Federal Legislation to prohibit paying ransom for crypto-ransomware attacks?

Crypto Ransomware seems to be a growing problem. I believe it should be a federal crime with a fine of $1 Million USD (or equivalent) for paying the criminals. I think there should be a court to make exceptions.

What are your thoughts?