The dark web is smaller and stranger than its reputation. It accounts for just 3 percent of daily traffic on the Tor network, and its single biggest hidden service is Facebook. This episode starts with the architecture: the difference between the deep web and the dark web, and how onion routing passes data through three servers, each able to unlock only one layer, so that no single node ever knows both who sent a request and where it is going.

From there it maps the economy that anonymity produced. After Silk Road proved the concept in 2011, darknet markets copied mainstream shopping sites, complete with vendor reviews, escrow, and dispute mediation. Cybercrime now runs as a supply chain of ransomware developers, affiliates, and initial access brokers, with Bitcoin tumblers to launder the proceeds. The episode also weighs the grim reality of abuse networks against the myths, and shows how police catch people the math cannot expose.

• In ransomware as a service, the developer typically keeps 20 to 40 percent of the ransom while the affiliate who deploys the attack keeps the rest.
• Double extortion means stealing data before encrypting it, so victims with good backups can still be threatened with publication on leak sites.
• There has never been a documented murder for hire that began on the dark web. Silk Road founder Ross Ulbricht allegedly paid hundreds of thousands of dollars to fake hitmen.
• Red rooms are a hoax and a technical impossibility, because Tor’s three-hop routing is far too slow for live video.
• After seizing the Playpen server, the FBI ran the site for nearly two weeks and used a network investigative technique to capture users’ real IP addresses.