Ransomware Wallets — ransomware addresses

  • Scam type: Ransomware
  • Chain: Bitcoin
  • Reported: 2026-04-22
  • Last updated: 2026-04-22

Ransomware payment wallet. Source: crowdsourced ransomware wallet tracking database. Entities: smokeloader, hive, phobos. Programs: smokeloader, hive.

Other addresses in this report: 0xa2e62d43b5340e269cad0a06d4813957bc56ca31, 0xb3c7c914a058e89c0f7898d367cf8e53a2007e11, 0x9c2a7824f714955f8c76d954858276843d7a2cec, 0xc5fcebe156a1c1bb3911cf6adf966b34e7f19f03, 0x2c3b337840ced807a04352ab6dfdf993e215297f, 0xd4125b232ae209922bfef5b26a0187b5bdfcee76, 0xf9aec30a12cc47fb5677ced29149aa35e683111f and 43 more

Report a crypto scam · How to report a crypto scam