French Couple Held at Home as Crypto Extortion Cases Surge

A “wrench attack” involves criminals using kidnapping, assault or coercion to force cryptocurrency holders to surrender private keys or transfer digital assets. France has drawn attention because of its high concentration of such cases. After Ledger’s 2020 customer data breach, centrally stored personal information including names, telephone numbers and home addresses may have been used to target victims, highlighting the physical security risks associated with KYC requirements.

A recent report said about 70% of physical attacks involving cryptocurrency worldwide occur in France. The country has recorded 41 related kidnappings so far in 2026. Experts say past customer data breaches at companies such as Ledger have made it easier for criminal groups to identify cryptocurrency holders and their homes. The cases show that the centralized exposure of identity data collected under regulatory requirements can extend digital-asset risks to personal safety.

So-called wrench attacks use kidnapping, beatings or firearms to force holders to surrender their wallet keys, bypassing digital safeguards altogether. Known cases worldwide rose 75% to 72 in 2025, with France reporting more than any other country. At least 41 cases had already been recorded by April 2026, or about one every 2.5 days, underscoring how leaked identities or addresses can translate into physical danger.

On April 11, 2026, a 40-year-old crypto industry worker in Saint-Jean-de-Védas, near Montpellier, opened his door to receive a delivery. A 25-year-old suspect posing as a delivery driver forced his way inside, held the man, his wife and their children at gunpoint, and demanded the wallet's private keys. The victim seized an opportunity to grab the gun, which discharged during the struggle, but no one was injured and nothing was stolen. Investigators from the French National Gendarmerie's Montpellier unit arrested the suspect after a three-day search. Judicial authorities in Montpellier charged him with attempted armed robbery and remanded him in custody.

In a crypto "wrench attack," criminals use kidnapping, beatings or armed threats to force holders to transfer funds instead of hacking their wallets. Bitcoin transactions are fast and generally irreversible, exposing holders of self-custodied assets to physical security risks. Such kidnappings and extortion have increased in France in recent years, and the case underscores how digital safeguards cannot prevent physical coercion.

On the morning of March 9, 2026, three men posing as police officers broke into a couple's home in Le Chesnay-Rocquencourt, west of Paris. At knifepoint, they forced the husband to transfer more than 900,000 euros, about $1 million, in Bitcoin, then tied him up, injured both victims and fled in a white van. The Versailles prosecutor's office has assigned the anti-gang brigade to investigate organized armed robbery, unlawful confinement and criminal conspiracy.