Nexus has introduced a substantially revised vendor verification protocol aimed at raising the baseline trustworthiness of marketplace listings. The update introduces a multi-stage onboarding process for new vendors, mandatory PGP key registration, and a probationary period during which new accounts operate under enhanced monitoring. The changes take effect immediately for all new vendor registrations and will be retroactively applied to existing vendors through a rolling compliance window.
Why Verification Matters on a Tor Marketplace
Pseudonymous commerce creates a trust challenge: buyers cannot rely on real-world identity verification. The traditional response has been purely reputation-based trust -- a vendor's rating and review history serve as their credential. While this works for established accounts, it leaves buyers vulnerable when interacting with new vendors or when established accounts are compromised. The new protocol adds structural checks that do not require deanonymization but do establish accountability.
The Three-Stage Onboarding Process
New vendor accounts now pass through three stages before they can list items. In Stage 1, applicants must generate a PGP key pair and submit the public key to the marketplace. This key is registered to the account and cannot be changed without a verification process -- it becomes the cryptographic identity of the vendor. All future vendor communications, including dispute responses, must be PGP-signed with this key.
Stage 2 is a product knowledge verification: applicants must demonstrate familiarity with the marketplace rules through a structured assessment covering prohibited items, dispute procedures, and stealth packaging standards. This step filters out uninformed applicants and ensures vendors understand their obligations before listing. Stage 3 is a deposit requirement. New vendors escrow a small refundable bond that is held for the first 30 days of operation and forfeited if the account accumulates unresolved disputes or receives verified scam flags. The bond is returned in full if the probationary period completes without incident.
Retroactive Compliance for Existing Vendors
Vendors who registered before this update have a 45-day window to submit a PGP public key and complete the marketplace rules assessment. Non-compliant accounts will have listing privileges suspended at the end of the window until compliance is achieved. Existing vendor bonds are waived for accounts with more than 90 days of active operation and a dispute rate below 3%, recognizing established track records.
What This Means for Buyers
Buyers will see a "Verified" badge on vendor profiles that have completed the full onboarding process. This badge signals PGP key registration and rules compliance -- not an endorsement of product quality, which remains governed by the review system. Buyers are encouraged to always verify vendor PGP signatures on any communication that includes delivery information or payment addresses. See the anti-phishing guide for how to verify signatures in practice. For how to evaluate vendor trust holistically, consult the FAQ section on vendor selection.