Mars Market Reference Plain descriptions of what each step involves, what you will experience, and where it can go wrong

Mars Market addresses

Three published addresses for the same market. Copy rather than retype, and check the signature once you are through.

Address 1 marsautkudspgk6j23cxdtrk36ae4fpis2eoe7izu5y2rsksvmfji2ad.onion
Address 2 marshjhtog245vzjzcicnmv2ci6yljibvdm4pngq5kmkfvcutppboxad.onion
Address 3 marsiujka6lrsaqpnxiwvknthhzsrlmq77mnl2fi62guc4lwxif65syd.onion

This list is published, not monitored. An address that opens is not an address that is genuine, and the check that settles it takes under a minute.

Reference › When something is wrong

Something asked for information

The shortest page here, because the answer is categorical rather than a judgement.

The absolute oneNothing legitimate ever asks for a wallet seed or a private key, in any framing, for any reason. Not to migrate, not to verify, not to recover, not to prove ownership. There is no exception and nothing to weigh up.

Requests that are never legitimate

The requestHow it is framed
Wallet seed or private keyMigration, verification, recovery, proving the wallet is yours
Password on a page you did not navigate toSession expired, confirm your identity, security check
A second factor code passed to a personSupport needs it to unlock your account
Payment outside escrowFaster, cheaper, escrow is having problems, a regular arrangement
Personal identifying detailsAge check, address confirmation, dispute evidence
Lowering browser securityThe page will not work otherwise

Why urgency is always attached

Because checking defeats all of this, and the only reliable way to prevent checking is to make somebody feel there is no time. That is why every one of these arrives with a deadline, a warning, or a consequence for delay. It gives a rule that needs no expertise: the presence of a clock is the answer, because nothing genuine here requires action within a stated period.

If you already answered

  1. If it was a password: change it immediately from an address you verified yourself, reset the second factor, then read the message log before checking anything else.
  2. If it was a second factor code: assume the session is live right now and go straight to changing the password and resetting the factor.
  3. If it was a wallet seed: move whatever remains to a new wallet immediately and do nothing else first. This one is measured in minutes.
  4. If it was a payment outside escrow: there is no recovery mechanism, and knowing that now is what stops it happening twice.

The ordering matters. People instinctively check the balance first, and the account is what somebody can act through right now, including talking to other people as you.

Afterwards

Work out which channel put the request in front of you, because that is the part that generalises. Almost always it arrived somewhere that cannot prove anything about itself, and almost always it was believed because of where it was found rather than because of anything it demonstrated.