It is already illegal to pay most ransomware gangs in the USA:

https://home.treasury.gov/policy-issues/financial-sanctions/...

Better yet, add a 200% tax on top of ransom payments. That will tranfer the profits to the government. The attackers will know that the ability to pay is cut to 1/3.