The Dark Web: What You Need to Know

The internet you use every day — Google searches, social media, news sites — is only the tip of the iceberg. Beneath the surface lies a vast, hidden layer of the web that most people never see. This is the deep web, and at its most mysterious depths, the dark web. Understanding the difference between these layers is essential for anyone who wants to navigate the online world safely and with awareness.

The dark web often makes headlines for the wrong reasons — drug markets, stolen data, and illegal services. But the reality is far more nuanced. The same technology that enables criminal activity also protects dissidents, journalists, and ordinary people living under oppressive regimes. To understand the dark web, you first need to understand the architecture of the internet itself.

Surface Web vs Deep Web vs Dark Web

The surface web, or the "visible web," is the part of the internet indexed by search engines like Google, Bing, and DuckDuckGo. It includes public websites, blogs, news portals, and e-commerce platforms. Despite being what most people think of as "the internet," the surface web accounts for less than 10% of all content on the World Wide Web.

The deep web is everything that is not indexed by search engines. This includes private databases, password-protected sites, academic journals behind paywalls, medical records, corporate intranets, and your personal email inbox. The deep web is massive — estimates suggest it is 400 to 500 times larger than the surface web. It is not illegal or nefarious; it simply requires authentication or specific URLs to access.

The dark web is a small, intentionally hidden subset of the deep web. It can only be accessed using specialised software, most commonly the Tor Browser. Dark web sites use a .onion domain and are not accessible through standard browsers. While the dark web hosts both legal and illegal activities, its anonymity makes it attractive to those who need privacy — and to those who wish to operate outside the law.

How Tor Works

Tor — short for "The Onion Router" — is the primary gateway to the dark web. Developed originally by the US Naval Research Laboratory, Tor works by routing your internet traffic through a series of encrypted layers, similar to the layers of an onion. Each layer peels away as your data passes through a randomly selected relay node, revealing only the next destination. The final relay, called the exit node, sends your request to its destination, while the origin remains hidden from the destination server.

This multi-hop encryption ensures that no single node knows both the origin and the destination of the traffic. While this provides strong anonymity, it also introduces significant latency — browsing on Tor is noticeably slower than a standard connection. Tor is free, open-source, and maintained by a community of volunteers who operate the relay nodes around the world. The Tor Project estimates there are over 7,000 active relays and roughly 2.5 million daily users of the Tor network.

Legitimate Uses of the Dark Web

Contrary to popular belief, the dark web has many legitimate and vital applications. Journalists living under surveillance-heavy regimes use Tor to communicate with sources and publish stories without fear of retaliation. The New York Times, ProPublica, and other major news organisations maintain .onion sites that allow readers to access content privately, even in countries where these outlets are blocked.

Whistleblowers rely on the dark web to submit sensitive documents safely. Platforms like SecureDrop, used by hundreds of media organisations worldwide, operate as hidden services to protect anonymous tips. In countries with heavy censorship — such as China, Iran, and Belarus — citizens use Tor to bypass the Great Firewall and access uncensored information.

Privacy advocates and cybersecurity professionals also use Tor to test security, research threats, and communicate in hostile environments. For victims of domestic abuse or stalking, Tor can provide a lifeline to seek help without an abuser monitoring their browsing activity. The dark web is not inherently criminal — it is a tool, and like any tool, its morality depends on how it is used.

Illegal Activities on the Dark Web

Despite its legitimate uses, the dark web is also home to black markets, illegal marketplaces, and forums where cybercriminals trade stolen data, hacking tools, and illicit goods. The most famous example was Silk Road, the first major dark web marketplace, which was shut down by the FBI in 2013. Since then, countless successors have risen and fallen, including AlphaBay, Hansa, and Wall Street Market.

Common illegal activities on the dark web include the sale of stolen credit card details, hacked social media accounts, and personally identifiable information (PII) harvested from data breaches. Drug marketplaces remain prevalent, along with services offering malware, ransomware, and distributed denial-of-service (DDoS) attacks for hire. Additionally, child exploitation material, though statistically rare in terms of overall dark web traffic, remains a serious concern that law enforcement actively targets.

It is important to note that the scale of these activities is often exaggerated. Most dark web traffic is not accessing illegal content. The sensational headlines, however, have shaped the public's perception that the dark web is synonymous with criminality.

How Law Enforcement Monitors the Dark Web

Contrary to the assumption that the dark web is a lawless space, authorities around the world have developed sophisticated methods to investigate and disrupt criminal activity there. The FBI, Europol, and Malaysia's own CyberSecurity Malaysia and PDRM Cyber Crime Division have dedicated units trained in dark web investigations. Tactics include undercover operations on marketplaces, traffic analysis, and exploiting operational security mistakes made by users and administrators.

One of the most effective tools is the use of compromised Tor exit nodes and middle relays operated by law enforcement agencies. While controversial from a privacy standpoint, these setups allow authorities to identify traffic patterns and, in some cases, de-anonymise users. Law enforcement also leverages the patching of browser vulnerabilities — famously, the 2013 Silk Road takedown relied on a vulnerability in the Tor Browser that revealed the server's real IP address, leading to the arrest of founder Ross Ulbricht.

International cooperation is critical. Dark web investigations often span multiple jurisdictions, requiring coordination between agencies like the FBI, UK National Crime Agency, Europol, and ASEAN partners. The FBI's 2019 takedown of the child exploitation site Welcome to Video, for example, was a joint operation spanning six countries. In Southeast Asia, collaboration through ASEANAPOL has strengthened regional capacity to trace and dismantle dark web criminal networks.

Risks for Average Users

For the average internet user, simply accessing the dark web carries relatively low legal risk in Malaysia, provided no illegal activity is conducted. However, there are practical risks to be aware of. The dark web is rife with scams — fake marketplaces, phishing pages designed to steal Bitcoin, and malicious software disguised as useful tools. Browsing without proper precautions can expose your device to malware, including remote access trojans (RATs) and cryptojackers.

There is also the risk of accidentally encountering disturbing content. While this is less common than media portrayals suggest, stumbling upon illegal material can create legal complications. Additionally, the anonymous nature of the dark web means there is no consumer protection — if you are scammed while buying from a dark web marketplace, there is no recourse. For most people, the risk-reward ratio does not justify exploring the dark web without a clear purpose.

Protecting Yourself

If you need to access the dark web for legitimate research — whether you are a journalist, a cybersecurity student, or a privacy-conscious individual — there are essential precautions to take. First and foremost, use the official Tor Browser, which is hardened against common deanonymisation techniques. Avoid downloading additional software or browser extensions, as they can compromise your anonymity.

Disable JavaScript by default in Tor Browser settings. Many deanonymisation exploits rely on JavaScript to leak your real IP address. Use a VPN alongside Tor only if you understand the trade-offs — a VPN adds a layer of trust to a third party and may not improve anonymity. Never use your real identity, email address, or personal information while browsing the dark web. Use dedicated aliases and anonymous email services if interaction is required.

Keep your operating system and security software up to date. A compromised device can leak your identity regardless of how careful you are on the network. Finally, be aware of your local laws. While accessing the dark web is legal in Malaysia, some countries have made it illegal. Always verify the legal landscape before proceeding.

Understanding the dark web is an important part of modern digital literacy. It is neither the boogeyman of sensational headlines nor a harmless curiosity. It is a tool — one that requires respect, caution, and a clear understanding of the risks. Whether you ever choose to access it or not, knowing what lies beneath the surface of the internet helps you navigate the visible web with a much fuller picture.