RagnarLocker ransomware payment address 13nmJ3SsNB… ($4,517,994 received)
- Scam type: Ransomware
- Chain: Bitcoin
- Reported: 2026-10-15
- Last updated: 2026-10-17
Ransomware payment address attributed to the RagnarLocker ransomware family by Ransomwhere (crowdsourced ransomware payment tracker, ransomwhe.re). Bitcoin address 13nmJ3SsNB5pSyQrmX3e6zveY9kHGw8Vs3 received 2 payment transaction(s) totalling 414.00065212 BTC (~$4,517,994 USD at time of payment per Ransomwhere), between 2020-07-27 and 2020-07-28 (UTC). One report per payment address; no victim information is included. Source: api.ransomwhe.re/export (fetched 2026-10-14); explorer: https://mempool.space/address/13nmJ3SsNB5pSyQrmX3e6zveY9kHGw8Vs3. Confidence: Medium — single crowdsourced source…