What caused ransomware payments to stagnate in 2025?

Victims are refusing more often, upping backups and insurance, while leak sites explode—44% more postings, same $850M haul.

How traceable are ransomware crypto funds now?

Very—cross-chain bridges leave trails, repeated use and consolidations light up blockchains for firms like TRM Labs.

Likely—low entry barriers mean more actors, pivoting to data leaks and aggression if ransoms dry up.

🔗 Crypto & Blockchain

Ransomware's spreading like wildfire. But victims aren't coughing up cash anymore—and that's got the crooks scrambling.

theAIcatchup Apr 10, 2026 4 min read

Ransomware activity up 40%+ with 93 new variants, but payments flat at $850M as victims resist. 𝕏
TRM Labs highlights four tracing opportunities, from geo-expansion to blockchain footprints. 𝕏
Stagnation may echo historical piracy decline, but expect nastier tactics ahead. 𝕏

Published by

Markets. Money. Innovation.

#TRM Labs #blockchain tracing #crypto crime #ransom payments #ransomware activity #ransomware payments

Get the best Fintech stories of the week in your inbox — no noise, no spam.

Originally reported by Crowdfund Insider