawal PIN on the vault. Verified onion mirrors: - http://torzon4v7bcakvo7qikdfknewj4dlr44hkyv4jyfrkl7ci3zqn76kiid.onion - http://evwigej45n3nywbn3aqdun4o6cgjyfgxf2ts7lm6no3uotxanpeuosad.onion - http://tv4pfwlnoezgtzwrr33fturalfcfvdil6sly33ecx2j7lrxxyrydwdad.onion - http://fr6bvsrcx7ajxou7kyme5otctzdmpllum6iqootcjnwmzepuuams2tad.onion - http://wqg5wuwzdv7vtugrb64jmtwp5gx4ho6ksqzcghvoly6zvvwmyusbx7yd.onion - http://5yymslrttw7xhrgdgv4hrqcccrrfiopeuj2naicccozj63yfqum3apqd.onion - http://3borx37hbxf4qw5oujbhqvnicyvcb7vizb2lcogzbunwgz7cbmd5vkyd.onion ## Survey TorZon has been on Tor since 2022, which makes it one of the older English-language markets in this atlas. Longevity on this terrain is itself a data point. A market that has survived several years of floods, exit-scam seasons and takedown pressure has demonstrated something a six-month-old market simply cannot. The interface is plain. Categories on the left, search up top, vendor profiles with a deal count and a dispute ratio in the header. If you have used Nexus or Mars you already know your way around. TorZon does not spend effort on looking modern, and given how long it has stayed standing, that focus reads as a feature. What TorZon is actually known for is the queue and the vault. Both are covered below, and both are the reason this plate is worth charting carefully. ## Access and phishing Every visit to TorZon hits a server-side anti-DDoS waiting room before anything else. A static access-queue page holds you for a few seconds to a minute depending on load. It is flood control: bots that do not respect the queue cannot hammer the login captcha behind it. It is mildly annoying the first time and completely normal by the third. The mirror set is seven v3 onions running concurrently, the deepest pool on the shortlist. That is a lot of redundancy, and it is the other half of the resilience story alongside the queue. Keep the signed list. Rotate across it freely when an address is slow. The queue changes the rhythm of access but not the rules. Verify the address against the signed list, cross-check the header, and treat any address not on the list as hostile no matter how close it looks. ## Payment and coins Bitcoin and Monero, with Monero as the default and the right choice if privacy is the reason you are on Tor at all. Bitcoin sits in the list for the vendors who only take Bitcoin. Deposit addresses are fresh per request and never reused. The detail worth stopping on is the vault. TorZon enforces a withdrawal PIN separately from the login password. If someone steals your session cookie, they still cannot empty the balance without the PIN. That is a genuinely useful second lock, and it addresses a real attack that most markets leave open. The lesson generalises: keep the on-market balance small, and appreciate that TorZon at least gives you a second barrier around whatever balance you do keep. ## Escrow and disputes Escrow follows the shortlist standard. Fund, ship, confirm, release, with finalise-early gated behind vendor probation and dispute outcomes visible on profiles. The added withdrawal PIN sits alongside escrow as a second layer of account protection, separating the ability to log in from the ability to move money out. The age of the market means the dispute process has been exercised many times over several years. A long operating history is a stress test that most markets on the chart have not yet been through, and TorZon's continued standing is the result of that process working often enough to keep buyers and vendors returning. The finalise-early caution holds here as everywhere. The PIN protects the balance, not a bad release decision you made yourself. ## Verdict TorZon is the veteran plate. Oldest English market on the chart, seven live onions, a flood-control queue at the door and a withdrawal PIN on the vault. The interface is plain and the market is unglamorous, and after several years standing, that is precisely the recommendation. Chart it when you want a market that has already proven it can survive the things that kill younger markets, and you do not mind waiting a minute in a queue to get in. --- # Plate VIII: WeTheNorth Also known as: WTN, We The North. Established 2021. Languages: English, French. Coins: BTC, XMR. Status: Charted, active. Tagline: Built for Canada, in proper English and French. Verified onion mirrors: - http://hn2paw7zadwkcra3qzv5e4q547i7e5lvxm62cfxqftuqdu7moiu2ceyd.onion - http://hn2paw7zfvndw3dovycegeqmvvnf4pl67b3g2p7pohjlzavloosh73id.onion - http://hn2paw7zrgujyhnt6mgxlt2q6uhgbke4itpqitxhyfbumq3wtnckbuyd.onion ## Survey WeTheNorth, usually written WTN, is the northern territory on this atlas. It is a bilingual Tor market aimed at Canadian buyers, and the name is a Raptors slogan rather than a coincidence. The interface runs in both English and