Wrench Attacks Explode Across France

France’s “crypto boom” is now being policed with handcuffs and hospital visits as kidnappers skip hacking and go straight for families.

Quick Take

A confidential French police memo counted 40+ crypto-linked kidnappings from mid-2023 through the end of 2025, contradicting viral claims that the total is “this year” alone.
France is leading the world in so-called “wrench attacks,” where criminals use physical coercion to force crypto transfers rather than breaking digital security.
Investigators say overseas coordinators often direct the crimes while local recruits—frequently teenagers—carry out surveillance, abductions, and home invasions.
High-profile cases involving executives and a magistrate show how quickly personal wealth signals can become personal security risks.

What the French police memo actually says—and why the timeline matters

French media reporting tied to a confidential police memo from SIRASCO describes more than 40 cryptocurrency-linked kidnappings in France between July 2023 and December 2025. That detail matters because public chatter often frames the figure as “this year,” even though separate reporting indicates early 2026 has seen roughly 8 to 11 known cases by mid-February. The trend is still alarming, but precision is essential for judging scale, response, and accountability.

The crimes are commonly described as “wrench attacks,” a term of art in the crypto world meaning attackers use violence or threats to extract wallet passwords or compel transfers. In other words, even perfect cybersecurity cannot protect someone forced at knifepoint to unlock a phone. The research suggests many victims are young men, roughly 20 to 35, whose wealth is perceived as both liquid and portable, especially when luxury displays telegraph status.

How the operations reportedly work: overseas direction, local “foot soldiers”

Reporting based on the SIRASCO note describes a recurring structure: coordinators operating from abroad and using intermediaries to recruit locals who do the physical work. That pattern is significant because it changes what “crime prevention” looks like. If the organizing layer is outside France, local arrests can disrupt individual crews without fully dismantling the business model. It also helps explain why authorities have charged very young suspects, including minors, in multiple sweeps.

The most disturbing cases show the stakes. A widely cited 2025 abduction involving Ledger co-founder David Balland and his wife included a demand for a large crypto ransom and an act of mutilation reported across outlets. In early 2026, additional incidents were reported involving a home invasion targeting Binance France’s CEO and a separate kidnapping of a magistrate and her mother held for roughly 30 hours, with arrests announced afterward. Each incident reinforces the same lesson: a digital asset can create a very physical vulnerability.

France as a global hotspot: verified counts and what they imply for public policy

Independent tracking cited in the research points to France as the world’s leading hotspot for verified physical crypto attacks. One set of figures reported that France logged 19 of 72 verified global “wrench attacks” in 2025—more than double the U.S. figure—and that France accounted for 11 of 14 known global cases early in 2026. Even allowing for underreporting elsewhere, the concentration suggests criminals view France’s crypto ecosystem as target-rich and operationally accessible.

There is also an economic reality in the data: 2025 reportedly saw a 75% increase in wrench attacks globally and more than $41 million stolen, with Europe representing a sizable share. Those numbers help explain why this story is broader than tabloid crime. When property rights and personal safety are threatened, normal people change behavior—where they live, what they post online, whether they invest, and whether they trust authorities to keep pace with a rapidly changing financial landscape.

Why this story resonates beyond France: trust, security, and the limits of “paper” protections

For Americans watching from afar, the French wave of crypto kidnappings lands in a familiar place: frustration that institutions adapt slowly while ordinary people carry the risk. The research does not claim government complicity, but it does show how criminals exploit gaps—cross-border coordination, youth recruitment, and the illusion that wealth stored digitally is somehow insulated from street-level violence. That reality challenges both techno-utopian hype and the idea that regulations alone can substitute for public order.

Policy responses in France are still developing in the provided research, and the sources do not lay out a single “fix.” What is clear is that personal security is now part of financial security for crypto holders, especially those with public profiles. The lesson is uncomfortable but practical: when assets are easy to transfer and hard to reverse, criminals will test the boundaries—meaning deterrence, policing capacity, and cross-border cooperation become as important as encryption, cold storage, and compliance paperwork.