Arguments Against Criminalizing Ransomware Payments

The goal is to effectively end ransomware as a significant cybersecurity risk for everyone. In exploring the different strategic options, one path has emerged superior, in which the flow of money to the ransomware attackers is essentially stopped. The only way to make that happen consistently is to compel the victims to not pay by making it a criminal act. However, not everyone agrees.

In my discussions with many experts across a range of disciplines, the same arguments would emerge and be debated. This is an exhaustive list of those arguments and the discussions that continue to support the premise that criminalizing ransomware payments is the best option.

In this video I discuss and address the most common arguments against criminalizing ransomware payments, in the hope we can come to a consensus for what may be the best path forward to end ransomware.

Argument Jump Points:

• 11:03 #1 — Not possible to enact such a law
• 12:48 #2 — Can’t enforce such a law