370
McCoy explained that despite having the ability to check for activity connected to a specific payment address , doing so would effectively " start the clock " and potentially cause victims to either pay a double ransom or lose the opportunity to recover their files altogether .
 ransom: pay a double ransom
Please tell me event type and its trigger word from given type options. Output format is "type: trigger".  Option: phishing, data breach, ransom, discover vulnerability, patch vulnerability 
Text: {0} 
Answer:
 ransom: pay a double ransom