French, shipping defaults to Canada-only, and most vendors ship from within Canada too. You can reach it from anywhere, but the whole thing is built for one audience. It opened in 2021, which makes it one of the longest-standing markets on the chart, older even than TorZon. That longevity in service of a single national market is unusual and it means the Canadian vendor base has had years to mature. If you are Canadian and want vendors who ship domestically without a border crossing, this is the plate. If you are not, it is still worth understanding as the clearest example of a market that chose a niche and served it well. ## Access and phishing Under the hood WTN works like any other Tor market: escrow, PGP, moderators, dispute decisions anchored to signed evidence. What is different is the phishing defence. The login captcha shows the real onion address embedded in the image, and the page header reprints it on every load. Lookalike sites that copy the WTN theme struggle to fake both at once. That two-place verification is the same pattern the strongest plates use, and it works for the same reason: a clone can copy a theme easily, but it cannot easily serve the correct address in two independent places while pointing you at the wrong one. Copy from a signed list, check the captcha address, check the header. The bilingual interface means the verification cues appear in both languages, so a French-speaking buyer gets the same protection without switching to English to read a warning. ## Payment and coins Bitcoin and Monero, and Monero is the one to default to. Bitcoin is present for the vendors who have not switched. Deposit addresses are fresh every time. Confirmations run about one to two blocks on Bitcoin and around ten blocks on Monero, which is normal and worth knowing so you are not surprised by the wait. Because shipping defaults to domestic Canada, the practical flow for a Canadian buyer is unusually clean. Fewer cross-border variables, shorter transit, and a vendor base that understands the domestic postal system. The coin choice is the same reasoning as the rest of the atlas, and Monero remains the privacy default. Keep the on-market balance small, as everywhere, and default to Monero unless a vendor forces Bitcoin. ## Escrow and disputes The escrow is standard, and the bilingual commitment goes deeper than a translated button. Vendor messages, dispute screens and policy pages are all in proper French, not a machine-translated veneer. For a French-speaking buyer that means the dispute process, the part where precise language matters most, is actually usable in the language they think in. That is a real advantage. A dispute is where misunderstanding a policy page costs you money, and a market that runs its dispute process in genuine French removes a category of error for a large share of its intended audience. The underlying mechanics, bonds, probation, signed evidence, match the shortlist. Finalise-early caution applies. Do not release before the package is in hand, in either language. ## Verdict WeTheNorth is the plate for Canada. Bilingual in genuine French and English, domestic shipping by default, a mature vendor base from years of operation, and phishing defences that match the strongest markets on the chart. For a Canadian buyer it is the obvious first choice. For everyone else it is the clearest lesson in the atlas about what a market gains by choosing an audience and serving it completely rather than trying to be everything to everyone. --- # Routes ## The main road: Tor Browser *The one download that opens every plate in this atlas.* Every address in this atlas is a Tor hidden service, and a hidden service only opens in the Tor Browser. This is the main road onto the map, and getting onto it correctly the first time closes most of the ways a crossing goes wrong. ## Download from one place The only source is **torproject.org**. Any other download page is either an unverifiable mirror or a modified build with something added that you do not want. If you land on a Tor Browser download that is not the official project site, close the tab and start again. ## Check the signature the first time The Tor Project signs every build. Verifying that signature against the project key is the difference between a clean browser and one that quietly leaks your traffic around Tor. The download page walks the check for every operating system. Do it once, on the first install. ## Set the level to Safest Open the shield beside the address bar and set the security level to Safest. That turns off scripting everywhere, which removes the most reliable path anyone has to break Tor's anonymity from inside the browser. The markets in this atlas are built to work at Safest, so you lose nothing you need. ## Leave the window alone Do not resize or maximise the window, and do not add extensions. Both make your browser fingerprint unique, which is the opposite of what Tor is for. The browser ships anonymous. Every change you make chips at that. Use it as it comes. Once the road is open, the rest of the atlas is a matter of copying the right address and reading the terrain before you commit. --- ## The high road: Tails *A whole operating system that forgets everything when you shut down.