1AbRxRfP6yHePpi7jmDZkS4Mfpm1ZiatH5

Reported crypto scam address

This Bitcoin address was named in 4 public crypto scam reports: Ransomware. First reported 2026-04-22. Last updated 2026-10-17.

MedusaLocker ransomware payment address 1AbRxRfP6y… ($1,194,661 received)

  • Scam type: Ransomware
  • Chain: Bitcoin
  • Reported: 2026-10-15
  • Last updated: 2026-10-17

Ransomware payment address attributed to the MedusaLocker ransomware family by Ransomwhere (crowdsourced ransomware payment tracker, ransomwhe.re). Bitcoin address 1AbRxRfP6yHePpi7jmDZkS4Mfpm1ZiatH5 received 388 payment transaction(s) totalling 161.65663764 BTC (~$1,194,661 USD at time of payment per Ransomwhere), between 2019-01-16 and 2020-11-22 (UTC). One report per payment address; no victim information is included. Source: api.ransomwhe.re/export (fetched 2026-10-14); explorer: https://mempool.space/address/1AbRxRfP6yHePpi7jmDZkS4Mfpm1ZiatH5. Confidence: Medium — single crowdsourced…

Ransomware - Medusalocker - 20 BTC Addresses

  • Scam type: Ransomware
  • Chain: Bitcoin
  • Reported: 2026-06-02
  • Last updated: 2026-06-02

Bitcoin addresses observed for the Medusalocker ransomware group. 20 wallet(s) identified by ransomlook.io's open-source ransomware intelligence platform. These addresses have been associated with ransom payment collection by the Medusalocker group. All addresses verified as standalone wallets (not TXID substrings). Source: ransomlook.io (open ransomware intelligence) via.

Ransomware - Medusalocker - 367 BTC Addresses

  • Scam type: Ransomware
  • Chain: Bitcoin
  • Reported: 2026-06-02
  • Last updated: 2026-06-02

Bitcoin addresses observed for the Medusalocker ransomware group. 367 wallet(s) identified by ransomlook.io's open-source ransomware intelligence platform. These addresses have been associated with ransom payment collection by the Medusalocker group. Source: ransomlook.io (open ransomware intelligence) via.

MedusaLocker Ransomware Payment Address

  • Scam type: Ransomware
  • Chain: Bitcoin
  • Reported: 2026-04-22
  • Last updated: 2026-04-22

Bitcoin address used by MedusaLocker ransomware to collect ransom payments from victims. Verified with 388 confirmed on-chain transaction(s) totaling $1,194,661.14 USD. Source: Cable, Jack. (2024). Ransomwhere: A Crowdsourced Ransomware Payment Dataset (1.1.0) [Data set]. Zenodo. https://doi.org/10.5281/zenodo.6512122

Report a crypto scam · How to report a crypto scam