1F1tAaz5x1HUXrCNLbtMDqcw6o5GNn4xqX

Reported crypto scam address

This Bitcoin address was named in 6 public crypto scam reports: Ransomware, Hack. First reported 2026-04-22. Last updated 2026-10-17.

Razy ransomware payment address 1F1tAaz5x1… ($3,488,678 received)

  • Scam type: Ransomware
  • Chain: Bitcoin
  • Reported: 2026-10-15
  • Last updated: 2026-10-17

Ransomware payment address attributed to the Razy ransomware family by Ransomwhere (crowdsourced ransomware payment tracker, ransomwhe.re). Bitcoin address 1F1tAaz5x1HUXrCNLbtMDqcw6o5GNn4xqX received 1787 payment transaction(s) totalling 29679.59947496 BTC (~$3,488,678 USD at time of payment per Ransomwhere), between 2013-10-02 and 2021-09-10 (UTC). One report per payment address; no victim information is included. Source: api.ransomwhe.re/export (fetched 2026-10-14); explorer: https://mempool.space/address/1F1tAaz5x1HUXrCNLbtMDqcw6o5GNn4xqX. Confidence: Medium — single crowdsourced source…

Ransomware - Razy - 3 BTC Addresses

  • Scam type: Ransomware
  • Chain: Bitcoin
  • Reported: 2026-06-02
  • Last updated: 2026-06-02

Bitcoin addresses observed for the Razy ransomware group. 3 wallet(s) identified by ransomlook.io's open-source ransomware intelligence platform. These addresses have been associated with ransom payment collection by the Razy group. All addresses verified as standalone wallets (not TXID substrings). Source: ransomlook.io (open ransomware intelligence) via.

Bitcointalk: 576337.0

  • Scam type: Hack
  • Chain: Bitcoin
  • Reported: 2026-04-27
  • Last updated: 2026-04-27

Bitcointalk Crypto Hack Discussion Thread: 576337.0 URL: https://bitcointalk.org/index.php?topic=576337.0 Summary: Last updated: November 16, 2014, 12:36:50 AM. (However, some entries remain on the backlog.)List of Bitcoin HeistsFollowing is the result of research on prior Bitcoin-related thefts. The list strives to be as accurate and informative as possible, and where possible I have provided references for assertions made within. For disputed thefts, I have applied best judgement and included the ones that were most publicly accepted.Because of the volatile nature of Bitcoin's exchange…

Bitcointalk: Crypto Hacks and Scams Discussion

  • Scam type: Hack
  • Chain: Bitcoin
  • Reported: 2026-04-27
  • Last updated: 2026-04-27

Bitcointalk Crypto Hack Discussion Thread: Crypto Hacks and Scams Discussion URL: https://bitcointalk.org/index.php?topic=576337 Summary: Last updated: November 16, 2014, 12:36:50 AM. (However, some entries remain on the backlog.)List of Bitcoin HeistsFollowing is the result of research on prior Bitcoin-related thefts. The list strives to be as accurate and informative as possible, and where possible I have provided references for assertions made within. For disputed thefts, I have applied best judgement and included the ones that were most publicly accepted.Because of the volatile nature of…

Razy Ransomware Payment Address

  • Scam type: Ransomware
  • Chain: Bitcoin
  • Reported: 2026-04-22
  • Last updated: 2026-04-22

Bitcoin address used by Razy ransomware to collect ransom payments from victims. Verified with 1787 confirmed on-chain transaction(s) totaling $3,488,678.36 USD. Source: Cable, Jack. (2024). Ransomwhere: A Crowdsourced Ransomware Payment Dataset (1.1.0) [Data set]. Zenodo. https://doi.org/10.5281/zenodo.6512122

Danchev Intel: Dancho Danchev's Blog - Mind Streams of Information Security Knowledge: Exposing

  • Scam type: Ransomware
  • Chain: Bitcoin
  • Reported: 2026-04-22
  • Last updated: 2026-04-22

Addresses from Dancho Danchev's threat intelligence blog. Post: Dancho Danchev's Blog - Mind Streams of Information Security Knowledge: Exposing a Compilation of 20. Source: https://ddanchev.blogspot.com/2022/10/exposing-compilation-of-20000.html. Crime type: ransomware. Danchev is a longtime security researcher cataloging malware infrastructure.

Report a crypto scam · How to report a crypto scam