A surge in crypto-related kidnappings has placed France under the international spotlight, prompting government officials to take action against the escalating problem. This year, the country has experienced at least 41 crypto-related kidnappings and home invasions, occurring at a rate of approximately one every two to three days.
In response, Jean-Didier Berger, Minister Delegate to the Interior Ministry, announced the development of new measures in collaboration with Interior Minister Laurent Nuñez to address the issue. A prevention platform has already garnered thousands of registrations, but authorities acknowledge that further steps are necessary as incidents continue to rise. France has become the epicenter of a global increase in wrench attacks, with crypto holders being targeted with greater frequency and violence.
According to security researchers and law enforcement data, the trend is also rising globally, with 72 verified physical coercion incidents reported in 2025, representing a 75% increase from the previous year. The term 'wrench attack' refers to the use of physical force to gain access to digital assets, often proving easier for attackers than breaking encryption. Successful wrench attacks send a message that crypto owners are vulnerable targets, and unlike traditional bank transfers, crypto transactions cannot be reversed, allowing funds to be quickly transferred across wallets and chains once a victim is coerced into authorizing a transfer.
Researchers note that attackers are shifting their approach from targeting technical vulnerabilities to building profiles of potential victims, tracking their social media activity, public appearances, and leaked datasets to identify weaknesses. The problem is exacerbated when attackers receive assistance from government officials, such as in a case where a French tax official sold sensitive data to wrench attackers. The pool of potential victims has expanded, with mid-level holders being targeted based on limited or indirect signals, and cases now include families with children being targeted alongside crypto-holding parents.
In January 2025, Ledger co-founder David Balland was kidnapped in France, and his finger was severed as part of a ransom demand before he was rescued by police. Other cases have involved prolonged captivity, torture, and waterboarding, with attackers attempting to force access to funds.
Security experts observe that both opportunistic and organized groups are involved, with signs of increasing coordination and pre-planning, including surveillance and follow-home tactics. After obtaining funds, attackers tend to move quickly, converting crypto assets into stablecoins and routing them across multiple chains, making recovery more difficult. France's role in this trend may be attributed to a combination of factors, including leaked personal data and cross-border criminal networks.
Rising asset prices have increased the potential payoff from a single attack, while improvements in digital security have reduced the effectiveness of purely technical exploits. The increase in attacks has raised questions about the risks of self-custody, a core principle of cryptocurrency, with some security experts recommending measures such as multi-signature setups, withdrawal delays, and spending limits to reduce risk by limiting access to funds under duress.