France Plans New Measures to Protect Crypto Holders From Kidnappings and Wrench Attacks

A “wrench attack” involves criminals using kidnapping, assault or coercion to force cryptocurrency holders to surrender private keys or transfer digital assets. France has drawn attention because of its high concentration of such cases. After Ledger’s 2020 customer data breach, centrally stored personal information including names, telephone numbers and home addresses may have been used to target victims, highlighting the physical security risks associated with KYC requirements.

A recent report said about 70% of physical attacks involving cryptocurrency worldwide occur in France. The country has recorded 41 related kidnappings so far in 2026. Experts say past customer data breaches at companies such as Ledger have made it easier for criminal groups to identify cryptocurrency holders and their homes. The cases show that the centralized exposure of identity data collected under regulatory requirements can extend digital-asset risks to personal safety.

So-called wrench attacks use violence, including home invasions, kidnappings and extortion, to force cryptocurrency holders to surrender wallet credentials or transfer assets. Because blockchain wealth is visible and personal information can be readily collected, victims' relatives may also be targeted. The involvement of France's National Prosecutor's Office Against Organized Crime (PNACO) indicates that authorities regard the cases as part of an organized criminal network.

PNACO head Vanessa Perrée said on April 24, 2026, that specialist investigating judges at the Paris Judicial Court were examining 12 cases. A total of 88 people had been charged, including 10 minors, with 75 held in pretrial detention. After consolidating some cases, authorities found that several people were repeatedly implicated. PNACO recorded 18 similar incidents in 2024, 67 in 2025 and 47 from the start of 2026 through April 24. It did not disclose the total amount involved.

So-called wrench attacks use kidnapping, beatings or firearms to force holders to surrender their wallet keys, bypassing digital safeguards altogether. Known cases worldwide rose 75% to 72 in 2025, with France reporting more than any other country. At least 41 cases had already been recorded by April 2026, or about one every 2.5 days, underscoring how leaked identities or addresses can translate into physical danger.

On April 11, 2026, a 40-year-old crypto industry worker in Saint-Jean-de-Védas, near Montpellier, opened his door to receive a delivery. A 25-year-old suspect posing as a delivery driver forced his way inside, held the man, his wife and their children at gunpoint, and demanded the wallet's private keys. The victim seized an opportunity to grab the gun, which discharged during the struggle, but no one was injured and nothing was stolen. Investigators from the French National Gendarmerie's Montpellier unit arrested the suspect after a three-day search. Judicial authorities in Montpellier charged him with attempted armed robbery and remanded him in custody.