Ransomware Payments Topped $800 Million in 2025: Chainalysis
The Defiant
by Denis OmelchenkoFebruary 26, 2026
AI-Generated Deep Dive Summary
Ransomware-related cryptocurrency payments reached $800 million in 2025, marking a significant yet stagnating figure despite an increase in both attack frequency and ransom demands. According to Chainalysis data, while total on-chain payments dropped by about 8% compared to the previous year, reaching roughly $820 million, the number of claimed attacks surged by 50%, hitting record levels. This shift highlights a concerning trend: although fewer victims paid up last year, those who did faced astronomically higher ransom demands. The median ransom payment jumped 368% year-over-year, skyrocketing from around $12,700 in 2024 to nearly $60,000 in 2025.
This surge in individual ransom amounts reflects a strategic evolution in cyberattacks. Attackers are increasingly targeting high-value victims, such as larger organizations or critical infrastructure, to maximize their returns. The data also underscores the growing sophistication of ransomware operations, with groups employing more effective encryption and extortion techniques. Despite the rise in attacks, the overall revenue for hackers remained relatively flat due to a decline in smaller payments, suggesting that fewer victims are willing or able to meet exorbitant demands.
For those interested in crypto and decentralized finance (DeFi), this trend carries significant implications. The reliance on cryptocurrency for ransom payments has become a double-edged sword—it provides attackers with a pseudonymous
Verticals
cryptodefi
Originally published on The Defiant on 2/26/2026