Torzon Support Center

If you cannot access your account, it is typically due to one of three specific scenarios on the Tor network. Please diagnose carefully before contacting support.

1. Phishing URL: This is the most dangerous scenario. If you entered your credentials on a fake mirror site (phishing link), attackers have likely changed your password. Always verify the PGP signature of the URL.

2. Captcha Loop: Often, the Tor browser will loop on the captcha verification. This indicates your Tor circuit is "dirty" or flagged. To fix this, click the hamburger menu in Tor Browser -> New Identity (Ctrl+Shift+U). This refreshes your connection completely.

3. Temporary Lockout: Torzon implements strict anti-brute-force measures. 5 failed login attempts will lock the account for exactly 60 minutes. Do not attempt to login during this cooldown period.

Unlike clear-net sites, Torzon does not store emails. We cannot send a "Reset Password" link. Recovery is strictly cryptographic.

If you have the Mnemonic, use the "Recover Account" link on the login page. If you have PGP 2FA, the system can issue a challenge message. Decrypt it to prove ownership, and you will be allowed to set a new password. If you have neither, the account is lost forever.

PGP Two-Factor Authentication is the primary defense against phishing. Even if a hacker steals your password, they cannot login without your local private key.

To enable it: Go to User Settings -> Security. Paste your Public PGP Key. The site will encrypt a message to you. Decrypt it and paste the code back to verify. Once enabled, every login will require this decryption step.

This is the most frequent support query. Please understand how the Monero blockchain functions regarding darknet markets.

Torzon requires 10 Confirmations on the blockchain before a deposit becomes spendable. This is higher than standard wallets to prevent "reorg" attacks. Since a new block is mined roughly every 2 minutes, the minimum wait time is 20 to 30 minutes.

If 3 hours have passed and your balance is zero:

• 1. Verify the transaction ID (TXID) on a block explorer like xmrchain.net.
• 2. Ensure you didn't accidentally send XMR to a Bitcoin address (this burns the coins).
• 3. Check if you used the "Integrated Address" correctly.

Bitcoin is a transparent ledger. Every transaction is permanently recorded and visible to the public. Companies like Chainalysis work with law enforcement to trace BTC from regulated exchanges (like Coinbase) directly to darknet market wallets.

Using BTC creates a direct link between your real identity and illegal activity. Monero (XMR) breaks this link using Ring Signatures and Stealth Addresses. We strongly advise swapping BTC to XMR before depositing.

To withdraw, enter your external XMR wallet address and the amount. A flat fee (miner fee) plus a market processing fee (approx 1%) will be deducted.

For security reasons, withdrawals are processed in batches from a "Hot Wallet". If the Hot Wallet is empty, it must be refilled from Cold Storage manually by admins. This can cause delays of up to 6 hours, though most withdrawals are instant.

Escrow protects both buyer and seller. When you purchase an item, your money is held by the Market, not given to the vendor. The funds sit in a neutral state.

The vendor ships the item. Once you receive it and verify the contents, you log in and click "Finalize Order". Only then does the market release the funds to the vendor. This ensures vendors actually ship products.

Finalize Early (FE) means you release the funds to the vendor immediately upon marking the order as shipped. If the vendor then decides not to ship, you have no recourse. The admins cannot refund money that has already been given to the vendor.

Only use FE for vendors with trusted status (Elite/Verified) and thousands of positive reviews. Never FE for a new vendor.

If the auto-finalize timer (usually 14 days) is running out and you have no package, you must act.

1. Extend Escrow: You can add 3-5 days to the timer to account for postal delays.

2. Open Dispute: If the vendor ignores you or the time runs out, click "Dispute". A moderator will join the chat.

To win a dispute, provide evidence (lack of tracking update, seizure letter). Vendors with high dispute rates are banned.

No. JavaScript is a potential vector for de-anonymization attacks. Sophisticated exploits can use JS to leak your true IP address or fingerprint your browser configuration.

Never rely on the market's "Auto-Encrypt" checkbox if you can avoid it. It is safer to encrypt locally.

1. Import the vendor's Public Key into Kleopatra/GPG.

2. Write your address in a text editor.

3. Encrypt the text using the vendor's key.

4. Copy the entire PGP block (starting with -----BEGIN PGP MESSAGE-----) into the order notes.