Sponsored by Hudson Rock Use Hudson Rock's free cybercrime intelligence tools to learn how Infostealer infections are leading to ransomware attacks

Enjoying ransomware.live? Help us keep tracking ransomware gangs and shipping new features. Support us
Ransom Payment Tracer

Inspired by secworkspace/ransomware-payment-tracer.

First Hop Amount
3.34415022 BTC
Hops Traced
4
Flagged Hops
3
High Risk Hops
0
Starting Address
bc1qvmmfmp535pkpvc4l7406e9s87h3t8yqtgm8z7t
Fund Flow Trace
Clean hop Self-consolidation / fan-out branch OFAC-listed / known ransomware family Click any node to continue tracing from it · scroll to zoom · drag to pan
Hop Detail
HOP 1 · 2026-08-30 09:47 UTC
bc1qvmmfmp535pkpvc4l7406e9s87h3t8yqtgm8z7t → bc1q0nhve03vlg9xcvz96st67vnv4zt0p6zcfmcz03
Low Risk
3.34415022 BTC
HOP 2 · 2026-08-30 13:25 UTC
bc1q0nhve03vlg9xcvz96st67vnv4zt0p6zcfmcz03 → bc1qy4c9xn7ulj0jzqnsdd0ur38rmd4rvn8xjjm5xl
Split payment
3.26711145 BTC
This spend also paid 1 other address — not followed above, since the walk only continues down the largest branch:
bc1qesqc0mw94yjdt2eqc2tqxs96443edyuh83lvcd 0.08032921 BTC Trace this branch
HOP 3 · 2026-08-30 14:15 UTC
bc1qy4c9xn7ulj0jzqnsdd0ur38rmd4rvn8xjjm5xl → bc1q6hnw7x2uegxhwddkejcdga47pz5evvnkz3t3zd
Split payment
3.12145485 BTC
This spend also paid 1 other address — not followed above, since the walk only continues down the largest branch:
bc1q0xvrng0n0gdkhtk38sz8qj2zxw0rg2eaku6qj3 0.14565338 BTC Trace this branch
HOP 4 · 2026-08-31 06:21 UTC
bc1q6hnw7x2uegxhwddkejcdga47pz5evvnkz3t3zd → bc1q30u0wwxkkls5r4hxztjrew6mpshzede88vxlca
Split payment
3.03599409 BTC
This spend also paid 1 other address — not followed above, since the walk only continues down the largest branch:
bc1qxy8efyq7fuf9cw83c79rvqhxm2fjm3t30la7ju 0.08545754 BTC Trace this branch
Reached the 4-hop limit for this run — continue from the last hop above to keep walking.