Razy ransomware payment address 1F1tAaz5x1… ($3,488,678 received)

  • Scam type: Ransomware
  • Chain: Bitcoin
  • Reported: 2026-10-15
  • Last updated: 2026-10-17

Ransomware payment address attributed to the Razy ransomware family by Ransomwhere (crowdsourced ransomware payment tracker, ransomwhe.re). Bitcoin address 1F1tAaz5x1HUXrCNLbtMDqcw6o5GNn4xqX received 1787 payment transaction(s) totalling 29679.59947496 BTC (~$3,488,678 USD at time of payment per Ransomwhere), between 2013-10-02 and 2021-09-10 (UTC). One report per payment address; no victim information is included. Source: api.ransomwhe.re/export (fetched 2026-10-14); explorer: https://mempool.space/address/1F1tAaz5x1HUXrCNLbtMDqcw6o5GNn4xqX. Confidence: Medium — single crowdsourced source…

Other addresses in this report: 1F1tAaz5x1HUXrCNLbtMDqcw6o5GNn4xqX

Report a crypto scam · How to report a crypto scam