Onion Markets: Navigating Safely

What an Onion Market Actually Is (and What It Is Not)

An onion market is a commercial website hosted as a Tor onion service—accessible only through the Tor Browser and identified by a .onion address[6][7]. The .onion designation is a routing mechanism, not a mark of legitimacy; it hides the server's IP address and encrypts traffic between you and the site[7], but it does not verify that the operator is honest or that the market will stay online.

Onion markets differ from single-vendor shops, forums, and phishing clones. A market aggregates multiple vendors under one platform, holds buyer funds in escrow until you confirm receipt[5], and provides a dispute process when orders go wrong[5]. A vendor shop is one seller's standalone site with no third-party escrow. A forum hosts discussion and sometimes vendor advertisements, but no integrated payment flow. A phishing page mimics a real market's login screen to steal your credentials and any deposited cryptocurrency.

Silk Road, which operated from 2011 to 2013, is the documented historical example of the onion-market model: centralised escrow, vendor profiles, buyer feedback, and an administrator who mediated disputes. Law enforcement seized Silk Road in 2013; we mention it to illustrate the structure, not to recommend it or any successor.

What onion markets are not: they are unregulated and offer no user protection[1]. Administrators can execute 'rug pulls'—closing without notice and taking all escrowed funds[3]—and vendors can build reputation over months before disappearing with finalised orders[2]. Bitcoin transactions remain visible on a shared ledger[4], so even when the market hides your IP, your payment history is permanently recorded. If you need to trace funds or understand legal exposure, read our Legal Context section first.

You should use an onion market only if you accept that any deposited cryptocurrency may be lost to an exit scam, that dispute resolution depends entirely on an anonymous administrator's goodwill, and that your transaction graph is visible to anyone who analyses the blockchain.

The Real Risk Model: Where Users Lose Money or Freedom

Most discussions of onion-market risk focus on vendor quality or product purity. The documented record shows that the market itself is often the primary threat, through four failure modes that account for the majority of user losses.

Exit scams occur when administrators close the platform without notice and steal all escrowed funds[3]. Evolution, a major market, executed this in March 2015: administrators disabled withdrawals, posted a 'maintenance' message, and disappeared with an estimated $12 million in user cryptocurrency. Because markets hold buyer payments in escrow until you confirm receipt[5], every pending order and every coin in your market wallet is at risk the moment an admin decides to exit.

Phishing and mirror attacks exploit the fact that .onion addresses are random strings, not human-readable domains[7]. Attackers register addresses that differ by one character—for example, replacing a lowercase 'l' with an uppercase 'I'—and distribute these clones via forums, Telegram channels, or search results. When you enter credentials on a phishing page, the attacker captures your username, password, and any two-factor token, then logs into the real market and withdraws your balance. AlphaBay, before its 2017 takedown, maintained a PGP-signed mirror list specifically to combat this threat; users who ignored the signature verification lost funds to at least a dozen documented phishing domains.

Law-enforcement takedowns seize the server, arrest operators, and often gain access to the database of usernames, order histories, and—if the market logged them—IP addresses or session metadata. The July 2017 AlphaBay operation, coordinated by the FBI, DEA, and Europol, resulted in the arrest of the administrator and the seizure of servers in multiple countries; investigators later traced portions of the market's Bitcoin holdings across the blockchain[8]. If you placed orders on a seized market, your transaction history is now evidence in a government database.

Vendor fraud ranges from non-delivery to selective scamming after building reputation. A peer-reviewed study documented 'finalize-early' exit scams, in which vendors accumulate positive feedback over months, then request early finalization on large orders and never ship[2]. Unlike disputes with honest vendors—where the market's adjudication process can freeze escrow and review evidence[5]—an exit scam leaves no recourse once you finalize.

You cannot eliminate these risks by choosing a 'trusted' market or reading forum reviews, because administrators and vendors operate pseudonymously and can defect at any time[1]. The only mitigation is to treat every deposit as a potential total loss and to verify PGP-signed mirror lists before each login.

Verifying a Market Before You Trust It

Before you deposit cryptocurrency or enter credentials, you must verify that the .onion address belongs to the market you intend to use and that the market itself has not exit-scammed or been seized. No single source is authoritative; cross-reference PGP-signed announcements, forum reputation threads, and multiple independent link directories to confirm continuity.

