The 2025 Crypto Crime Report by Chainalysis demonstrates a 35% decline in ransomware payments since 2024 reduced them from $1.25 billion to $813 million. The biggest annual decline in the last three years occurs despite ransomware payments starting strong at the beginning of 2024.
Victim Response and Payment Trends
The number of attacks grew while the rate at which victims paid went down dramatically. The percentage of targets who paid ransom stood at 30% while other victims resolved their situations by using decryption tools or restoring backups. The ransom amounts paid by victims fluctuated between $150,000 and $250,000 but remained fifty-three percent less than what criminals initially asked for.
Law Enforcement Impact
The decline occurred because international cooperation and law enforcement efforts became stronger. German authorities disrupted Russia-based Cryptex through sanctions while simultaneously seizing 47 Russian-language no-KYC crypto exchanges in their territory.
Changing Criminal Tactics
The shutdowns of traditional mixing services such as Tornado Cash forced criminals to adopt alternative methods. Criminals started using cross-chain bridges to transfer their funds while also extending the time they kept their money in personal wallets. Centralized exchanges continued to be crucial for ransomware-related transactions while processing 39% of the total amount involved.
Key Revenue Decline
Ransomware revenue experienced a drastic decrease because law enforcement began executing more effectively and victims modified their responses. Criminals’ method adaptations do not diminish the permanent changes that seem to be taking hold in the ransomware industry because of enhanced regulatory oversight and victim resistance.
