Ransoming

Ransoming is the act of demanding payment, usually called a ransom, in exchange for the release of a person or property, or the restoration of access to information or services. The term covers both traditional crimes such as kidnapping and modern forms such as cyber extortion. The practice is generally illegal in many jurisdictions and is prosecuted as extortion or kidnapping.

Historically, ransom demands have been issued by kidnappers seeking release of hostages, captives, or seized property, sometimes with deadlines and threats of harm. Ransomware and other types of extortion have expanded the concept to include digital assets, where criminals demand payment to unlock encrypted data or prevent the public disclosure of stolen information. Payments are often sought in cash or cryptocurrency.

Technological developments have given rise to cyber ransoming, where attackers encrypt data and demand payment for a decryption key, or exfiltrate data and threaten disclosure. This double-extortion tactic heightens pressure on victims. Ransom demands typically specify payment methods, deadlines, and contact channels, and attackers may provide a way to verify decryption after payment.

Legal and policy responses to ransoming vary by jurisdiction. Many countries prohibit or discourage ransom payments, and some sanctions regimes restrict payments to designated individuals or groups. Law enforcement agencies and cybersecurity professionals generally advise against paying, arguing that payments encourage criminal activity and do not guarantee release. Prevention relies on risk assessment, backups, access controls, and incident response planning.