Ransomware attackers are increasingly using physical and psychological intimidation tactics — such as sending threatening packages, photos of victims' children's schools, swatting calls, and even abduction threats — to pressure organisations into paying extortion demands. According to a Semperis report, 37% of ransomware attacks involved such threats, with over half of attackers following through on them. Security experts advise victims to stand firm, involve law enforcement early, and never pay, as doing so often leads to repeat attacks.