3BcVNB1MVByP8eiEv9QRwCGyUhERmxHzdX

Reported crypto scam address

This Bitcoin address was named in 7 public crypto scam reports: Ransomware, Malware. First reported 2026-04-22. Last updated 2026-10-17.

Unlabeled ransomware payment address 3BcVNB1MVB… ($2,730,842 received)

  • Scam type: Ransomware
  • Chain: Bitcoin
  • Reported: 2026-10-15
  • Last updated: 2026-10-17

Ransomware payment address attributed to the Unlabeled ransomware family by Ransomwhere (crowdsourced ransomware payment tracker, ransomwhe.re). Bitcoin address 3BcVNB1MVByP8eiEv9QRwCGyUhERmxHzdX received 2 payment transaction(s) totalling 200.00000000 BTC (~$2,730,842 USD at time of payment per Ransomwhere), between 2020-10-26 and 2020-10-27 (UTC). One report per payment address; no victim information is included. Source: api.ransomwhe.re/export (fetched 2026-10-14); explorer: https://mempool.space/address/3BcVNB1MVByP8eiEv9QRwCGyUhERmxHzdX. Confidence: LOW — Ransomwhere lists this address…

Ransomware - Unlabeled - 500 BTC Addresses (Part 1/2)

  • Scam type: Ransomware
  • Chain: Bitcoin
  • Reported: 2026-06-02
  • Last updated: 2026-06-02

Bitcoin addresses observed for the Unlabeled ransomware group. (Part 1/2) Contains 500 wallet(s) of 591 total. All addresses verified as standalone wallets (not TXID substrings). Source: ransomlook.io (open ransomware intelligence) via.

Ransomware - Unlabeled - 500 BTC Addresses (Part 1/2)

  • Scam type: Ransomware
  • Chain: Bitcoin
  • Reported: 2026-06-02
  • Last updated: 2026-06-02

Bitcoin addresses observed for the Unlabeled ransomware group. (Part 1/2) Contains 500 wallet(s) of 963 total identified by ransomlook.io's open-source ransomware intelligence platform. Source: ransomlook.io (open ransomware intelligence) via.

Ransomware Payment Wallets

  • Scam type: Malware
  • Chain: Bitcoin
  • Reported: 2026-04-25
  • Last updated: 2026-04-25

Ransomware payment addresses used by LockBit, Conti, BlackBasta, and other ransomware groups for ransom collection and extortion.database. These wallets were identified through analysis of ransomware campaigns and victim payment tracking.

Ransomware Wallets — ransomware addresses

  • Scam type: Ransomware
  • Chain: Other
  • Reported: 2026-04-22
  • Last updated: 2026-04-22

Ransomware payment wallet. Source: crowdsourced ransomware wallet tracking database. Entities: conti. Programs: conti.

Unlabeled Ransomware Payment Address

  • Scam type: Ransomware
  • Chain: Bitcoin
  • Reported: 2026-04-22
  • Last updated: 2026-04-22

Bitcoin address used by Unlabeled ransomware to collect ransom payments from victims. Verified with 2 confirmed on-chain transaction(s) totaling $2,730,841.53 USD. Source: Cable, Jack. (2024). Ransomwhere: A Crowdsourced Ransomware Payment Dataset (1.1.0) [Data set]. Zenodo. https://doi.org/10.5281/zenodo.6512122

Danchev Intel: Dancho Danchev's Blog - Mind Streams of Information Security Knowledge: Exposing

  • Scam type: Ransomware
  • Chain: Other
  • Reported: 2026-04-22
  • Last updated: 2026-04-22

Addresses from Dancho Danchev's threat intelligence blog. Post: Dancho Danchev's Blog - Mind Streams of Information Security Knowledge: Exposing the Conti Ransomwar. Source: https://ddanchev.blogspot.com/2022/02/exposing-conti-ransomware-gang-osint_28.html. Crime type: ransomware. Danchev is a longtime security researcher cataloging malware infrastructure.

Other addresses in this report: bc1q6gj8ymnjh863gmuvh2nc3462trrvzlxf2atzxn and 40 more

Report a crypto scam · How to report a crypto scam