14Q5xgBHAkWxDVrnHautcm4PPGmy5cfw6b

Reported crypto scam address

This Bitcoin address was named in 7 public crypto scam reports: Ransomware, Phishing. First reported 2026-04-22. Last updated 2026-10-16.

BlackCat ransomware payment address 14Q5xgBHAk… ($21,867,502 received)

  • Scam type: Ransomware
  • Chain: Bitcoin
  • Reported: 2026-10-15
  • Last updated: 2026-10-16

Ransomware payment address attributed to the BlackCat ransomware family by Ransomwhere (crowdsourced ransomware payment tracker, ransomwhe.re). Bitcoin address 14Q5xgBHAkWxDVrnHautcm4PPGmy5cfw6b received 1 payment transaction(s) totalling 350.21268866 BTC (~$21,867,502 USD at time of payment per Ransomwhere), between 2024-03-01 and 2024-03-01 (UTC). One report per payment address; no victim information is included. Source: api.ransomwhe.re/export (fetched 2026-10-14); explorer: https://mempool.space/address/14Q5xgBHAkWxDVrnHautcm4PPGmy5cfw6b. Confidence: Medium — single crowdsourced source…

Ransomware - Blackcat - 2 BTC Addresses

  • Scam type: Ransomware
  • Chain: Bitcoin
  • Reported: 2026-06-02
  • Last updated: 2026-06-02

Bitcoin addresses observed for the Blackcat ransomware group. 2 wallet(s) identified by ransomlook.io's open-source ransomware intelligence platform. These addresses have been associated with ransom payment collection by the Blackcat group. All addresses verified as standalone wallets (not TXID substrings). Source: ransomlook.io (open ransomware intelligence) via.

Ransomware - Blackcat - 2 BTC Addresses

  • Scam type: Ransomware
  • Chain: Bitcoin
  • Reported: 2026-06-02
  • Last updated: 2026-06-02

Bitcoin addresses observed for the Blackcat ransomware group. 2 wallet(s) identified by ransomlook.io's open-source ransomware intelligence platform. These addresses have been associated with ransom payment collection by the Blackcat group. Source: ransomlook.io (open ransomware intelligence) via.

Crypto Scam Addresses from Telegram

  • Scam type: Phishing
  • Chain: Solana
  • Reported: 2026-04-25
  • Last updated: 2026-04-25

Cryptocurrency scam and phishing addresses identified in Telegram channels, including pig butchering, drainer contracts, and romance scams.

Other addresses in this report: 0x992dac3c68cee8e6f1dc3698d7aae2b7e5eba4b0, tn1ne9h25ahydpxsyywtzehd5syamygzpw, 0x6c43f7d22e20311282bd047e17f7ca91da5a8cf9, 0x0a96825f542e00d3aa58e317fb753005ed360666, 0x831915580e2d486df60196affb1dd93ee9343359, 0x2d8f43752731310b249912c2fc2eb72797d99478, 0x43faee949596b98a6e30f937b1d61aeb0094b0bc, 0x2d338f5f4f8f904adb8c9ff4072270033b564fbc, 0x7d7a7f452e04c2a5df792645e8bfaf529adccecf, 0x3cb21153be7da3e3b741cdd01265fcaba78e2e49, bc1qqx0ryrqjy79fn0mz3lduf69d40nwv9papeykuz and 39 more

BlackCat Ransomware Payment Address

  • Scam type: Ransomware
  • Chain: Bitcoin
  • Reported: 2026-04-22
  • Last updated: 2026-04-22

Bitcoin address used by BlackCat ransomware to collect ransom payments from victims. Verified with 1 confirmed on-chain transaction(s) totaling $21,867,501.90 USD. Source: Cable, Jack. (2024). Ransomwhere: A Crowdsourced Ransomware Payment Dataset (1.1.0) [Data set]. Zenodo. https://doi.org/10.5281/zenodo.6512122

alphv Ransomware Payment Address

  • Scam type: Ransomware
  • Chain: Bitcoin
  • Reported: 2026-04-22
  • Last updated: 2026-04-22

Ransomware payment address associated with alphv. This address was used to collect ransom payments from victims. Source: Threat intelligence database aggregated from ransomware tracking services. Context: Earlier today Dmitriy Smilianets shared information regarding allegations from ALPHV affiliates of ALPHV administrative scamming partners. A user went online to state they are responsible for ransomi

Report a crypto scam · How to report a crypto scam