Alexandre Cazes (AlphaBay): Lamborghinis, Thai villas and a suspicious death in a cell
At the exact opposite end of the spectrum from Ross Ulbricht, who lived in a $800-a-month shared apartment while moving $1.2 billion through Silk Road, another young man chose maximum display. Alexandre Cazes, born in Quebec in 1991, built the largest dark web marketplace in history — AlphaBay — from Bangkok, all while living like a Dubai heir: four Lamborghinis, five properties, infinity pools, luxury watches, a pregnant wife, and ostentatious photos on social media. That very display of wealth helped investigators track him down. His story, from meteoric rise to death in a Thai cell on July 12, 2017, is one of the most spectacular in dark web history.
⚫ This page is the showcase. The rest is elsewhere. Tor access →Trois-Rivières: the Quebec programmer who left it all behind
Alexandre Cazes was born on October 19, 1991, in Trois-Rivières, a mid-sized Quebec city of around one hundred thousand people, halfway between Montreal and Quebec City. According to court records and testimony gathered by the Royal Canadian Mounted Police (RCMP), Cazes grew up in an ordinary family, developed a strong interest in computing from adolescence, and in the early 2010s ran a small IT services company called EBX Technologies, registered at his Trois-Rivières address.
His first documented contact with the dark web dates to 2009–2010, when he was active on several hacker forums. He operated under various aliases ("alpha02", "Admin", and later "DeSnake") and steadily built a reputation as a capable developer. Around 2013–2014, Cazes left Quebec for Bangkok, officially for professional reasons (he was registered with Thai authorities as an independent consultant). In reality, he was there to build the largest dark web marketplace in history.
AlphaBay: the largest dark web marketplace
AlphaBay officially launched in December 2014. The timing was strategic: Silk Road had been seized in October 2013, Silk Road 2.0 in November 2014 (Operation Onymous), and successive markets (Evolution, Agora) were unstable. AlphaBay entered that vacuum with a technically superior offering: a clean interface, multi-signature escrow, responsive customer support, anti-phishing measures, and soon support for Monero (XMR) alongside Bitcoin — a major innovation for transaction anonymity.
Growth was explosive. By 2015, the site already had 50,000 users. By 2016, it had reached 150,000. At the time of the July 2017 seizure, AlphaBay claimed 400,000 registered accounts and 40,000 active vendors. Transaction volumes exceeded all previous marketplaces combined: roughly $1 billion over two and a half years, approximately ten times Silk Road at its peak. Listed categories included primarily narcotics (60% of listings according to Europol's analysis), stolen data, hacking tools, and firearms (a minority but present).
Cazes collected an average commission of 4% on each transaction, plus 5% for featured listings. According to Canadian investigators' calculations, his personal gains totaled approximately $23 million in cash, crypto, and assets — a conservative figure, with the true amount likely higher once unrecovered wallets are factored in.
The Bangkok lifestyle
Where Ross Ulbricht had chosen the ostentatious discretion of SF shared housing, Cazes went the complete opposite direction. Photos seized by Thai police during the July 5, 2017 searches paint a striking picture.
Real estate
- Main villa: a luxury residence in Bangkok's Huai Khwang district, estimated at $1.2 million, with an infinity pool, seven bedrooms, and an integrated garage for the collection cars
- A second house in the Lat Phrao district, valued at $450,000
- Two condos in Pattaya (a beach resort two hours from Bangkok)
- An apartment in Cyprus (an investment-immigration scheme)
- A secondary residence in Quebec still registered in his name
The car fleet
- A Lamborghini Aventador (approximately $500,000 at the time)
- A yellow Lamborghini Huracán (approximately $300,000)
- Two other Lamborghinis spread across various properties (a Gallardo and an LP640)
- A black Porsche Panamera, used as a daily driver
- A BMW 7 Series, also used daily
Liquid assets
- Approximately $8 million in Thai and Cypriot bank accounts
- Approximately $15 million in Bitcoin, Monero, Ethereum, and other cryptocurrencies, spread across multiple wallets
- Luxury watches (several Rolexes, a Patek Philippe) worth over $1 million
Public visibility
More surprising still: Cazes made no effort to hide this lifestyle. He maintained public profiles on several social media platforms under his real name, posting photos of his Lamborghinis, his villa, and his travels (Dubai, Maldives, Monaco). He appeared in some Thai media as a "young Quebec IT entrepreneur" with a flattering mini-biography presenting EBX Technologies as a thriving Canadian startup. This tech-entrepreneur cover allowed him to justify a fraction — not all — of his income to Thai tax authorities via plausible invoices to fictitious Canadian companies.
On a personal level, Cazes was married to a Thai woman, and she was pregnant at the time of his arrest. This human detail, widely reported by the Canadian press at the time, softened his image as a cold-blooded criminal in the eyes of Quebec public opinion.
The fatal mistake: a Hotmail address
Despite the millions accumulated and the refined technical precautions, Cazes committed an operational
security blunder documented in every cybersecurity course: in December 2014, at AlphaBay's launch, he
manually sent welcome emails to the site's first users. Those emails were sent from a personal address he
had used since he was fifteen:
[email protected].