PGP-signed market announcements are the strongest signal. A legitimate market administrator publishes a message signed with a known PGP key, listing current mirror addresses and warning about phishing clones. You download the admin's public key from a trusted forum thread—ideally one with years of post history—import it into your PGP client, and verify the signature on the mirror list. If the signature fails or the message is unsigned, assume the link is a phishing page. AlphaBay maintained this practice until its 2017 takedown; users who skipped verification lost funds to at least a dozen one-character phishing domains.

Darknet forum reputation threads provide context that a signed message alone cannot. Look for multi-year post history, recent replies to user complaints, and testimonials from vendors who confirm successful payouts. An account created weeks ago with generic reassurances is not evidence of legitimacy. If the forum shows multiple reports of missing withdrawals or 'maintenance mode' lasting days, treat the market as compromised even if you find a valid PGP signature[3].

Cross-referencing independent directories catches discrepancies. Compare the signed mirror list against links posted on established forums and onion-service directories that document update dates and admin-key fingerprints. If one directory shows a different address or lacks a signature, do not use that link. Remember that .onion addresses are automatically generated and unreadable[7], so you cannot rely on visual recognition; you must verify the cryptographic signature every time.

Signed canaries and admin key continuity confirm that the administrator remains in control. A canary is a dated, PGP-signed statement—'As of November 6, 2026, no law-enforcement contact'—posted at regular intervals. If the canary stops updating or the signature key changes without explanation, assume compromise. Key rotation is rare and always announced in advance with a message signed by both the old and new keys.

Conditional Scenario: You Find a Market Link on a Random Forum

You see a .onion address posted in a Telegram channel or a Reddit thread with no post history. The message says 'new mirror, admin confirmed'. What to check before depositing:

1. Do not click the link yet. Open a trusted darknet forum (Dread is the documented example) and search for the market name plus 'official mirrors' or 'PGP'.

2. Find the admin's public PGP key in a thread with years of activity and multiple vendor confirmations. Import the key into your PGP client and note the key fingerprint.

3. Locate a signed mirror list posted by the admin account on that forum. Download the signed message, verify the signature in your PGP client, and confirm that the key fingerprint matches.

4. Compare the Telegram link to the signed list. If the address does not appear in the verified message, it is phishing. If it does appear, check the forum for recent complaints about that specific mirror.

5. Search for exit-scam reports from the past 30 days. If multiple users report withdrawal failures or admin silence, do not proceed even if the signature is valid[3].

If any step fails—no signature, mismatched key, or credible scam reports—walk away. The random forum link is either a phishing page or a compromised mirror, and entering credentials will result in immediate theft of your account balance.

No verification method is perfect, because administrators can sign a message one day and execute a rug pull the next[3]. Cross-referencing reduces the chance of phishing but does not eliminate exit-scam risk. Deposit only what you can afford to lose entirely, and withdraw funds immediately after each transaction confirms.

Operational Security Basics That Prevent Most Losses

Most losses on onion markets stem from credential theft and malware, not sophisticated attacks. Phishing pages capture your username and password when you log in through a fake mirror, then drain your market wallet within minutes. Malware on your host operating system records keystrokes, screenshots, or clipboard contents—including your PGP private key and cryptocurrency addresses—and sends them to an attacker. The documented countermeasures are straightforward: isolate your market activity from your daily computing environment, disable scripts that phishing pages rely on, and generate unique credentials that cannot be reused if one market is compromised.

Use Tor Browser with the security slider set to 'Safest' for all market sessions. The 'Safest' setting disables JavaScript, which phishing pages and malicious markets use to fingerprint your browser, exploit vulnerabilities, or redirect you to credential-harvesting domains. Navigate to the shield icon in the Tor Browser toolbar, select 'Settings', and move the slider to 'Safest'. This breaks some legitimate site features—image galleries, dynamic search filters—but it prevents the majority of client-side attacks. Do not lower the slider for convenience; if a market is unusable at 'Safest', assume the site is either poorly designed or actively hostile.

Run Tor Browser inside a dedicated TAILS or Qubes environment, not on your daily Windows or macOS installation. TAILS is a live operating system that boots from USB, routes all traffic through Tor by default, and leaves no trace on your hard drive when you shut down. Qubes isolates Tor Browser in a disposable virtual machine; if malware infects the VM, it cannot reach your host files or other VMs. Both approaches ensure that clipboard-monitoring malware on your host cannot capture a cryptocurrency address you paste into the market's withdrawal form. If you must use your host OS, create a separate user account with no access to your personal files, but understand that this is weaker than hardware isolation.

