Netwalker (Mailto) ransomware payment address bc1q98z5gc… ($5,235,133 received)

  • Scam type: Ransomware
  • Chain: Bitcoin
  • Reported: 2026-10-15
  • Last updated: 2026-10-17

Ransomware payment address attributed to the Netwalker (Mailto) ransomware family by Ransomwhere (crowdsourced ransomware payment tracker, ransomwhe.re). Bitcoin address bc1q98z5gcxan998h0uem0y4y4qtmm45xk4r2e5m9p received 138 payment transaction(s) totalling 649.31580419 BTC (~$5,235,133 USD at time of payment per Ransomwhere), between 2020-03-01 and 2021-05-28 (UTC). One report per payment address; no victim information is included. Source: api.ransomwhe.re/export (fetched 2026-10-14); explorer: https://mempool.space/address/bc1q98z5gcxan998h0uem0y4y4qtmm45xk4r2e5m9p. Confidence: Medium —…

Other addresses in this report: bc1q98z5gcxan998h0uem0y4y4qtmm45xk4r2e5m9p

Report a crypto scam · How to report a crypto scam