The address appeared in the SMTP headers of the welcome messages, either as the "Reply-To" field or in the
"From" field depending on the version. Some recipients kept those emails. Furthermore, the same address
[email protected] was publicly linked to his LinkedIn profile, his teenage online gaming
accounts, his old personal website from Trois-Rivières, and several French-language forums where he had
posted between 2008 and 2011 under his real name. One archived forum even contained a post in which he
claimed his connection to EBX Technologies and his Quebec education.
The investigator who made the connection — who remained anonymous to protect subsequent operations — is said to have traced the address through a search of a leaked email database, then found the historical correspondence. Once his civilian identity was confirmed, Canadian, Thai, and European teams launched the surveillance that would lead to Operation Bayonet, several months later.
Operation Bayonet: the international trap
Operation Bayonet is one of the most sophisticated operations in dark web history. It combined:
- The simultaneous seizure of AlphaBay (July 5, 2017) through Cazes's physical arrest in Bangkok and the seizure of the servers.
- Dutch police secretly taking control of Hansa Market for 27 days (June 20 to July 20, 2017), AlphaBay's immediate competitor.
- The mirror effect: when AlphaBay was seized and its users migrated en masse to Hansa (seen as "the alternative"), they walked straight into the Dutch trap. Police collected the identities and operational security details of thousands of vendors and buyers.
Agencies involved: FBI, DEA, Homeland Security Investigations, Royal Thai Police, Royal Canadian Mounted Police, Netherlands Politie, Europol, Bundeskriminalamt (German federal police), and smaller agencies from around a dozen other countries. It is the most complex international operation ever coordinated on the dark web.
The arrest of July 5, 2017
On July 5, 2017, at 5:45 a.m. Bangkok time, Thai special forces moved in on Alexandre Cazes's main villa in the Huai Khwang district. A Lamborghini Aventador was parked outside the house, visible from the street. The door was rammed open with precisely calibrated force — the objective, as with Ulbricht, was to catch Cazes in the middle of using his computers.
Cazes was asleep. Pulled from his bed, disoriented, handcuffed, he was removed from his bedroom without resistance. His pregnant wife was also present but was not arrested. Investigators seized several laptops, at least one primary desktop, dozens of hard drives, approximately $2 million in cash, and the entire car fleet.
Among the most damning evidence: a .xlsx file open on one of the computers containing
Cazes's personal financial accounts, with real-time updated valuations (12.3M in crypto,
8.1M in cash and financial assets, last updated May 2017). Also found was another file detailing the
Bitcoin and Monero wallets he directly controlled.
Death in a cell: unanswered questions
Cazes was transferred to Bangkok Remand Prison, the holding facility for Thai and foreign defendants awaiting trial. He was placed in a single cell under what was described as "standard" monitoring. According to the official Thai account, on July 12, 2017, around 7 a.m. — seven days after his arrest — a guard discovered him hanging in his cell, using a bath towel tied to the top frame of the toilet door. Resuscitation was attempted; death was pronounced.
The official account concluded suicide. Thai coroner documents, penitentiary authority statements, and the internal investigation all pointed to the same cause.
However, several elements have fueled persistent doubt:
- Cazes's cell was not equipped with CCTV, according to his lawyer's statements — unusual for a very high-profile detainee who was the subject of an ongoing international extradition request
- The death occurred the day before the first extradition hearing scheduled for July 13, permanently neutralizing the proceedings — the United States had already requested his transfer
- Bangkok Remand Prison is notorious for extreme overcrowding and harsh conditions — some observers have suggested the possibility of a genuine suicide in a desperate situation, while others have pointed to how easily an "accident" can happen in such facilities
- His Canadian family and lawyer filed requests for an independent autopsy, which were not granted
No independent international investigation was conducted. The official suicide ruling remains the judicial consensus, without the unanswered questions being definitively resolved. Alternative theories (murder arranged by nervous business partners, a neutralization orchestrated by an intelligence service wishing to avoid revelations about investigative methods) remain speculative and unproven to this day.
The consequences of AlphaBay
AlphaBay's fall had massive ripple effects:
- More than 400 arrests of vendors and buyers across a dozen countries in the two years that followed, using data collected on Hansa
- Approximately 50 kg of hard drugs and 100 kg of cannabis seized at customs thanks to exposed addresses
- Cazes's $23 million in assets, officially remitted to the Canadian and Thai governments, with a portion redistributed to victims who demonstrated harm
- End of the illusion of impunity for marketplace operators: after Ulbricht (life sentence), Cazes (death), and the successive convictions of AlphaBay-Alpha02 v2, Hansa, Wall Street Market, and DarkMarket founders, no operator can credibly claim to slip through the net
- Relaunched in 2021 under the name "AlphaBay v2" — operated by "DeSnake", Alexandre Cazes's former technical administrator, who presented himself as the legitimate successor. This v2 remained far smaller and was itself seized in 2024.