Sponsored by Hudson Rock – Use Hudson Rock's free cybercrime intelligence tools to learn how Infostealer infections are leading to ransomware attacks

Enjoying ransomware.live? Help us keep tracking ransomware gangs and shipping new features. Support us
Ransom Payment Tracer

Inspired by secworkspace/ransomware-payment-tracer.

First Hop Amount
0.00209000 BTC
Hops Traced
4
Flagged Hops
2
High Risk Hops
0
Starting Address
bc1py2elvu46wcsyrneafezrvn6pvpqw2hds64a5060ds3vz5dpweekq4mt24l
blockchain.com Wallet view
Fund Flow Trace
Clean hop Self-consolidation / fan-out branch OFAC-listed / known ransomware family Click any node to continue tracing from it · scroll to zoom · drag to pan
Hop Detail
HOP 1 · 2026-08-22 00:13 UTC
bc1py2elvu46wcsyrneafezrvn6pvpqw2hds64a5060ds3vz5dpweekq4mt24l → bc1qkqn6epy9dlntj8mvdv97tnl4c666rgtppp5af7aktdmxf7kpazmq2thk0q
tx c9e85622c1e3baa2…
Low Risk
0.00209000 BTC
Continue from here
HOP 2 · 2025-09-22 02:12 UTC
bc1qkqn6epy9dlntj8mvdv97tnl4c666rgtppp5af7aktdmxf7kpazmq2thk0q → bc1p2mlwrss9tmvtfvu0tcxul2h0w67ej8vyjpj3ksctt67vd9r752ksqx6uqm
tx 21fa247ba05e9500…
Split payment
31.79999000 BTC
Continue from here
This spend also paid 9 other addresses — not followed above, since the walk only continues down the largest branch:
bc1quhruqrghgcca950rvhtrg7cpd7u8k6svpzgzmrjy8xyukacl5lkq0r8l2d 3.06798035 BTC Trace this branch
1CcbPLqKpqXHw5PzyFzgynT9FemkRfuR67 0.50000000 BTC Trace this branch
1BRoz1ezjZJxZfGeGrukA2vAxqgWLbMnAm 0.49999000 BTC Trace this branch
1q92VTRiRUpv2nCDk7q95VkVMMRQcBKP2 0.12078579 BTC Trace this branch
1HAny2tLTy1fV3AVPFUnqtrzsSfTsr6at3 0.06960864 BTC Trace this branch
bc1phk8632znc8m7chd2x7d4c07008assx2045hwngp2tvy330k43uhqxvuxpp 0.03240565 BTC Trace this branch
bc1p8u2j2arwtn6srj6swswq93d5pw589s7txep204rmpst4mn2a6xaqh8a5qr 0.01229000 BTC Trace this branch
1J7XfWiVPCjrxKChhdMwKhGMmngXsXu46v 0.00351259 BTC Trace this branch
+ 1 more address not shown
HOP 3 · 2026-09-10 02:43 UTC
bc1p2mlwrss9tmvtfvu0tcxul2h0w67ej8vyjpj3ksctt67vd9r752ksqx6uqm → 18PgxqUNFipHQ7odhpD1iVDc6DhVLSLXTq
tx 848e40c9e76f416b…
Split payment
27.27894745 BTC
Continue from here
This spend also paid 2 other addresses — not followed above, since the walk only continues down the largest branch:
bc1qcadgk6uylhp4kdw5yy0jxlu9sxr6wwednuqxkw 0.00001092 BTC Trace this branch
bc1qa9nns4s52888j8drqqh4zx7c7u9vmrlqa8k4me 0.00001092 BTC Trace this branch
HOP 4 · 2026-09-02 04:58 UTC
18PgxqUNFipHQ7odhpD1iVDc6DhVLSLXTq → bc1qm34lsc65zpw79lxes69zkqmk6ee3ewf0j77s3h
tx e78fc09d85e395b6…
Low Risk
99.59640473 BTC
Continue from here
Reached the 4-hop limit for this run — continue from the last hop above to keep walking.