Rydox marketplace admin pleads guilty, faces up to 22 years

A Kosovar national has pleaded guilty to operating Rydox, a large illegal online marketplace that sold stolen personal information, login credentials, credit card details, and tools for committing cybercrimes.

Arrests and extradition

Kosovo law enforcement, working with Albania's Special Anti-Corruption Body (SPAK), arrested 28-year-old Ardit Kutleshi and two other Rydox administrators — Jetmir Kutleshi and Shpend Sokoli — in December 2024. The operation was part of a joint international effort: authorities shut the marketplace down, seized the Rydox[.]cc domain, and, with help from the Royal Malaysian Police, seized its servers in Kuala Lumpur.

Ardit Kutleshi was extradited from Kosovo to the United States in 2025 and charged on several counts, including conspiracy to commit identity theft, aggravated identity theft, access device fraud, and money laundering.

Scale of the marketplace

According to court documents, between February 2016 and the site's shutdown in 2024, Rydox sellers completed more than 7,600 sales of login credentials, credit card data, and personal information — including Social Security numbers, names, and addresses — belonging to thousands of U.S. citizens. The marketplace also offered more than 321,000 other "cybercrime products" — devices, software, and materials for committing crimes — to over 18,000 users.

To make a purchase, users first deposited cryptocurrency: Bitcoin, Monero, Ripple, Ethereum, Litecoin, Perfect Money, Tron, and Verge were all accepted, flowing into a Rydox-controlled wallet. Becoming an authorized seller required a one-time fee of $200 to $500; sellers kept 60% of proceeds while the marketplace took 40% of every sale.

Sentencing

Kutleshi pleaded guilty to aggravated identity theft and money laundering conspiracy. Sentencing is scheduled for February 9, 2027: he faces up to 20 years for money laundering and a minimum of two years for the aggravated identity theft count.

He is not the only dark web operator to face a heavy sentence this year. In February, the owner of the Incognito dark web drugs market was sentenced to 30 years, while a California man who sold fentanyl and methamphetamine on the Nemesis marketplace received more than 26 years in federal prison.

Source: Bleeping Computer