All they would do is hire a company to "decrypt" who just pays the ransom on the clients behalf.