A 28-year-old from Kosovo has entered a guilty plea for his role in establishing and managing Rydox, an illicit marketplace specializing in the sale of compromised personal data, account credentials, payment card information, and tools used in cybercrimes. Ardit Kutleshi was arrested in December 2024 by Kosovo law enforcement working alongside Albania's Special Anti-Corruption Body (SPAK), along with two co-administrators of the platform, Jetmir Kutleshi and Shpend Sokoli.
The takedown resulted from coordinated international law enforcement efforts that dismantled the marketplace, seized its Rydox.cc domain, and recovered servers located in Kuala Lumpur with assistance from Malaysian authorities. Following his arrest, Kutleshi was extradited to the United States in 2025 and faced charges encompassing conspiracy related to identity theft, aggravated identity theft, two separate identity theft counts, access device fraud, and money laundering.
Rydox put cybercriminal tools and sensitive data up for sale, including the stolen identities and logins of thousands of people. The FBI and its foreign partners shut the marketplace down, and now the man who created it and ran it pleaded guilty.
Brett Leatherman, assistant director of the FBI's Cyber Division
Between its launch in February 2016 and its closure in 2024, Rydox facilitated more than 7,600 transactions involving stolen login credentials, payment card data, and personal information belonging to thousands of Americans, including Social Security numbers, names, and addresses. The platform also listed over 321,000 additional items categorized as "cybercrime products" available to its user base of more than 18,000 members, encompassing various devices, software utilities, and materials designed to support illegal online activities.
The marketplace operated on a cryptocurrency-only payment model, requiring users to load funds using Bitcoin, Monero, Ripple, Ethereum, Litecoin, Perfect Money, Tron, or Verge into accounts controlled by the platform. Individuals seeking to become authorized sellers paid a one-time registration fee ranging from $200 to $500, after which they received 60% of their transaction proceeds while Rydox retained the remaining 40%.
Kutleshi has admitted guilt to aggravated identity theft and conspiracy to commit money laundering. His sentencing is scheduled for February 9, 2027, where he faces a maximum of 20 years for the money laundering charge and a mandatory minimum of 2 years for the aggravated identity theft conviction.
This case reflects a broader enforcement trend against dark web marketplaces. Earlier this year, the operator of the Incognito dark web drugs marketplace received a 30-year sentence in February, while a California resident who distributed fentanyl and methamphetamine through the Nemesis dark web marketplace was sentenced to more than 26 years in federal prison.