Episode

EP 132 — Sam the Vendor

04 April 2023 Official episode · Official transcript

cybercrime dark web bitcoin

Sam Bent describes his involvement with darknet marketplaces, online vending, operational security practices, Dread, the Hansa takedown, and his federal prosecution.

Topics: Darknet marketplaces and anonymous online commerce, Tor and cryptocurrency use, Bitcoin and Monero cash-out methods, PGP authentication and signed messages, Tails Linux and ephemeral operating-system use, Operational security and protection of private keys, IP leaks and exposed configuration files, Darknet forum administration and dispute resolution, Reddit community shutdowns and migration to Dread, Law-enforcement investigations, search warrants, and evidence handling, Postal-service surveillance and package inspection, Incident-response planning and information-security policies

Official episode-page sources

Links published on the Darknet Diaries episode page. Not LLM output.

No Sources heading on this episode page.

Entities (34)

Claims (18)

Qualified statements from this episode, not graph facts.

Sam Bent SAME_AS DoingFedTime

Sam Bent says he is mostly known online as DoingFedTime.

Explicit Confidence 99% · Sam Bent EP 132 Details

“Also mostly known as DoingFedTime online”

Sam Bent · offsets 1097–1137

Sam Bent SAME_AS killab

Sam Bent says killab was his hacker alias.

Explicit Confidence 99% · Sam Bent EP 132 Details

“and killab; that was my hacker alias for a while”

Sam Bent · offsets 1138–1186

Sam Bent MENTIONS Silk Road

Sam says he had exposure to Silk Road and initially thought it was a federal sting operation.

Explicit Confidence 98% · Sam Bent EP 132 Details

“I remember when Silk Road had came out; I honestly – I thought it was a scam”

Sam Bent · offsets 3215–3291

Sam Bent USES Hansa

Sam posted extensively on Hansa, later became a vendor there, and used the site’s forums and marketplace.

Explicit Confidence 99% · Sam Bent EP 132 Details

“I made 5,000 posts in a month on Hansa”

Sam Bent · offsets 10039–10077

“I want to become a vendor”

Sam Bent · offsets 15400–15432

Sam Bent USES Tails Linux

Sam used Tails Linux when accessing the darknet marketplace.

Explicit Confidence 99% · Jack Rhysider EP 132 Details

“He used the Tails Linux operating system”

Jack Rhysider · offsets 16774–16814

Sam Bent USES PGP

Sam re-entered his PGP key to authenticate and conduct business on the site.

Explicit Confidence 98% · Jack Rhysider EP 132 Details

“he would have to reload Tails and re-enter his PGP key”

Jack Rhysider · offsets 17091–17145

Sam Bent USES Bitcoin

Sam used Bitcoin for darknet transactions and accepted Bitcoin-only payments.

Explicit Confidence 99% · Sam Bent EP 132 Details

“So, yeah, Bitcoin. Bitcoin only. Yeah, that was it.”

Sam Bent · offsets 40107–40158

Sam Bent USES Monero

Sam exchanged Bitcoin for Monero and then cashed out the Monero because it was more private and harder to track.

Explicit Confidence 99% · Jack Rhysider EP 132 Details

“he also would exchange his Bitcoin for Monero, which is more private than Bitcoin and harder to track”

Jack Rhysider · offsets 41509–41610

Sam Bent USES Operational security

Sam relied on operational security practices to protect his identity, keys, communications, and shipping activity.

Explicit Confidence 98% · Sam Bent EP 132 Details

“That’s a part of having good operational security”

Sam Bent · offsets 49949–49998

Sam Bent USES information security policies

Sam and his cousin had agreed information-security and incident-response policies for a possible raid.

Explicit Confidence 98% · Sam Bent EP 132 Details

“This was agreed to prior to anything. So, that was the thing; if we get raided, I admit everything was mine”

Sam Bent · offsets 50132–50239

Sam Bent USES thermal printer

Sam used a thermal printer to print shipping labels, believing it avoided microprinting.

Explicit Confidence 99% · Sam Bent EP 132 Details

“I bought a thermal printer because with a thermal printer, it doesn’t use ink”

Sam Bent · offsets 23341–23418

exposed config file DISCOVERED_BY Hugbunter

Hugbunter found an exposed configuration file on the darknet market site.

Explicit Confidence 99% · Jack Rhysider EP 132 Details

“Hugbunter found an exposed config file on the darknet market site”

Jack Rhysider · offsets 43288–43353

IP leak DISCOVERED_BY Hugbunter

Sam says Hugbunter identified and reported an IP leak to the market administrators.

Explicit Confidence 98% · Sam Bent EP 132 Details

“He was like, hey, you guys have a IP leak”

Sam Bent · offsets 43509–43550

Dread DEVELOPED_BY Hugbunter

Hugbunter coded and built the Dread site.

Explicit Confidence 99% · Sam Bent EP 132 Details

“He coded the site. He did all of that”

Sam Bent · offsets 45100–45137

Sam Bent USES Dread

Sam served as an administrator on Dread and performed administrative work on its forum.

Explicit Confidence 99% · Sam Bent EP 132 Details

“My job coming on was to be an admin and actually do stuff on the actual forum”

Sam Bent · offsets 45181–45258

Operation Bayonet INVOLVES Hansa

The episode identifies Operation Bayonet in connection with the takedown of Hansa and arrests of vendors.

Explicit Confidence 96% · Jack Rhysider EP 132 Details

“Hansa went down – your stuff is all over that database. That was taken over by the feds”

Jack Rhysider · offsets 60355–60442

“Operation Bayonet, yeah”

Sam Bent · offsets 60591–60614

Operation Dark Gold INVOLVES Gold

Operation Dark Gold involved Gold after he was arrested and agreed to work with federal investigators.

Explicit Confidence 99% · Jack Rhysider EP 132 Details

“Gold agreed to work with the feds, which became Operation Dark Gold”

Jack Rhysider · offsets 57549–57616

Operation Dark Gold INVOLVES Sam Bent

Operation Dark Gold involved Sam as a person who sent Bitcoin to Gold and received cash in the operation.

Explicit Confidence 98% · Jack Rhysider EP 132 Details

“So, that’s when Sam sent him some Bitcoin and he sent Sam some cash”

Jack Rhysider · offsets 57618–57685

Transcript references

Works mentioned in the transcript. Distinct from show-note sources.

Extraction provenance

Model gpt-5.6-luna · prompt 1.5.19 · schema 1.5.19 · 2026-09-13T07:53:14.933692+00:00