Rydox Marketplace Admin Pleads Guilty in U.S. Court
A Kosovar national has pleaded guilty to operating Rydox, a large illegal online marketplace that facilitated the sale of stolen personal information, login credentials, credit card details, and cybercrime tools. Ardit Kutleshi, 28, entered his guilty plea in a U.S. federal court after being extradited from Kosovo in 2025. He now faces a maximum penalty of 22 years in prison, with sentencing scheduled for February 9, 2027.
International Law Enforcement Operation Led to Marketplace Shutdown
The case stems from a coordinated international law enforcement action in December 2024, during which Kosovo police and Albania's Special Anti-Corruption Body (SPAK) arrested Kutleshi along with two other Rydox administrators: Jetmir Kutleshi and Shpend Sokoli. The operation, supported by the Royal Malaysian Police, resulted in the seizure of the Rydox[.]cc domain and the marketplace's servers located in Kuala Lumpur. The shutdown disrupted a platform that had been active since February 2016.
Charges Include Conspiracy, Identity Theft, and Money Laundering
Following his extradition, Kutleshi was charged with multiple offenses tied to his role as an administrator of Rydox. These include conspiracy to commit identity theft, aggravated identity theft, two counts of identity theft, access device fraud, and money laundering. He has specifically pleaded guilty to aggravated identity theft and money laundering conspiracy. Under federal sentencing guidelines, the money laundering charge carries a maximum of 20 years, while the aggravated identity theft count mandates a minimum of two years, to be served consecutively.
Rydox Facilitated Thousands of Illicit Sales of Stolen Data
According to court documents, between February 2016 and the marketplace's shutdown in 2024, Rydox sellers conducted over 7,600 transactions involving login credentials, credit card information, and stolen personal data — including Social Security numbers, names, and addresses — of thousands of U.S. citizens. In addition, the platform offered more than 321,000 cybercrime-related products for sale, such as hacking tools, malware, and illicit services, to a user base exceeding 18,000 registered members.
Marketplace Operated on Cryptocurrency Payments and Seller Fees
Rydox required users to deposit cryptocurrency into accounts before making purchases. Accepted payment methods included Bitcoin (BTC), Monero, Ripple, Ethereum, Litecoin, Perfect Money, Tron, and Verge. Funds were held in a Rydox-controlled wallet and used to buy goods and services from third-party sellers. To become an authorized seller, users paid a one-time fee ranging from $200 to $500. Approved sellers received 60% of each sale’s proceeds, while the marketplace retained 40% as commission.
FBI Official Comments on Marketplace Impact and Takedown
"Rydox put cybercriminal tools and sensitive data up for sale, including the stolen identities and logins of thousands of people,"
said Brett Leatherman, assistant director of the FBI's Cyber Division. "The FBI and its foreign partners shut the marketplace down, and now the man who created it and ran it pleaded guilty."
The case highlights ongoing efforts by U.S. and international authorities to dismantle cybercrime infrastructure. Kutleshi’s guilty plea follows other recent high-profile sentencings, including the owner of the Incognito dark web drug market, who received a 30-year prison term in February 2026, and a California man convicted of selling fentanyl and methamphetamine on the Nemesis marketplace, who was sentenced to over 26 years in federal prison.
Source: BleepingComputer