... but not the form of policy they actually have. Except for payments to specifically sanctioned organizations, the policy is "we'd really rather you didn't d

... but not the form of policy they actually have. Except for payments to specifically sanctioned organizations, the policy is "we'd really rather you didn't do that, but whatever". The specific sanctions don't cover most of the groups, either, and even when they do cover the group who got paid, you can't necessarily prove the people who got paid were the ones on the list. And there may be a scienter requirement even then; I don't know. Making a list of specific criminals you can't pay is just stupid. No ransoms, ever, period, or it's da slammah.