What To Do If You Experience Ransomware


Reporting any ransomware attack (whether it was successful or not) is important to help the FBI stop the fraudsters from inflicting more damage worldwide. If you experience a ransomware or other cybersecurity fraud attack, make sure to include this information in your report to the FBI’s Internet Crime Complaint Center:

  • Victim's name, address, telephone, email, and company information
  • Date of attack
  • Circumstances of attack, such as clicking on an email attachment at the time the device shut down
  • Any ransom demand details, including Bitcoin wallet address information
  • Specifics about any money you paid
  • Any information you gather about the perpetrator, such as address, phone, email, website, IP address, email header information
  • Financial transaction information (e.g., account information, transaction date and amount, who received the money)
  • Any information you think can help the FBI, including overall losses you or your business sustained