Rydox Marketplace Administrator Pleads Guilty to Cybercrime Charges

Ardit Kutleshi, a 28-year-old Kosovar national, has pleaded guilty to charges related to the operation of the Rydox illegal online marketplace. The marketplace facilitated the sale of stolen personal information, login credentials, and various cybercrime tools to a global audience.

Criminal Charges and Potential Sentence

Kutleshi faces significant prison time following his plea. He has been charged with conspiracy to commit identity theft, aggravated identity theft, access device fraud, and money laundering.

The defendant is scheduled to be sentenced on 9 February 2027. He faces a maximum penalty of 20 years in prison for money laundering, alongside a mandatory minimum of two years for the aggravated identity theft count.

International Law Enforcement Operation

The crackdown on Rydox was the result of a joint international operation involving law enforcement from Kosovo and Albania’s Special Anti-Corruption Body (SPAK). The Royal Malaysian Police also assisted in the seizure of the marketplace’s servers in Kuala Lumpur and the confiscation of the Rydox.cc domain in December 2024.

Kutleshi was subsequently extradited from Kosovo to the United States in 2025 to face federal charges.

Scale of the Illegal Marketplace

According to court documents, Rydox operated from February 2016 until its shutdown in 2024. During this period, marketplace sellers were involved in more than 7,600 transactions involving the sale of stolen credentials, credit card details, and the personally identifiable information (PII) of thousands of U.S. citizens.

The platform’s offerings were extensive, including over 321,000 cybercrime-related products. These items were available to a user base of more than 18,000 individuals and included various software tools and devices intended for committing digital crimes.

Rydox utilised several cryptocurrencies to facilitate transactions, including Bitcoin (BTC), Monero, Ripple, Ethereum, Litecoin, Tron, and Verge. The marketplace also employed a commission-based revenue model, charging authorised sellers a one-time registration fee between $200 and $500. From every sale, the marketplace retained 40% of the proceeds, while sellers received 60%.