* Tor Browser protects your traffic. It does not protect the machine underneath it, which is still your everyday operating system talking to its usual services in the background. Tails is the high road that closes that gap. ## What Tails is Tails is a complete operating system that boots from a USB stick, routes everything through Tor, and forgets everything the moment you shut down. Nothing is written to the machine's own disk. When the session ends there is no trace of it on the hardware, which is a very different guarantee from a browser running on top of a normal system. ## What it protects against The amnesic design means a device that is later examined carries no record of the session. Routing everything through Tor means no application can accidentally reach the network outside Tor. Together they cover the failure modes that Tor Browser alone leaves open, which are the machine remembering and some other program talking around Tor. ## When it is worth it For casual reading, Tor Browser on your normal system is fine. For anything where the machine remembering the session is a risk you care about, Tails is the tool. It takes a USB stick and a few minutes to set up, and after that it is boot, use, shut down. The atlas does not require Tails to read a plate. It recommends Tails for anyone whose threat model includes their own hardware being examined later. --- ## The hidden path: bridges *For crossing when the border itself blocks Tor.* Some borders are watched. A number of ISPs and a handful of countries block Tor entry outright or log it. A bridge is the hidden path across that border. It routes your Tor connection through a relay that is not on the public list of Tor nodes, which hides the fact that you are using Tor at all. ## When a bridge helps Use a bridge when Tor Browser cannot connect, connects painfully slowly, or when the Tor Project's own site is blocked where you are. Those are the signs that your border is watched. A bridge routes around the block by looking like ordinary traffic. ## When it does not If Tor is not blocked where you are, a bridge only adds latency for no privacy gain. It is a tool for a specific problem, not a default to switch on everywhere. ## How to set one Open the Tor Browser connection settings, choose to use a bridge, and pick the built-in obfs4 option or request a bridge from the Tor Project. Restart the browser. That is the whole setup. ## What it does not do A bridge hides that you are on Tor. It does not change anything about what you do once you are on Tor. Every rule in this atlas about verifying addresses and reading the terrain still applies exactly as written. --- ## The narrow trail: mobile *It works on a phone. It is not where you want to do the careful work.* Tor Browser for Android is real and it opens every plate in this atlas. But a phone is a narrow trail, and some of the careful work is harder to do on it correctly. ## What works on mobile Login, the anti-DDoS queues, captchas, browsing, ordering, messaging, disputes. The markets function on a phone the way they do on a desktop. For reading the atlas and doing routine things, the mobile browser is fine. ## What is harder Copying a fifty-six character onion address is fiddlier on a touch screen, and truncating one by accident is easier. Verifying a PGP signature is more awkward because the desktop tools are more capable. And the mobile anonymity set is smaller, which means a mobile browser stands out more than a desktop one. ## The iOS problem There is no genuine Tor Browser for iOS. Apple forces every browser onto the same underlying engine, which limits how much a Tor-focused browser can differ from a normal one. Third-party apps exist and route through Tor, but the guarantees are weaker. If you have the choice, use Android or a desktop. ## The rule Do the setup-heavy work, first registration and PGP verification, on a desktop. Do the routine work wherever is convenient. The narrow trail is fine for walking, less so for the parts of the crossing that carry the most risk. --- ## The one dial that matters: Safest *Why the security level goes to the top and stays there.