Answer
There is no official new Joker website. Joker's Stash, the carding marketplace that used the Joker name, posted a shutdown notice in February 2021 and stopped listing inventory. No verified successor operates. Every domain that claims to be the "new official Joker" today is a copy, a phishing page, or an exit scam.
Timeline of the original site
- 2014: Joker's Stash opens. Listings include stolen payment card numbers, dumps, and account data.
- December 2020: The FBI seizes a Joker's Stash clear web domain and replaces it with a seizure notice.
- January 2021: The operator, who used the handle JokerStash, posts a retirement message. Press reports cite a death from complications of COVID-19.
- February 2021: The marketplace announces closure. Trading stops.
Elliptic tracked bitcoin flowing into the marketplace and listed it among the largest carding stores on record.
Why copies keep appearing
A brand with no owner and steady search volume attracts impersonators. Most "new Joker" domains reuse one template: a login box, a vendor counter, and a deposit address. Three outcomes are common. The site takes deposits and delivers nothing. The site is a phishing kit that captures the username and password typed into it. The site is a reskin of an unrelated market that changes names every few months.
What can and cannot be verified
Known: the 2021 closure notice, the 2020 domain seizure, and the death reports cited by security press. Unknown: the operator's legal identity and total sales volume.
Joker's Stash had no corporate registration, no published ownership, and no registrar record tied to a named operator. That means no site can prove continuity with the original. A claim of "official" status has no document behind it.
Legal position in the United States
18 U.S.C. 1029 covers fraud and related activity with access devices. Trafficking in card numbers falls under it. A first offense carries up to 10 years in prison; later offenses carry up to 15 years, plus fines. 18 U.S.C. 1028 covers identity documents. Banks and card networks also pursue civil claims for chargeback losses.
What to do with a site that uses the name
- Treat the name as unowned. Anyone can put "Joker" in a domain.
- Check the domain registration date. Copies are new; the original traded for seven years.
- Do not enter credentials. Phishing kits log keystrokes and form data.
- Report the domain to the hosting provider and to the FBI Internet Crime Complaint Center.
Bottom line
The original marketplace is gone. No official replacement was announced. Any page that markets itself as the new Joker website is run by a party with no connection to the 2014 to 2021 operation.