Ransomware Sanctions

Ransomware sanctions are OFAC designations targeting ransomware operators, their facilitators, and the financial infrastructure that enables ransomware payments. Since 2020, OFAC has increasingly designated ransomware groups, their cryptocurrency wallets, and exchanges that process ransom payments.

Key ransomware designations

Notable actions include the designation of Evil Corp (2019), the guidance on ransomware payments (2020 advisory), and designations of specific crypto addresses tied to ransomware campaigns. OFAC has stated that companies facilitating ransomware payments — including cybersecurity firms and insurers — may be subject to enforcement.