Delay, delay, delay tactic is the best. Learn exactly what they want and how deep into your systems they are. That also will buy you time to get your systems potentially back up and running again. It's amazing that criminal hackers have quotas just like the rest of us. The suggestion being that ransomware criminals themselves are part of very highly organized gangs.