Online criminal markets on telegram: Exploring the illicit products and services advertised in public group chats

This study empirically examines illicit products and services advertised on Telegram. The dataset comprised over 26 million messages posted by more than 88,000 users in 31 public Dutch Telegram groups over a two-year period. Qualitative analysis identified 77 unique illicit products and services, grouped into 13 overarching crime categories, alongside a non-crime-related category. Descriptive analyses show that narcotics was the dominant category, confirming that drug-related trade remains the core business of online crime markets, regardless of online platform. Though less prevalent, cybercrime-related offerings were also present, suggesting that Telegram may serve as a gateway platform for less technically skilled individuals to access cybercrime tools. Notably, a substantial number of messages was unrelated to crime, particularly among unique messages. Using descriptive statistics and diversity measures, we found that most groups exhibited moderate to high diversity, with messages from nearly all categories. This suggests that these Telegram groups functioned as multi-purpose crime markets, rather than being narrowly specialized, potentially reflecting the growing hybridization of crime, and cafeteria-style offending patterns. Finally, analysis of the distribution of messages across categories within Telegram groups revealed six distinct crime market types, based on the co-occurrence of overarching categories: general-crime, crime-and-chat, cybercrime-, fireworks-, narcotics-, and chat-focused markets. This suggests that narcotics-related markets may attract other types of offerings, given the size of these markets and their potential audience. Practical implications, limitations, and directions for future research are discussed.