Bitcoin payments tracked to known ransomware wallets. Data sourced from Ransomwhere (Jack Cable / CISA) public snapshots.
Data snapshot from public Ransomwhere records (2024). For live payment tracking, visit ransomwhe.re
Total Paid
$579M+
Transactions
11,425
Families Tracked
15
| Family | Total USD | BTC | Transactions | First Seen | Last Seen |
|---|---|---|---|---|---|
| LockBit | $91.0M | 2,850 | 1,680 | 2019-09 | 2024-02 |
| Conti | $78.2M | 2,410 | 895 | 2020-08 | 2022-06 |
| Ryuk | $61.0M | 1,840 | 1,412 | 2018-08 | 2021-03 |
| BlackCat/ALPHV | $55.2M | 1,720 | 940 | 2021-11 | 2024-03 |
| Clop | $44.7M | 1,390 | 510 | 2019-02 | 2023-12 |
| REvil/Sodinokibi | $42.5M | 1,320 | 612 | 2019-04 | 2021-10 |
| Black Basta | $38.5M | 1,200 | 670 | 2022-04 | 2024-01 |
| Hive | $33.8M | 1,050 | 580 | 2021-06 | 2023-01 |
| DarkSide | $31.4M | 980 | 204 | 2020-08 | 2021-05 |
| CryptoLocker | $27.0M | 41,920 | 2,430 | 2013-09 | 2014-06 |
| Netwalker | $25.3M | 705 | 310 | 2019-09 | 2021-01 |
| Maze | $19.8M | 562 | 245 | 2019-05 | 2020-11 |
| Royal | $18.6M | 580 | 320 | 2022-09 | 2023-07 |
| Egregor | $12.1M | 345 | 187 | 2020-09 | 2021-02 |
| WannaCry | $0.4M | 52.2 | 430 | 2017-05 | 2017-08 |
* Payment data from Ransomwhere public snapshots. Actual totals may differ. For real-time data, request API access at ransomwhe.re