Bitcoin ransom is a payment demand in which an attacker asks for money in Bitcoin or another cryptocurrency. Criminals prefer it because cryptocurrency transfers are easier to request across borders and are harder to reverse than card payments or bank transfers. A ransom demand may be paired with threats such as data leakage, account abuse, device encryption, or fabricated evidence meant to create panic.
In cyber security, Bitcoin ransom matters because the payment flow itself is part of the attack. The attacker uses urgency, secrecy, and a time limit to pressure the target before verification is possible. Defenders look for these patterns in phishing, sextortion, and extortion emails, then advise victims not to pay immediately, to preserve messages as evidence, and to report the attempt. The goal is to stop the scam from turning fear into fast, untraceable payment.