Generate unique credentials for every market using a password manager that runs inside your isolated environment. A strong passphrase for Market A does nothing to protect Market B if you reuse it; when Market A is seized or phished, investigators or attackers will test your credentials on every other known market[8]. Use a manager like KeePassXC (open-source, no cloud sync) to create random 20+ character passwords and store them in an encrypted database. Save the database file on your TAILS persistent volume or Qubes vault VM, and back it up to an encrypted USB drive stored separately. Never type a market password from memory; if you can remember it, it is too weak.

Never reuse a PGP key or cryptocurrency address across markets. If Market A logs your deposit address and Market B logs your withdrawal address, blockchain analysis links both accounts to the same user even if you used different usernames[4][8]. Generate a fresh Bitcoin or Monero address for each market deposit, and use a different PGP keypair for each vendor communication. Label each key and address in your password manager with the market name and creation date, so you can identify which account is compromised if funds go missing.

Why These Steps Matter Against Documented Threats

Phishing pages rely on users entering credentials without verifying the .onion address or PGP signature. When you disable JavaScript and verify signatures in a TAILS session, the phishing page cannot execute redirect scripts or capture your session token via a malicious inline frame. Unique passwords mean that even if you accidentally log into a phishing clone of Market A, your accounts on Markets B and C remain secure.

Malware on your host OS can defeat Tor's network-level anonymity by logging the plaintext you type before it is encrypted. A keylogger records your market password, your PGP passphrase, and the seed phrase for your cryptocurrency wallet; the attacker does not need to break Tor's encryption because you handed over the keys. Running Tor Browser in TAILS or Qubes ensures that malware in your host environment sees only the isolated VM's activity, which disappears on reboot.

Exit scams and law-enforcement seizures are not preventable through operational security, but unique credentials limit the damage. If Market A exit-scams and you reused that password on Market B, the Market A administrator can log into your Market B account and withdraw any balance you left there[3]. If law enforcement seizes Market A and finds your username, password, and order history, unique credentials ensure they cannot immediately access your accounts on other markets[8].

What operational security does not protect against: exit scams after you deposit[3], vendor fraud after you finalize early[2], or blockchain analysis that links your deposit address to an exchange account[4][8]. These risks require separate mitigations—never leaving funds in escrow longer than necessary, never finalizing before receipt, and using privacy-focused cryptocurrencies or mixing services. For blockchain-level privacy, see our Darknet Market guide.

Treat operational security as a checklist you complete before every session, not a one-time setup. Each time you access a market: boot TAILS or launch your Qubes VM, verify the PGP-signed mirror list, set the Tor Browser slider to 'Safest', retrieve the unique password from your manager, and confirm the .onion address matches the signed list. Skipping any step once is enough to lose your entire balance.

Payment Hygiene: Wallets, Tumbling, and Timing

Bitcoin transactions permanently record the time, amount, and sender/receiver addresses on a shared ledger, which means every deposit you make to a market is visible to anyone with blockchain-analysis tools[4]. Law enforcement and private firms trace these transactions across wallets; in one documented case, investigators followed 25,000 bitcoins through multiple wallets and identified funds that moved into AlphaBay market accounts[8]. Direct transfers from a regulated exchange to a market deposit address link your verified identity to the market transaction, because the exchange knows your name and the blockchain shows where you sent the funds.

The three-wallet flow reduces this linkage by inserting intermediate steps that complicate automated tracing. You move funds from your exchange account to a personal wallet you control (Wallet A), then from Wallet A to a second intermediate wallet (Wallet B), and finally from Wallet B to the market deposit address. Each transfer adds a new transaction ID and timestamp, forcing analysts to manually verify that the same user controls all three wallets rather than assuming a single chain of custody.

Exchange (KYC identity) 
  → Wallet A (your laptop, 24-hour delay)
    → Wallet B (TAILS session, random amount)
      → Market deposit address (single use)

Wait at least 24 hours between each transfer and vary the amounts slightly. If you withdraw £500 from the exchange and deposit £500 to the market ten minutes later, the timing and round number flag the transaction as suspicious even if you used intermediate wallets. Instead, withdraw £500 to Wallet A, wait a day, send £487 to Wallet B, wait another day, then deposit £487 to the market. The delays and irregular amounts make automated clustering less reliable, though a determined analyst can still reconstruct the flow by examining wallet balances and transaction graphs[8].

