BlacklistChain
Home › Ransomware wallets › Netwalker (Mailto)

Netwalker (Mailto) ransomware Bitcoin addresses

NetWalker (also called Mailto) was ransomware-as-a-service from 2019 that hit hospitals and schools. The US Justice Department announced a coordinated action against it in January 2021.

66wallets on the register
690transactions recorded
Nov 2019 – Jan 2026first to latest transaction
9wallets still holding BTC (40.2383 BTC)

If a ransom note asked you to pay one of these addresses, report the attack to the police before paying anyone. Paying a sanctioned group can be illegal. Check any address.

All

AddressTransactionsFirst seenLast seen
bc1q98z5gcxan998h0uem0y4y4qtmm45xk4r2e5m9p140Jul 2020Feb 2023
1DgLhGeJfoUkkXdYNVf7SNckX5ST5taPVo126Jul 2020Sep 2024
1LgA6afU8BNTC9bwwHu6zN2RgJEMspHQbM51Jul 2020Oct 2020
1McnyaGV4yaS7AQo97G8AHLFx94WzA751U34Jun 2020Aug 2020
1HNZEpCrS2uBSNXb4TqZ76fD4VkyMzD5dL25May 2020May 2020
1DTE5x3Rjn2q75HjX6hiu8CQwEGqe6wQ4s17Mar 2020Jun 2020
1C9wdSqXngQSMabJWRAn9jSzThLqmVBz2815Apr 2020Apr 2020
bc1q8r398v5v4aw0a6cah3ddd8nngq2nfqr40xpg3q15Jun 2020Jul 2020
1NJFpoLF5WsKfcWicctEZ3ykhBKoooQcLi13Apr 2020May 2020
bc1qcwadmycvzen2qkjnge2hhgtgulerssy56pqx9k13Apr 2020Apr 2020
bc1qg4l65gt8pkfu9c62d5dz4dlzgu8g7qp5257luw13Apr 2020May 2020
bc1qxkz0nsrqfat833fq9gh7ypk0qcvrgqku679cz013Jul 2020Jan 2026
1Kcwserp7KqSMYBDe6Ra5atHP6xWbQPBnD12Jul 2020Aug 2020
13msidWLjvS6HUAmQcDj98nLno4BzZusXT11May 2020Aug 2020
bc1q8zkuuwu30ajagzcl4au9fnvc8tfddjcpjxxqt611Jun 2020Jul 2020
12bG5T6kvj9iWPzCxTjPcWipKaRDLLXZBL8Nov 2019Jun 2020
1C7FeXMf18mGrcF59DJTkmxnRfkKeG1KFZ8Jun 2020Aug 2020
bc1qqs4px4km9xlal0aquuucxeuj2m30llj7w9jwpv8Jul 2020Aug 2020
bc1qx0ngr555gepwqutxuwkdxdcfjwwdhgtfmyaxzt8Jul 2020Jan 2026
13DFuTYQhKQyj7m5pNzWrySsNUnFakcojp7Jul 2020Oct 2023
bc1q9dd8k6jtdsc7yrefk0ythmhpensn22m26ge7rl7Apr 2020May 2020
1GmoNbUmxdYZyb97wFAVtQjq7xt2Km3Qb26May 2020May 2020
3MRrmDQZHJokDJxjnR4SmFA8V6ZAec6dAv6May 2020Jun 2020
bc1qdfqazmrxermtsefgeskc2e2jngmkx0hvl55hek6Jul 2020Jul 2020
bc1qdhlw8a6afds8933szg0ry3qedej9ef9nhcs4dw6May 2020Jun 2020
bc1qhnwufcw2929kfh36xn6djscxfzs5lh5eassujw6May 2020Jun 2020
bc1qulr3z39ue858wvcp5w8q2dugafz430j46q32qj6May 2020Aug 2020
19nwTbrjLRRjxXam8NxExib8uWuuA78Cu35Jun 2020Sep 2024
