OPSEC for UK Darknet Buyers — The Everyday Checklist
OPSEC (operational security) sounds military; in practice it's a short list of habits that keep your market life separate from your real one. You don't need to live like a spy — you need to stop doing the handful of things that link identities together. Here's the list, roughly in order of value.
The checklist
1One username, used once
Your Fawkes Market username appears nowhere else. Not Reddit, not Discord, not gaming, not email. Cross-linking identities is the single most common self-inflicted OPSEC failure — and the easiest to avoid.
2Verified links, bookmarks only
Reach the market from bookmarks or fawkes.sc. Never from search results, ads, or links posted in forums. See phishing defence.
3PGP 2FA, key backed up offline
The account lock and its backup are non-negotiable. See the 2FA guide.
4Small working balance
Deposit what you'll spend soon; withdraw the rest to a wallet you control. A market balance is working capital — not savings, not a vault.
5Monero where privacy matters
XMR hides sender, receiver and amount on-chain. If you start with BTC, an instant BTC→XMR swap before depositing is the standard move. The exchange purchase itself is often the most identifying step — cash and P2P are the private options.
6Keep Tor Browser current
Updates ship security fixes. Let it update; restart when asked. A patched browser is boring and boring is good.
7Sensible delivery OPSEC
Order to your own address or a trusted one. UK vendors are expert at discreet domestic packaging — let them do their job, and don't get creative with drops you don't control.
8Compartmentalise your files
PGP keys, wallet seeds, notes about orders — encrypted or at least not sitting on a shared desktop called "My Market Stuff". Password managers do this well.
9Communicate deliberately
Sensitive conversations with vendors belong in PGP-encrypted market messages — not Telegram, not SMS, not email. Your market identity stays in the market.
10Know the law, accept the risk
Browsing is not an offence; many listed products are controlled drugs under the Misuse of Drugs Act 1971. OPSEC reduces your exposure; it doesn't change legality. The choice — and the risk — are yours.
Over-OPSEC: don't do these
- Paying for a "bulletproof" VPN on top of Tor — mostly changes who sees that you use Tor. A VPN alone can be handy for clearnet mirrors on locked-down networks, nothing more.
- Ordering to increasingly exotic addresses — your own address with good vendor stealth beats an uncontrolled "drop" nine times out of ten.
- Paranoid device rituals that you abandon in a week — sustainable boring habits beat heroic ones.
A 60-second monthly audit
Next steps
- PGP guide — the cornerstone habit.
- Phishing defence — the threat model.
- Verified mirrors — the safe doors in.