* The Tor Browser shield hides three security levels, and for the crossings in this atlas only one of them is correct. Safest. This plate explains the dial and why it goes to the top. ## What the levels do Standard leaves the browser close to a normal one, with scripting on. Safer disables some of the riskier scripting features. Safest turns scripting off everywhere and disables a broader set of media and font features. The levels are not about the Tor network, which is identical at every setting. They are about what the browser will do with a page once it arrives. ## Why Safest Scripting running in a hostile page is the single most reliable route anyone has to break anonymity from inside the browser. Nearly every serious deanonymisation of the last decade came through a script. Turning scripting off closes that route. Safest does it unconditionally. ## The cost, and why it is small here At Safest some ordinary websites break, because they lean on scripting. The markets in this atlas do not. They are built to work with scripting off, so the login, browsing, checkout and messaging all function at Safest. You give up nothing you need and close the most important hole. Set the dial to Safest for the session. It is the cheapest strong protection on the map. --- # Field manual ## Reading a false trail *Phishing is how most people are robbed here. The defence is a habit, not a tool.* The way most people lose money on a Tor market is not the market vanishing. It is a false trail, a lookalike address that copies the market's theme and harvests the password you type into it. Learn to read the false trail and you close the largest hole on the map. ## How the trail is laid An attacker stands up an onion that differs from a real one by a couple of characters in the middle of the string, where the eye does not catch a substitution. They copy the market's login page exactly. You type your password, and it is theirs. Some clones go further and ask you to re-enter a recovery phrase, which the real market never does at login. ## The three checks First, copy addresses from a verified, signed list and never type one from memory. Second, when the login captcha prints the market's own address into the image, hold it against your address bar and confirm they match. Third, cross-check the address the page header prints. A clone can fake a theme easily. Faking the correct address in two independent places while sending you somewhere wrong is much harder. ## The habit None of these takes more than a few seconds, and any one of them catches the ordinary attempt. Run them every session, not just the first. A bookmark you saved months ago can point at an address that has since rotated out and been picked up by someone hostile. The check at the door is the last line, so do it every time. --- ## Verifying a signature *What a PGP signature proves, and the two commands that prove it.* Every serious market in this atlas signs its mirror list with a PGP key. Verifying that signature is how you know a published address actually came from the market and not from someone impersonating it. This plate covers what the signature proves and how to check it. ## What a signature proves A PGP signature over a message proves two things at once. That the message was signed by the holder of a specific private key, and that not one byte has changed since it was signed. For a mirror list that means the addresses inside provably came from whoever holds the market key, and nobody has edited them in transit. ## The trust anchor The check is only as good as the key you check against. Fetch the market's public key once, from at least two independent places, cross-check the fingerprint, and import it. After that, every future list verifies against the same key on your keyring. Do not re-fetch the key each time, because re-fetching is another chance for someone to hand you the wrong one. ## The two commands Save the signed list to a file and run the verify against it with GnuPG. Look for the line that says the signature is good and names the market key. That line is the whole result. A warning that the key is not certified by you is normal and expected. A bad-signature line means the list was altered, and you trust none of the addresses in it. ## Comparing the addresses Once the signature checks out, compare the addresses in the verified list against the one in your bar. Match means you are on a genuine address. The signature and the address check are two different defences, and running both closes more than either alone. --- ## How the strongbox works *Two of three multisig, in plain terms, and the one move that opens it wrongly.