Rydox Marketplace Creator Pleads Guilty to Identity Theft and Money Laundering

Ardit Kutleshi, the Kosovar national who created and operated the Rydox cybercrime marketplace, has pleaded guilty in a US court to charges of identity theft and money laundering conspiracy.

The 28-year-old was arrested in December 2024 alongside two other suspects, Jetmir Kutleshi and Shpend Sokoli. Following his extradition to the United States, Kutleshi admitted to his role in managing a platform that facilitated the trade of stolen personally identifiable information (PII) and various cybercrime tools.

Scale of the Rydox Marketplace

Rydox provided a platform for criminals to exchange high volumes of illicit data, including names, addresses, Social Security numbers, credit card details, and account credentials. According to court documents, the marketplace offered at least 321,372 cybercrime products, ranging from stolen information to phishing kits, stealer logs, and spamming tools.

At the time of its disruption, the marketplace was estimated to have approximately 18,000 users. Between 2016 and 2024, the platform processed more than 7,600 transactions, generating an estimated $232,000 in revenue for its operators.

Law Enforcement Action and Sentencing

The marketplace was taken down in December 2024 after US authorities obtained judicial authorisation to seize the Rydox.cc domain. In addition to the website, law enforcement seized the Rydox servers and approximately $225,000 in cryptocurrency.

Kutleshi is scheduled for sentencing on 9 February 2027. He faces a mandatory minimum of two years in prison for aggravated identity theft and a maximum of 20 years for money laundering conspiracy.