An analysis of well-known extortion groups and their cryptocurrency transactions reveals the answer.