Sponsored by Hudson Rock – Use Hudson Rock's free cybercrime intelligence tools to learn how Infostealer infections are leading to ransomware attacks

Enjoying ransomware.live? Help us keep tracking ransomware gangs and shipping new features. Support us
Ransom Payment Tracer

Inspired by secworkspace/ransomware-payment-tracer.

First Hop Amount
0.01803500 BTC
Hops Traced
4
Flagged Hops
2
High Risk Hops
0
Starting Address
bc1qnseat72y36u3galfe5r9gj9c8r4eyn72aytumt
blockchain.com Wallet view
Fund Flow Trace
Clean hop Self-consolidation / fan-out branch OFAC-listed / known ransomware family Click any node to continue tracing from it · scroll to zoom · drag to pan
Hop Detail
HOP 1 · 2026-08-12 04:35 UTC
bc1qnseat72y36u3galfe5r9gj9c8r4eyn72aytumt → bc1qz7vytp7gq8lw3jth45rfja4q7r7as84sa5tucx
tx a644391d376f5db5…
Split payment
0.01803500 BTC
Continue from here
This spend also paid 1 other address — not followed above, since the walk only continues down the largest branch:
bc1q6gtv4fhyl997lthdtqnmmz530ya68wu9qlmqv3 0.00010440 BTC Trace this branch
HOP 2 · 2026-09-04 06:40 UTC
bc1qz7vytp7gq8lw3jth45rfja4q7r7as84sa5tucx → bc1qs2agevvg6r5umue92a4ttju6rev26unxc7v7l3
tx 87b2992ece649498…
Split payment
1.50000000 BTC
Continue from here
This spend also paid 2 other addresses — not followed above, since the walk only continues down the largest branch:
bc1qujepl0k5n0ga2e86yskvxa6auehpf6dlf84dx0 0.00216011 BTC Trace this branch
bc1q37g83s7l6wwre69d05hpz4zhe24uq2uchmjj5f 0.00115393 BTC Trace this branch
HOP 3 · 2026-09-07 07:32 UTC
bc1qs2agevvg6r5umue92a4ttju6rev26unxc7v7l3 → 16VCJYxs9MYTyC2yWjYxmx7Dem5mgVaWbP
tx 88ac942229cd4362…
Low Risk
3.37945000 BTC
Continue from here
HOP 4 · 2026-09-01 18:49 UTC
16VCJYxs9MYTyC2yWjYxmx7Dem5mgVaWbP → bc1qm34lsc65zpw79lxes69zkqmk6ee3ewf0j77s3h
tx 9a8a8483d7c78057…
Low Risk
98.28221045 BTC
Continue from here
Reached the 4-hop limit for this run — continue from the last hop above to keep walking.