Monero conceals transaction details that Bitcoin exposes. Privacy-focused cryptocurrencies hide the sender, receiver, and amount on the blockchain, so even if an exchange logs your Monero withdrawal address, investigators cannot see where you sent the funds afterward[9][4]. A Europol analyst confirmed that when a suspect used Tor and Monero together, investigators could not trace the funds or IP addresses, whereas Bitcoin transactions remained visible[9]. If a market accepts Monero, use it for deposits; if the market only accepts Bitcoin, convert your Bitcoin to Monero using a non-KYC exchange, hold it in a Monero wallet for 48 hours, then convert back to Bitcoin and deposit to the market. This breaks the direct link between your exchange withdrawal and the market deposit, though it adds conversion fees and requires you to trust two additional services.

Tumbling services (mixers) are not a reliable solution. A tumbler pools your Bitcoin with other users' coins and returns a different set of coins to a new address you provide, theoretically breaking the on-chain link. In practice, many tumblers are honeypots run by law enforcement or scammers who steal deposits, and even legitimate tumblers leave statistical patterns that advanced blockchain analysis can detect[8]. Tumblers also require you to send funds to a third party and wait hours or days for the mixed coins to arrive, during which the service can exit-scam. If you choose to tumble, use only services with multi-year reputations on darknet forums, send small test amounts first, and understand that you are adding another point of failure rather than achieving true unlinkability.

Blockchain analysis is a documented capability, not a theoretical risk. The IRS and private contractors trace cryptocurrency flows by clustering addresses that appear in the same transactions, identifying exchange deposit addresses through public data, and timing transactions to match known events[8]. You cannot assume that using Tor hides your payment activity; Tor protects your IP address, but the blockchain is a permanent public record. Three-wallet separation and Monero reduce the chance of automated linkage, but they do not make you invisible to manual investigation.

For users prioritising payment privacy: use Monero if the market supports it, or convert Bitcoin → Monero → Bitcoin with 48-hour delays between steps. For users prioritising simplicity over maximum privacy: use the three-wallet flow with 24-hour delays and irregular amounts, and accept that a well-resourced investigator can still reconstruct the chain. For context on market-level risks that payment hygiene cannot solve, see our Darknet Market guide.

Withdraw funds from the market immediately after each order finalises. Markets hold your balance in escrow, and when a market exit-scams, every coin left in your market wallet is taken[3]. Payment hygiene protects the link between your identity and the market; it does not protect funds you leave on the platform.

Recognizing Scam Patterns and Social Engineering

Escrow systems exist to protect buyers by holding funds until you confirm receipt, yet many scams rely on convincing you to bypass this protection[5]. Malicious vendors and fake administrators use predictable patterns; recognizing the tell in each scenario lets you refuse before losing money.

Fake vendor reviews appear as clusters of identical praise posted within hours, often by newly created accounts with no other activity. A legitimate vendor accumulates reviews over weeks with varied phrasing and occasional complaints; a scammer creates ten accounts that all say 'fast shipping, great product' on the same day.

Admin impersonation arrives via private message claiming your account will be suspended unless you deposit additional funds or verify your identity. The tell: market administrators never initiate contact through PM about account issues, and onion services do not require identity verification[7]. Check the sender's profile creation date and post history; impersonators use names like 'Admin_Support' rather than the official admin account listed in the market's public forum.

Urgent deposit demands pressure you to send cryptocurrency within minutes to secure a limited-time discount or avoid a penalty. A vendor asks you to finalize early for a 20% discount, or a message warns that your escrow will expire in one hour unless you top up your balance. The tell: legitimate escrow does not expire without your confirmation[5], and discounts for bypassing buyer protection benefit only the scammer.

Phishing links sent via PM offer mirrors or support pages with .onion addresses one character different from the real market. The tell: you already have the verified mirror list signed with the market's PGP key; any link sent through PM is unnecessary and suspect. For guidance on verifying mirrors, see our Darknet Market guide.

