"What I will argue is that when looking at a public policy problem, the best place to create liability is where it will have the desired impact. If the goal is to stop ransomware attacks, raising the costs of paying ransoms beyond what the criminals are demanding is the best way to do that."

http://blogs.cfr.org/cyber/2016/02/29/paying-ransom-on-ranso...