bc1qr9l0gcl0nvmngap6ueyy5gqdwvm34kdmtevjyx

Reported crypto scam address

This Bitcoin address was named in 2 public crypto scam reports: Ransomware. First reported 2026-04-22. Last updated 2026-10-17.

Cuba ransomware payment address bc1qr9l0gc… ($4,094,333 received)

  • Scam type: Ransomware
  • Chain: Bitcoin
  • Reported: 2026-10-15
  • Last updated: 2026-10-17

Ransomware payment address attributed to the Cuba ransomware family by Ransomwhere (crowdsourced ransomware payment tracker, ransomwhe.re). Bitcoin address bc1qr9l0gcl0nvmngap6ueyy5gqdwvm34kdmtevjyx received 1 payment transaction(s) totalling 71.42750245 BTC (~$4,094,333 USD at time of payment per Ransomwhere), between 2021-10-14 and 2021-10-14 (UTC). One report per payment address; no victim information is included. Source: api.ransomwhe.re/export (fetched 2026-10-14); explorer: https://mempool.space/address/bc1qr9l0gcl0nvmngap6ueyy5gqdwvm34kdmtevjyx. Confidence: Medium — single crowdsourced…

Cuba Ransomware Payment Address

  • Scam type: Ransomware
  • Chain: Bitcoin
  • Reported: 2026-04-22
  • Last updated: 2026-04-22

Bitcoin address used by Cuba ransomware to collect ransom payments from victims. Verified with 1 confirmed on-chain transaction(s) totaling $4,094,333.26 USD. Source: Cable, Jack. (2024). Ransomwhere: A Crowdsourced Ransomware Payment Dataset (1.1.0) [Data set]. Zenodo. https://doi.org/10.5281/zenodo.6512122

Report a crypto scam · How to report a crypto scam