Cybercrime

CyberCrime Report 2024

Ransomware, RIP-Deal and Cryptocurrencies – A Critical Assessment

The current 2024 Cybercrime Report shows a slight decline in reported offenses. At the same time, the practice at ATB.LAW indicates that ransomware, RIP deals (and crypto RIP deals), and offenses involving cryptocurrencies are continuing to grow in terms of professionalism, scale of damage, and international connectivity.

As a law firm specializing in cybercrime, cryptocurrencies, and crypto-tracing, we regularly assist victims of ransomware attacks, crypto fraud, and complex "rip deal" schemes. The official statistics paint a comparatively reassuring picture—the reality for those affected does not.

law enforcement cybercrime lawyer Vienna

Table of Contents

Cybercrime Statistics: Why the „Decline“ is Deceptive

The report mentions a decline in cybercrime and a clearance rate of approximately 31 %. At first glance, this sounds like a success. However, when considering the structure of typical cybercrime cases—international criminal groups, convoluted payment flows in cryptocurrencies, offshore platforms, and Tor and dark web infrastructure—such a high clearance rate seems, at the very least, to require further explanation.

An obvious explanation is that „solved“ statistically does not mean that perpetrators were actually identified, prosecuted, and convicted, or that assets were recovered. Rather, it can be assumed that proceedings are also counted as „solved“ which, for example,

  • be dismissed due to allegedly lacking domestic jurisdiction,

  • conducted against „unknown perpetrators“ and discontinued due to a lack of resources,

  • or simply filed away after initial investigative activities, without any further proactive measures being taken.

From the perspective of the victims, such „clarification“ is hardly comforting. The statistics suggest efficiency, while in practice neither perpetrators nor assets are frequently within reach. The reported clearance rate must therefore not be confused with actual effectiveness in terms of holding perpetrators accountable, asset recovery, or damage restitution.

Especially when it comes to ransomware, crypto fraud, and RIP deals, we at ATB.LAW regularly experience that the decisive resolution—such as through crypto tracing, international legal assistance, or civil law steps—must take place outside of traditional law enforcement logic.

Ransomware: Extortion economy based on cryptocurrencies

Ransomware remains one of the central threats in the field of cybercrime. Systems are encrypted, data is exfiltrated, and business operations are brought to a standstill. Ransom is demanded almost exclusively in cryptocurrencies—mostly in Bitcoin or Monero.

Today, so-called „double extortion“ scenarios are typical:

  1. Encryption of systems and business interruption.

  2. Threat of publication sensitive data on the attackers' leak sites if no ransom is paid.

In our review article „What is ransomware? Explanation, types, and protective measures“ Let's explain the technical and legal foundations in detail.

ATB.LAW has spent years assisting companies with ransomware incidents—from initial incident response and negotiation with the perpetrators to legally secure documentation vis-à-vis authorities, supervisory bodies, insurers, and business partners. If necessary, we also handle ransom payments.  

Of particular relevance are:

For those affected, this means: Ransomware is not purely an IT issue. It is about criminal law, money laundering, compliance, data protection, and executive liability—and thus about strategic decisions that must be accompanied by sound legal counsel.

RIP Deal and Crypto RIP Deal: old scam, new technical dimension

Classic rip deals have been known for years: supposed investors or buyers act professionally, it is about high-priced real estate or luxury transactions, and at the decisive moment, real money is exchanged for counterfeit money.

With cryptocurrencies, the scam has entered a new phase – one could speak of „RIPDeal 2.0“ speak

  • Instead of cash, today the focus is often on large amounts of crypto, such as Bitcoin or Ethereum.

  • Victims are integrated into complex financing or investment structures.

  • Non-custodial wallets, DeFi projects, or alleged „security deposits“ are used as a pretext.

  • Technical vulnerabilities in wallet apps or the handling of seed phrases and signature rights are being systematically exploited.

ATB.LAW has examined such a case in a separate practice article: „Crypto RIP DEAL: Insights into fraud schemes and successful asset recovery“.

