Escrow is a payment setup in which a third party, service, or platform holds funds until both sides of a transaction have completed their part. In legitimate commerce, escrow helps reduce fraud by making sure a buyer does not lose money before receiving the promised product or service.
In cyber security, escrow often appears in criminal marketplaces and ransomware negotiations. Underground platforms may hold cryptocurrency in escrow to build trust between anonymous buyers and sellers, then release it after delivery. That same mechanism creates a valuable trail for defenders: escrow records, wallet movements, and platform logs can help investigators map relationships, identify operators, and reconstruct transactions. When a marketplace is seized or disrupted, escrow balances may also be frozen, cutting off revenue and exposing the network’s financial structure.