Mikhail Pavlovets Worked Both Sides of Ransom Demand

A ransomware negotiator named Mikhail Pavlovets spent years positioned between catastrophe and ransom payments, hired by companies under attack to communicate with criminals, talk down astronomical demands. Recover encrypted data without bleeding the business dry.

In 2024, he was convicted of doing the opposite. Pavlovets wasn't negotiating on behalf of victims—he was negotiating on behalf of the attackers, knowing their demands before the victims did and collecting commissions from both sides simultaneously.

What made this possible wasn't Pavlovets's cunning. It was the structure of the entire negotiation market. Assumes a credential system that doesn't exist and assumes victims can distinguish a legitimate negotiator from a criminal's operative through some form of verification.

But the actual business model depends on the opposite dynamic. Negotiators operate anonymously and sign non-disclosure agreements that explicitly prohibit clients from comparing notes, sharing data, or building reputation databases. Confidentiality doesn't protect legitimate negotiators—it protects the entire industry from collective scrutiny. A victim under attack cannot call other victims to ask whether their negotiator is trustworthy, cannot build a list of verified professionals. Cannot run background checks that would reveal Pavlovets's conflict of interest because the negotiator's past clients are contractually forbidden from discussing him.

Each company negotiates alone, in the dark, against an adversary who may or may not be represented by someone working against them. This is not a failure of oversight. It's a feature of the business model. The same structure exists in any market built on one-shot transactions between strangers who need immediate resolution—insurance brokers, divorce mediators, art appraisers, currency traders in emerging markets. The moment you're in crisis and can't afford to search for alternatives, the moment secrecy is non-negotiable, the moment there's no repeat business to protect reputations, the professional's incentive to serve you flips.

The question isn't whether negotiators like Pavlovets will emerge. The question is whether you're making decisions in a market where they're mathematically guaranteed to.