Fake escrow extensions claim a dispute has been opened and ask you to send additional funds to a 'dispute resolution address' to unlock your original payment. The tell: real disputes freeze the existing escrow payment and involve a market adjudicator who communicates through the platform's dispute interface, not through PM or external addresses[5].

Vendor-level exit scams follow a documented pattern: a seller builds reputation over months, then suddenly stops dispatching orders while asking buyers to finalize early[2]. Never finalize before you physically receive the item, regardless of the vendor's feedback score or the discount offered. Escrow exists to be used, not bypassed; every request to finalize early or send funds outside the platform is a scam attempt.

What to Do When Something Goes Wrong

Markets offer dispute resolution through escrow adjudicators, but the system has documented limits and you need to know when it will help and when it will not[5]. When you are unsatisfied with an order and cannot settle directly with the vendor, you can open a dispute: the market freezes the escrowed payment and an independent adjudicator reviews the evidence you and the vendor provide before deciding whether to release funds to the seller, refund you, or split the payment[5]. This process works only if the market remains online, the adjudicator is honest, and you documented the problem before opening the dispute.

Document everything from the moment you suspect a problem. Take screenshots of the order page showing the vendor's shipping promise, the tracking number if provided, and any messages exchanged with the vendor. Save PGP-signed messages from the vendor; these prove the sender controlled the vendor's key at the time of the message and cannot be forged after the fact. If the product arrives damaged or different from the listing, photograph it next to the packaging and a handwritten note with the order ID and date. Adjudicators decide based on evidence you upload to the dispute interface, and 'the vendor promised X' without proof rarely wins.

The limits of dispute resolution: it does not protect you if the market exit-scams before the dispute concludes[1][3], if the vendor already convinced you to finalize early[2], or if you deposited funds that never entered escrow. Dark web marketplaces are unregulated and offer no user protection, so police raids and scams regularly cause large losses to participants[1]. Law enforcement involvement is not an option for buyers; reporting that you attempted to purchase illegal goods results in self-incrimination, and police prioritise vendors and administrators over individual buyers.

Decision checklist for when something goes wrong:

• Dispute if the item has not arrived within the stated timeframe plus seven days, if the item arrived but does not match the listing description, or if the vendor stops responding to messages after you paid. Open the dispute before the escrow auto-finalizes; most markets finalize automatically 14 days after the vendor marks the order shipped.

• Cut your losses if you finalized early and the item never arrived[2], if the market has been offline for more than 48 hours (likely exit-scam)[3], or if the dispute amount is less than the time and operational security cost of continuing. Pursuing a £20 dispute is not worth the additional weeks of market access and message exchanges that expand your exposure.

• Rotate identities if the vendor threatened to dox you, if the market was seized by law enforcement and your username appeared in the order database, or if you suspect your account credentials were compromised. Generate a new PGP key pair, register on a different market with a new username, and do not reuse any part of the old identity.

Markets have no external regulator and no appeals process beyond the single adjudicator assigned to your dispute[5]. If the adjudicator rules against you, the decision is final. Vendor-level exit scams are common: malicious vendors build reputation over months, then defect and take funds from un-dispatched but finalized orders[2]. You cannot recover these funds, and the vendor's account will be banned only after multiple buyers report the same pattern.

Accept that some losses are unrecoverable and that continuing to engage with a compromised market or vendor increases your risk more than the disputed amount is worth. Dispute when you have evidence and the market is stable; rotate and move on when the platform or vendor shows signs of collapse.

Legal Context: What You Are Actually Risking

Accessing an onion market through Tor is not typically the primary criminal charge in prosecutions; purchasing controlled substances, importing restricted goods across borders, or laundering the proceeds are[8]. In the United States, the Controlled Substances Act criminalises possession with intent to distribute, and federal sentencing guidelines treat cryptocurrency purchases the same as cash transactions. The Silk Road and AlphaBay prosecutions documented that investigators trace funds across the blockchain, identify vendors through postal intercepts, and charge buyers who made multiple high-value orders with distribution rather than personal possession[8].

Jurisdiction determines exposure. In the UK, the Psychoactive Substances Act 2016 and Misuse of Drugs Act 1971 apply to substances purchased online exactly as they do offline, and importing a controlled drug—even a single dose sent by international post—is a separate offence. EU member states enforce national drug laws with varying penalties; possession of small amounts for personal use may be decriminalised in Portugal but carry mandatory minimums in Sweden. You cannot assume that Tor protects you from prosecution; it hides your IP address from the vendor and the market, but it does not prevent customs inspections, postal tracking, or blockchain analysis linking your exchange account to a market deposit[8].

