Online criminal markets on telegram: Exploring the illicit products and services advertised in public group chats

This study empirically examines illicit products and services advertised on Telegram. The dataset comprised over 26 million messages posted by more than 88,000 users in 31 public Dutch Telegram groups over a two-year period. Qualitative analysis identified 77 unique illicit products and services, grouped into 13 overarching crime categories, alongside a non-crime-related category. Descriptive analyses show that narcotics was the dominant category, confirming that drug-related trade remains the core business of online crime markets, regardless of online platform. Though less prevalent, cybercrime-related offerings were also present, suggesting that Telegram may serve as a gateway platform for less technically skilled individuals to access cybercrime tools. Notably, a substantial number of messages was unrelated to crime, particularly among unique messages. Using descriptive statistics and diversity measures, we found that most groups exhibited moderate to high diversity, with messages from nearly all categories. This suggests that these Telegram groups functioned as multi-purpose crime markets, rather than being narrowly specialized, potentially reflecting the growing hybridization of crime, and cafeteria-style offending patterns. Finally, analysis of the distribution of messages across categories within Telegram groups revealed six distinct crime market types, based on the co-occurrence of overarching categories: general-crime, crime-and-chat, cybercrime-, fireworks-, narcotics-, and chat-focused markets. This suggests that narcotics-related markets may attract other types of offerings, given the size of these markets and their potential audience. Practical implications, limitations, and directions for future research are discussed. • Telegram is used to advertise a range of illicit products and criminal services • Narcotics—especially hard drugs—dominated the Telegram groups • Cybercrime-related offerings were also present, though less prevalent • Most groups exhibited moderate to high diversity • Six distinct crime market types were identified

Authors

Institutions

Publication Details

Journal
Computers in Human Behavior
Published
2026-04-23
DOI
https://doi.org/10.1016/j.chb.2026.109032
Primary Topic
Cybercrime and Law Enforcement Studies
Type
article
Field-Weighted Citation Impact
0.00
Controls
|||
ALL TIME
JAN
FEB
MAR
APR
MAY
JUN
JUL
AUG
SEP
OCT
article

Online criminal markets on telegram: Exploring the illicit products and services advertised in public group chats

Joeri Loggen, Asier Moneva, Gerard de Roode, Rutger Leukfeldt et al.
Computers in Human Behavior
Cybercrime and Law Enforcement Studies
article

Online criminal markets on telegram: Exploring the illicit products and services advertised in public group chats

Joeri Loggen, Asier Moneva, Gerard de Roode, Rutger Leukfeldt, Arjan Blokland
article en

Abstract

This study empirically examines illicit products and services advertised on Telegram. The dataset comprised over 26 million messages posted by more than 88,000 users in 31 public Dutch Telegram groups over a two-year period. Qualitative analysis identified 77 unique illicit products and services, grouped into 13 overarching crime categories, alongside a non-crime-related category. Descriptive analyses show that narcotics was the dominant category, confirming that drug-related trade remains the core business of online crime markets, regardless of online platform. Though less prevalent, cybercrime-related offerings were also present, suggesting that Telegram may serve as a gateway platform for less technically skilled individuals to access cybercrime tools. Notably, a substantial number of messages was unrelated to crime, particularly among unique messages. Using descriptive statistics and diversity measures, we found that most groups exhibited moderate to high diversity, with messages from nearly all categories. This suggests that these Telegram groups functioned as multi-purpose crime markets, rather than being narrowly specialized, potentially reflecting the growing hybridization of crime, and cafeteria-style offending patterns. Finally, analysis of the distribution of messages across categories within Telegram groups revealed six distinct crime market types, based on the co-occurrence of overarching categories: general-crime, crime-and-chat, cybercrime-, fireworks-, narcotics-, and chat-focused markets. This suggests that narcotics-related markets may attract other types of offerings, given the size of these markets and their potential audience. Practical implications, limitations, and directions for future research are discussed. • Telegram is used to advertise a range of illicit products and criminal services • Narcotics—especially hard drugs—dominated the Telegram groups • Cybercrime-related offerings were also present, though less prevalent • Most groups exhibited moderate to high diversity • Six distinct crime market types were identified

Computers in Human BehaviorVol. 182
Netherlands Organisation for Applied Scientific Research (NL), Dutch Research Council (NL), Netherlands Institute for the Study of Crime and Law Enforcement (NL), Institute of Criminology (SI), The Hague University of Applied Sciences (NL)
Peace, Justice and strong institutions
Openalex Percentile: Top 4%
Cybercrime and Law Enforcement Studies
AI Navigator

Ask Laika to Summarize, Analyze, and Connect papers live on the map.

Summarize Papers & Methodologies

Extract key findings, datasets, and comparative methods across publications.

Benchmark Rankings & Visual Analytics

Rank top research institutions, authors, funders, topics, and journals by Field-Weighted Citation Impact (FWCI) and paper volume with instant charts.

Connect Distant Disciplines

Bridge topological clusters on the map to find hidden collaborative intersections.