* The strongbox that holds your money between paying and receiving is a two of three multisig contract. Understanding it is the difference between trusting the market blindly and knowing exactly what protects you and what does not. ## Three keys, any two open it Every order generates three keys, held by the buyer, the vendor and the market. Any two of the three together can move the coin. In a clean order the buyer and vendor sign after delivery and the market key never moves. The market cannot touch the money alone, because one key out of three opens nothing. ## Why three and not two A straight two-key box between buyer and vendor jams forever if either side goes quiet. The third key is the tiebreaker. Because the market holds only one of three, it cannot walk off with deposits, which is the exit-scam that has sunk weaker markets. It can only help resolve a dispute. ## The dispute path When something goes wrong, a moderator reads signed evidence from both sides and co-signs with whichever side is owed. That co-signature is the second of the two needed, and the coin moves accordingly. A refund co-signs with the buyer to a refund address. The vendor is not required for a refund to settle. ## The one wrong move Finalising early means signing your release before the package is in your hands. It empties the strongbox to the vendor and removes the dispute path. On an unproven vendor it is the mistake that undoes every other protection. Do not do it, whatever reason is offered. --- ## Choosing what to carry *Bitcoin, Litecoin, Monero, Ethereum. Which coin for which crossing.* The coins accepted across this atlas are Monero, Bitcoin, Litecoin and, on one plate, Ethereum. Each answers a different question, and choosing well is part of crossing safely. ## Monero, the privacy default Monero hides the sender, the receiver and the amount by design. If the reason you are on Tor at all is that you do not want the payment legible afterward, Monero is the answer, and it is the coin to default to unless something forces otherwise. Most markets in the atlas now set it as the default themselves. ## Bitcoin, the legacy coin Bitcoin is the most widely held and the easiest to acquire, and it leaves the clearest public trail. Its ledger is fully readable. Use it when a vendor takes only Bitcoin. If you do, do not send straight from an identity-checked exchange to a market, because that ties your name to the deposit. Route through a fresh wallet or a swap first. ## Litecoin, the small-order coin Litecoin behaves like Bitcoin but settles faster and cheaper. It is the coin for small orders where Bitcoin's network fee would be out of proportion to the purchase. Two markets on the chart accept it. ## Ethereum, the narrow case One plate accepts Ethereum. Its chain is as public as Bitcoin's, so paying in it buys convenience when that is the coin you hold, not privacy. If privacy is the goal, the answer circles back to Monero every time. --- ## When a crossing goes wrong *The dispute process, and how to come out of it in one piece.* Sometimes a crossing goes wrong. A package does not arrive, arrives short, or arrives unusable. The dispute process is the map back, and how you walk it decides whether you come out whole. ## When to open Open a dispute when a vendor has gone quiet past a reasonable window after a clear question, when the order is well past the advertised shipping time with no update, or when what arrived does not match the listing. Not before. A dispute opened too early, before you have given the vendor a fair chance to respond, reads poorly to a moderator. ## What a moderator sees Your dispute text and evidence, the full message thread, the vendor's dispute history, and any pattern of similar disputes against the same vendor. The evidence you bring is what the decision turns on, so bring it up front. Clear photos, a calm factual account, and the message log that shows your side was reasonable. ## Common outcomes A full refund for an undelivered order or a clear vendor failure. A partial refund when the item arrived but fell short of the listing. No refund when the order matched and the complaint is not supported. Moderators co-sign the release toward whichever side the evidence favours. ## Improving your odds Keep the language factual, not accusatory. Answer moderator questions quickly. Do not open several disputes at once. And never finalise early in the hope a vendor will reward you by shipping, because that is the exact trap that removes the dispute path you would then need. --- ## Travelling light *The small habits that separate buyers who last from buyers who lose accounts.