Rydox Marketplace Operator Pleads Guilty in Global Cybercrime Crackdown

Ardit Kutleshi, 28, has pleaded guilty to aggravated identity theft and money laundering charges for his role running Rydox, an online marketplace that sold stolen personal information, illegal device access and fraud tools to cybercriminals. Kutleshi was extradited from Kosovo last year after prosecutors accused him and his brother of operating the platform for nearly a decade. He faces sentencing in February, with a mandatory minimum of two years for the identity theft charge and up to 20 years for money laundering. His brother already pleaded guilty and was deported back to Kosovo after being sentenced to time served.

According to prosecutors, Rydox facilitated more than 7,600 transactions worth $232,000 and had around 18,000 users who purchased Social Security numbers, login credentials and guides for building scam pages. Buyers had to deposit funds before being approved to make purchases. Law enforcement agencies in the US, Kosovo, Albania and Malaysia worked together to dismantle the platform, seizing its domain and servers in December 2024.

Officials say the case highlights how stolen personal data and hacking tools are traded at scale on dedicated criminal marketplaces, fuelling further fraud against individuals and businesses. The FBI noted that platforms like Rydox give criminals easy access to large volumes of stolen identities and credentials.