Identifying opportunities to weaken the economic incentive structure behind the ransomware threat is only possible with adequate information and a clear picture of the ransomware payment ecosystem. Last year, IST and Ransomware Task Force members developed such a map, depicting the ransomware payment ecosystem and process, from attack to cash out. We then identified pieces of information produced at each point in the ransomware payment process, and entities with visibility into that information. We intend to present the payment map and paint a clear picture of the people, processes, and information involved in ransomware payments. We will then present the findings from our forthcoming mini-pilot revealing possible friction points and specifying key barriers to and enablers of ransomware attacks. We intend to illuminate where attendees may be able to change the economic incentive structure around ransomware. The implications of this effort will reach beyond the ransomware ecosystem, and highlight the benefits of mapping our understanding of available information for a range of cyber and other national security threats, especially those involving illicit uses of cryptocurrency.