Ransomware Payments Drop to $820M in 2025 Despite Record Attacks

Ransomware payments fell to approximately $820 million in 2025, even as the total number of attacks reached record highs, according to data from Chainalysis.

The decline marks a notable shift in the economics of cybercrime, suggesting that while attacks are increasing, fewer victims are choosing, or managing, to pay.

Annual Ransomware Losses (2020–2025)

Chainalysis data shows the following trend:

• 2020: $997 million
• 2021: $1.086 billion
• 2022: $637 million
• 2023: $1.23 billion (peak)
• 2024: $892 million
• 2025: $820 million

After peaking in 2023 at $1.23 billion, ransomware-related payments have now declined for two consecutive years.

Why Payments Are Falling

The drop in payments despite rising attack volume may point to several structural changes:

• Stronger cybersecurity defenses and improved backup systems
• Greater law enforcement coordination and wallet tracking
• Sanctions and regulatory pressure on ransomware-linked crypto addresses
• Companies refusing to pay, even at the cost of operational disruption

Blockchain analytics has also made it increasingly difficult for ransomware groups to cash out anonymously at scale.

On-chain Investigator Accuses Axiom Exchange Staff of Insider Wallet Abuse

A Changing Threat Landscape

While total payments are down, the surge in attack attempts suggests that ransomware groups are adapting. Instead of relying on fewer, large payouts, some operators appear to be increasing volume and targeting smaller organizations.

The data indicates that the business model is under pressure, but far from disappearing.

In short: more attacks, less revenue per year.

That shift could signal a gradual erosion of profitability in large-scale ransomware operations, even as the threat itself remains persistent.

The post Ransomware Payments Drop to $820M in 2025 Despite Record Attacks appeared first on ETHNews.