There we show how, through close cooperation between crypto forensics, law enforcement authorities, and civil law measures, damages in the high six-figure range could be partially compensated. However, the case also confirms:

  • Without immediate protective measures, crypto assets are irretrievably distributed in seconds.

  • International legal assistance is complex, slow, and often promising in only a small fraction of cases.

  • The official cybercrime statistics inadequately capture such complex case histories.

Cryptocurrencies: Target, Instrument of Crime, and Compliance Risk

Cryptocurrencies are a central component of modern cybercrime scenarios today. They appear in three roles:

  1. target of attack
    Investors are lured into high-risk or entirely fabricated investments through fake trading platforms, fraudulent DeFi projects, or alleged „experts.“ We describe a specific case in the article „Crypto fraud: A case from Tyrol and the legal consequences“.

  2. Method of commission / Payment method

    • Ransomware demands,

    • Fraud schemes such as pig butchering,

    • and crypto RIP deals run almost exclusively on cryptocurrencies.
      The alleged anonymity is specifically exploited by perpetrator groups, while victims are confronted with account blocks, frozen exchange accounts, and proofs of origin of funds.

  3. Compliance and reputation risk
    Banks, payment service providers, and crypto platforms are reacting to the rise in crypto cybercrime with rigorous checks:

    • Proof of funds,

    • AML and KYC requirements,

    • up to the termination of business relationships.

ATB.LAW operates on two fronts: On the one hand, we support victims of crypto fraud. A particularly positive example is our documented case „Crypto fraud victim gets 8.69 Bitcoin back“. There, through targeted crypto-tracing and consistent legal action, a significant portion of the assets could be recovered. On the other hand, we assist clients in preparing comprehensive proofs of origin of funds and with crypto-tracing – such as in our articles „Source of funds in cryptocurrencies: Necessity and challenges“ and „Crypto tracing from a legal perspective: Methods and practice of digital asset tracking“.

Criminal law developments: Opportunities – but no panacea

Criminal procedural reforms, such as the Criminal Procedure Law Amendment Act 2024, are important steps in the right direction. Among other things, they create clearer rules for the seizure of cryptocurrencies and the early return of confiscated assets to victims. We provide a detailed overview in the article „Criminal Procedure Reform 2024: Strengthening Victim Rights in Online Cryptocurrency Fraud“. atb.law

These reforms improve the position of the victims. However, they do not change the fundamental problem:

  • Perpetrators operate globally,

  • Funds are moved at lightning speed across multiple platforms and chains,

  • and cybercrime is a highly professional business model for organized groups.

This maintains the discrepancy between the official clearance statistics and the actual chance of getting money back.

Conclusion: Cybercrime as a structural risk – not as an exception

Ransomware, RIP deals, and crimes involving cryptocurrencies are no longer a fringe topic, but a central component of today's cybercrime landscape.

  • From a practical standpoint, the official statistic—which reports a clearance rate of approximately 31 %—requires a great deal of explanation and conveys a false sense of security.

  • In reality, victims often face internationally operating perpetrator groups whose business model is based on crypto technology, professional money laundering, and legal gray areas.

  • Traditional law enforcement logic regularly reaches its limits here; successful cases of asset recovery are the exception rather than the rule.

For companies, high-net-worth individuals, and crypto investors, this means that cybercrime is a structural risk that must be actively managed—technically, organizationally, and legally. ATB.LAW supports you with specialized expertise at the intersection of cybercrime, cryptocurrencies, money laundering, and compliance.

For further information, the team around Roman Taudes gladly under office@atb.law or by phone at 01 39 12345 available.

 

More articles

ATB.LAW Cybercrime Lawyer

Cybercrime in Austria

Legal situation, figures, and action steps
Picture of Roman Taudes
Roman Taudes
Business Email Compromise (BEC)

Business E-Mail Compromise

Who is liable – and when does a GDPR reporting obligation apply?
Picture of Roman Taudes
Roman Taudes
Cyberattack reporting obligations NIS GDPR MAR

Reporting obligations in the event of cyber attacks

What the TeamViewer case means for Austrian companies
Picture of Roman Taudes
Roman Taudes