Unfriended: Dark Web — The Movie, Explained

What's actually possible on the dark web — and what the screenwriters made up for shock value.

Unfriended: Dark Web is the 2018 horror film directed by Stephen Susco, a stand-alone sequel to the 2014 Unfriended. The entire movie unfolds on a single laptop screen, in real time, as a group of friends on a video call discover that the laptop's previous owner was running a "dark web" snuff trading operation — and that the operators want it back.

The film grossed about $16 million on a $1 million budget and became a cultural touchstone for an entire generation's understanding (and misunderstanding) of the dark web. This article walks through the plot, explains both endings, and separates the real technology from the fiction.

The Plot in One Paragraph

Matias O'Brien finds an abandoned laptop at a coffee shop and brings it home. While on a Skype-style group call with five friends, he discovers hidden encrypted folders containing disturbing snuff videos filmed for paying customers on the dark web. The original owner — username Charon IV — wants the laptop back, and the videos reveal that Charon IV is part of a cabal called The Circle, ultra-wealthy clients who pay to commission the murders of specific victims. The Circle picks off Matias and his friends one by one through the night.

The Two Endings

Unfriended: Dark Web is unusual because it has two officially released endings, both included on home media releases.

Theatrical Ending

Matias is run over by a van, the police are framed as the killers, and his deaf girlfriend Amaya is shot at a police station. The Circle bids on her death in real time. Everyone dies. It is bleak and total.

Alternate Ending

Matias survives the kidnapping after a struggle but is buried alive in a coffin. His final moments are sold to The Circle as a livestream while his friends are still murdered in parallel. Bleaker, somehow, than the theatrical version.

Both endings are designed to be unwinnable. The film's thesis is that the antagonist is a network, not a person — you cannot kill a network by surviving one night.

Is The Circle Real?

No. "The Circle" as depicted — a coordinated international cabal of wealthy clients placing live bids on commissioned murders via auctions — is fiction. There is no documented real-world equivalent. This is the film's biggest single departure from reality.

The myth the film draws on is "red rooms": the persistent urban legend that you can pay to watch live murder streams on the dark web. Despite decades of rumors, no genuine red room has ever been verified by law enforcement, journalists, or researchers. Tor's high-latency onion routing makes real-time video streaming technically impractical — sustained low-latency streaming over Tor is degraded enough to make a paid live broadcast uneconomical.

What does exist on the dark web includes documented child exploitation material, drug markets, stolen-data dumps, and forums. Those are real, well-documented, and far less cinematic. See our is the dark web dangerous breakdown for what is actually known to occur.

What the Movie Gets Right

The screenwriters did consult on dark web mechanics, and several details are accurate:

Tor and .onion addresses. The film correctly shows that dark web sites use .onion domains and require Tor or a similar tool to reach. Brief shots of the address bar show plausible v2 onion addresses (the format current at the time of filming).
Encrypted payments. The Circle uses Bitcoin for bids and payouts. This is consistent with how darknet commerce actually worked in 2018, though most criminal activity has since shifted to Monero.
Anonymized handles. The killers and clients use pseudonyms (Charon IV, etc.) and never reveal real identities. This matches genuine darknet operational culture.
The persistence of files on a "wiped" laptop. Recovering deleted encrypted folders from a previous owner's machine is plausible. This is exactly why Tails OS is designed to leave no trace on the host machine.
PGP-style encryption for messages. Real darknet vendors and buyers communicate this way (guide here).

What the Movie Exaggerates or Invents

Live-bid murder auctions on real-time video. Not technically realistic over Tor and not documented in the real world.
Hacker omniscience. The Circle remotely controls smart home devices, ATMs, traffic cameras, and police scanners with frictionless ease. Real attackers do gain this access in some cases — but never all of it, on demand, against multiple unrelated targets simultaneously.
"Dark web" as a single coordinated criminal society. The film treats the dark web as one place with a hierarchy. In reality it is a fragmented collection of unrelated hidden services, most of which are mundane (privacy email, journalism platforms, mirror sites for clearnet pages).
Voice morphing and untraceable cellular calls. Plot-convenient capabilities that the film treats as standard.

Why The Film Resonated

Unfriended: Dark Web hit at a moment — 2018 — when public anxiety about online surveillance, deepfakes, and digital coercion was peaking. The movie's strongest beats are not the dark web mechanics. They are the plausibility of being watched through your own devices and the horror of strangers knowing where your friends and family live. Those concerns map onto real, well-documented threats: webcam exploits, stalkerware, doxing, SIM-swap attacks, and credential stuffing — none of which require a "dark web cabal" to occur.

For viewers who came away alarmed about the dark web specifically, the more accurate response is to be alarmed about clearnet data exposure — which is where almost all real-world digital harm originates. See our dark web monitoring guide if you want to check whether your own data has actually been leaked.

Should You Watch It?

If you enjoy the screen-life subgenre (movies that take place entirely on a computer screen — Searching, Profile, Host), it is well-executed. The pacing is tight, the cast performances over Skype are committed, and the technical staging is impressive given the budget. As a horror film, it works.

As a documentary about the dark web, it does not. Treat it the way you would Hackers or Swordfish — entertainment that draws on real concepts, then sprints past them.

Key Takeaways

Unfriended: Dark Web (2018) is fiction. The Circle, the live murder auctions, and the omniscient hacker capabilities are not real.
Tor, .onion sites, Bitcoin payments, and pseudonymous handles are accurately depicted.
"Red rooms" remain an urban legend with no verified examples.
Both endings of the film kill everyone — the theatrical and the alternate.
The real digital threats the film gestures at — webcam exploits, stalkerware, doxing — happen on the clearnet, not on Tor.

Is the Dark Web Dangerous? — Real risks vs media hype.
What Is the Dark Web? — A factual introduction.
Onion Routing Explained — How Tor actually works.
Dark Web Monitoring — Check if your real data has been leaked.
Tails OS — Why a "leaves no trace" OS exists.