BidenCash
Web3 / compliance
BidenCash was a Tor and clearnet auto-shop marketplace operating from March 2022 until its seizure on June 4, 2025. The platform specialised in the automated sale of stolen payment card data and personally identifiable information (PII) and is documented in US Department of Justice filings as having serviced more than 117,000 customers, trafficked more than 15 million payment cards and PII records, and generated more than $17 million in revenue across its operational life.
BidenCash was notable in cybercrime marketing for periodically releasing large card-data dumps publicly as promotional events — including a release of approximately 3.3 million cards across multiple drops between October 2022 and February 2023. The June 2025 takedown was led by the Eastern District of Virginia, the US Secret Service, and the FBI with the Dutch National Police, ShadowServer, and Searchlight Cyber, resulting in the seizure of approximately 145 clearnet and darknet domains as well as cryptocurrency funds attributed to the operation. The operators have not been publicly identified or charged as of June 2026.
Why It Matters
BidenCash is the largest carding-shop takedown to date measured by domains seized and cards trafficked, and it cemented the precedent that auto-shop infrastructure receives equivalent seizure-authority treatment to narcotics-focused DNMs. For card-issuing banks and payment processors, the seized data trove provides retroactive validation for fraud-monitoring rule sets calibrated to BidenCash-era exposure.
Definition maintained by Cointegrity. See our editorial policy for review standards on regulatory and compliance terms.
Explore the full Web3 Glossary — 2,085+ expert-curated definitions. Need guidance? Talk to our consultants.