18x7PieotZcmMwYSaYbbV8X3zBMentd5Fu4May 2020May 2020
1GuPsTqJjib8t2idTaLwa95kRLtiWhrE5A4Jun 2020Jun 2020
1H2Spjde9d6YaoBfJ4LYmFWxDsgmxf92Ln4May 2020May 2020
bc1q4qdsh3vveypwekxwpgeruh28revh62af7yz8ph4Mar 2020Apr 2020
bc1q5fx98qud4htkg7alr0eve7aq34k9m4rc2jqwtr4Jun 2020Jul 2020
bc1qsypgqumac6y643we80xxst35acpmcal2cv34cn4Jul 2020Jan 2026
13i19sWBpe5Z6P6HHigNFW1ebeWhXzmPfS3Jul 2020Oct 2023
17TMc2UkVRSga2yYvuxSD9Q1XyB2EPRjTF3Apr 2020Jul 2020
1E4s5oWDH2KqjR5S5aywR3oThHrZT9s4Ui3Jun 2020Jun 2020
1QDTerJPMMdPnbvWr8R5p4SYTPbQLzk8vj3Jun 2020Jun 2020
bc1qfhw6tzkj0sgh0lqswadtvzf9z0k0qmz9vzv4z43Jul 2020Jul 2020
bc1qx35wa2reueyf2jmhq3ffdv5vmqn5s8nm6flp9n3Apr 2020Apr 2020
14fHcTQx7wwcbMa5opGqdJXTSEqTGRtoxS2May 2020May 2020
1AHod4t1vpW9aLxQM4CEcj5cxdCmQnpgLD2May 2020Sep 2020
1GuR4EA1g9yFPP13QjnqjZscGdyyvCN4WZ2Jun 2020Jun 2020
1MTm1qxzVLvGPMnQ5vWPXGrNapC2XPyGAU2Jun 2020Jun 2020
1MshYtvKZNbKr4RQgynAkAJQcWcrwaaZQF2Jul 2020Jul 2020
35DU1XS6puwJXGUwWKhTyTD2LjuP6H5HSt2Jun 2020Jun 2020
35XP3iS53jgE4K7atFwmjoKrxy5hC6dbKp2May 2020Jun 2020
39vtf4inwt1Beg6Gj1iN6kgaG8A9NN4hBo2Jul 2020Jul 2020
3ELWptyxydCYekCuLwZPCDC79vLzvvXDv42May 2020May 2020
3KyeCr9QA56pAjEpUPrPVH5E9FuvPPcXuk2Jul 2020Jul 2020
3P1nVcu7iwgAL6F5CJuQBwrgBwt9tqVaFi2Jun 2020Jun 2020
bc1q2n664ugqjxcalnk5ts4qraz47plvyvwpeyryat2Jun 2020Jun 2020
bc1q7aghpv8l4gwha7sfzrvx0v5m5y9rh4h2skgvu52Jul 2020Jul 2020
bc1qaktxa75kx8xglvmr5pgvruj0rjmvgxyaxxypfj2May 2020Jun 2020
bc1qas4q5ursafmagzkvhs3v6sl4t98v9tnr8a75rg2Jun 2020Jun 2020
bc1qc0xzda5wurdz2yhurdch8jvz6natg2w86749fc2May 2020May 2020
bc1qdaw8xq5ymr7u8mvzq26zmq0fpqtefgnj76fgv32Apr 2020Apr 2020
bc1qeqa7cpzajpqcvne0vm6ql3m5klye47ws6zh2qt2May 2020Jun 2020
bc1qf25ayzqsranmvnc8l72s6mdqvkvlr6mqrfcqg82May 2020Jun 2020
bc1qheumh307l9jf2s8aw7wgztkfjkjrfsn8pnhcww2Apr 2020Apr 2020
bc1qj9r03antk5ynmgucd0gmrnf0ufu7mq05fxgwxa2May 2020May 2020
bc1qkghe3wha87qpcx3mdedt2ux5atguearhj8mvan2Jul 2020Aug 2020
bc1qq2ju8mz5whsu6g08t2rgtq8c0jnnj6s90zd2792Jul 2020Jul 2020
bc1qsmehmvycn97hsl3l8mjavg8u44ymvmutmhzvtx2Apr 2020Apr 2020
bc1qxay7nulfvjtz53p6erdajrfzdwtwc7vhah25c22May 2020May 2020
bc1qzf593zdg0fw7kmxrp4vgmx96zhsdee5khrftcj2Apr 2020Apr 2020

All ransomware families · What the ransomware data shows