The part nobody advertises

Staying safe on Osiris Market

The address gets you in. After that, the risk is mostly your own, and most of it is avoidable with habits that take seconds. This is a working list, not a lecture.

Before the session

• A separate identity. Tor Browser is a separate profile. Do not run it next to your everyday browser with the same tabs visible; the muscle memory leaks.
• A new password. Long, random, used nowhere else. If you need to write it down, paper is the right tool.
• A budget you can lose. The market is not a place to make financial decisions in real time.

While you are there

• PGP the shipping fields. The order form asks for the address and phone number encrypted with the vendor's public key. It is a pain, and the pain is the point.
• Pay in XMR when the vendor takes it. The Bitcoin ledger is public and analytics firms model it. Monero is not.
• Read the vendor header first. Deal count and dispute ratio sit at the top of the vendor page. Forty thousand deals at 0.1 percent disputes is a different vendor than thirty deals at nine.
• Confirm only in hand. The auto-release timer gives you a few days. Use them.
• Keep evidence. Screenshots of the listing, the PGP messages, the tracking number. Disputes are decided on signed evidence, and no evidence is no win.

After the session

• Close Tor Browser. A forgotten profile is a forgotten identity.
• On a shared machine, clear the clipboard: the address is in there.
• Keep the market's wallet separate from your daily one.

The mistakes that actually happen

1. Logging in from a search result. The clone exists to collect that password.
2. Reusing a password from another site. A breach list finishes the job.
3. Pasting an address from a chat message. One swapped character, a different owner.
4. The 20 percent cheaper vendor with no history. The price is the bait.
5. "Just checking" through a clearnet gateway. The gateway reads the check.