'Punishing the victims': Would banning ransom payments stop