* Operational security on this terrain is not one dramatic precaution. It is a stack of small habits, each cheap, that together keep an account standing. This plate is the packing list for travelling light. ## A fresh identity Pick a username you have never used anywhere else. Reusing a handle from a clear-web forum or an old account is exactly how a name gets tied to an account across platforms. Start clean. ## A unique password, stored right Generate a long unique password and keep it in an encrypted local manager, not a browser autofill and not a cloud-synced service. The recovery phrase the market issues at registration goes on paper, in your own hand, stored somewhere only you reach. Anyone who holds that phrase holds the account, so it never touches a screenshot or a synced note. ## Session hygiene Close the browser after a session rather than leaving it open for days. Use a fresh Tor identity between separate accounts. A long-lived session is a longer window for something to go wrong, and the fix costs nothing. ## Keep the balance small Money on a market is money exposed to whatever happens to the market. Keep the on-market balance sized to the order in front of you, and withdraw the rest to a wallet you control. Travelling light means carrying only what the current crossing needs. --- ## Where to keep the coin *The wallets that keep your money yours between orders.* The market wallet is a checkout buffer, not a vault. Between orders your coin belongs in a wallet you control. This plate covers where. ## Monero Feather Wallet is a light, actively maintained desktop wallet that needs no full node. Cake Wallet is the mobile-friendly choice and carries a built-in swap that converts Bitcoin to Monero without an exchange in the middle. Either keeps your keys in your hands. ## Bitcoin Sparrow is the privacy-aware desktop wallet, with coin control and hardware wallet support. Electrum is the lighter, simpler option. Both let you hold your own keys, which is the whole point of moving coin off the market. ## Non-custodial routing The privacy of a market deposit is only as good as the coin that funded it. Do not send straight from an identity-checked exchange to a market. Route through a fresh wallet you control first, or swap Bitcoin to Monero inside Cake before depositing, which breaks the chain trail between your name and the market address. ## What to avoid Custodial exchange wallets, browser-extension wallets, and any wallet that will not export a seed phrase or that syncs to a cloud account by default. The rule is simple. If you cannot hold the keys, it is not where your coin should rest between crossings. --- # Lexicon **Anti-DDoS queue**, A waiting-room page in front of the login that holds every visitor for a short spell. It is flood control, rate-limiting bots so they cannot hammer the captcha behind it. TorZon is the plate best known for it. **Bond**, A refundable deposit a new vendor posts before listing. It is forfeit if the account is suspended in probation, which makes a smash-and-grab vendor account cost real money up front. **Captcha address check**, The habit of reading the onion address a market prints into its login captcha image and holding it against the address bar. A fast, per-session catch for lookalike sites. **Dispute**, A formal disagreement over an order. A moderator reads signed evidence from both sides and co-signs the escrow release toward whichever side the evidence favours. **Escrow**, The arrangement that holds a payment in a multisig contract until buyer and vendor agree the order is done, or a moderator decides a dispute. **Finalise-early (FE)**, Signing your escrow release before the package arrives. It empties the strongbox to the vendor and removes the dispute path. The one move the atlas warns against on every plate. **Hidden service**, A server reachable only through Tor at a .onion address. Every market in this atlas is one. A normal browser cannot open it. **Mirror**, A distinct onion address that resolves to the same market. Same account, same balance, same orders. Markets run several so a flood on one address does not take the market down. **Multisig (2 of 3)**, An escrow contract with three keys held by buyer, vendor and market, where any two release the coin. It stops the market walking off with deposits because one key alone opens nothing. **Onion address**, A fifty-six character v3 Tor address ending in .onion. Copy it, never type it, and verify it against a signed list before entering a password. **PGP signature**, A cryptographic signature over a message that proves who signed it and that nothing has changed since. Markets sign their mirror lists so you can confirm an address is genuine. **Probation**, The escrow-only window a new vendor runs before earning finalise-early. Their standing shows on the profile, so you can read it before ordering. **Safest**, The top Tor Browser security level, which turns scripting off everywhere. The correct setting for every crossing in this atlas, and the markets are built to work at it. **Signed mirror list**, A market address list published with a PGP signature, usually on Dread. Verifying it against the market key is how you know an address was published by the market and not an impersonator. **Withdrawal PIN**, A second secret, separate from the login password, required to move a balance off the market. TorZon enforces one, so a stolen session cookie alone cannot empty the account.