At least in principal, with a service like Western Union, an actual human or other KYC’d entity needs to collect the money at the other end. If you run a $100M ransomware campaign, a very enthusiastic prosecutor is fairly likely to arrange to arrest people well before $100M gets cashed out, and without perfect opsec, you have a problem.
And Western Union respects sanctions.