Vendor and administrator prosecutions rely on operational security failures, not breaking Tor. AlphaBay's administrator was identified through an email address reused across clearnet and darknet identities, and vendors have been arrested after law enforcement intercepted packages and traced the return address or delivery patterns. Buyers face lower investigative priority than vendors, but purchasing large quantities, receiving multiple international parcels flagged by customs, or being named in a seized market database all elevate risk.

Laws change, and past enforcement patterns do not guarantee future treatment. For broader context on market-level risks, see our Dark Web Markets Still Active guide. Understand that operational security reduces the chance of identification, but it does not create legal immunity, and no combination of tools makes illegal activity lawful.

Who Each Approach Suits

If you are new to onion markets and have not yet built operational security habits — choose a market with a long-running escrow system and active public forum, because visible dispute history and vendor feedback give you a baseline for judging who is trustworthy.

You need a platform where the escrow mechanism is documented and where other buyers have already left a trail of disputes and resolutions you can read before ordering. A market that has operated for years with the same escrow structure gives you more examples of how adjudicators actually decide, which reduces the chance that your first dispute becomes a lesson in how the system fails. Start with small purchases you can afford to lose, and treat the first three orders as practice for documentation and vendor vetting rather than as reliable supply.

If you buy from a vendor you have used before and trust — choose direct escrow with that vendor on the same market, because a documented history of completed orders gives you more signal than any review cluster.

A vendor who has repeatedly dispatched orders and responded to messages over months is less likely to exit-scam than a new account with identical praise posted in one day[2]. Keep the relationship on the same market and the same escrow path; moving to direct messaging or a different platform removes the only protection you have. Trust is a record of past behavior, not a reason to finalize early.

If you are ordering across an international border — choose a vendor with a documented history of successful deliveries to your country, because customs interception and postal tracking are outside the market’s control and become your legal exposure[8].

International orders add a separate offence for importing a controlled substance in the UK, even for a single dose sent by post[8]. A vendor who has shipped to your region before knows which packaging and routes have cleared customs, but that knowledge does not remove the risk; it only narrows the vendors worth considering. If you cannot verify that history, the safer choice is to not order across a border at all.

If you are buying a high-value item or a quantity that could be read as distribution — choose the smallest possible order and a market with a documented dispute process, because larger orders raise your legal exposure and make you a more attractive target for vendor exit scams[8].

Investigators prioritize buyers who make multiple high-value orders, and vendor-level exit scams are built around convincing you to finalize early on exactly those orders[2][8]. A market with a working dispute interface gives you a chance to freeze escrow if the vendor stalls, but only if you have not already finalized. If the amount is large enough that losing it would push you to keep engaging with a compromised platform, the order is too large.

If you have already been burned or identified — choose to rotate identities and reduce activity, because continuing with the same username, PGP key, or market access expands your exposure more than any future purchase is worth.

Generate a new PGP key pair, register on a different market with a new username, and do not reuse any part of the old identity. The market has no appeals process beyond the single adjudicator, and a vendor who threatened to dox you has already shown that your identity is part of the transaction[5]. When the platform or vendor shows signs of collapse, the only move that protects you is to stop.

Bottom Line: What to Choose

For most readers, the safest choice is a long-running market with a documented escrow system and an active public forum. You want visible dispute history and vendor feedback you can read before ordering, because that record gives you a baseline for judging who is trustworthy. Start with small purchases you can afford to lose, and treat your first three orders as practice for documentation and vendor vetting.

Choose a different market only when you have a vendor you have used before and trust, and keep that relationship on the same escrow path. Avoid any market that pressures you to finalize early, and avoid ordering across an international border unless you can verify a vendor's documented history of successful deliveries to your country.

If the data above feels thin, that is because no market can be unconditionally recommended: every option carries exit-scam risk, and past stability does not guarantee future behavior. For a current list of markets that appear to be operating, see our Dark Web Markets Still Active guide.

One concrete step: before you register anywhere, write down the market's escrow rules and dispute process in your own words, then compare that to what the forum shows. If you cannot explain how escrow protects you, do not order.