Two armed men broke into a French family's home and forced the occupants to execute on-the-spot cryptocurrency transfers totaling approximately $820,000 (about €750,000), according to a report published April 22 by The Block, citing local French media. That figure has not been independently verified in French-language sources; The Block's report cited unnamed local outlets, and no original French-language article confirming the exact sum was accessible at the time of writing.

The incident required no hacking or technical intrusion. The attackers used physical coercion to make victims initiate the transactions themselves, a method security researchers call a "wrench attack" because it bypasses digital security entirely by targeting the person holding the keys rather than the keys themselves.

The transfer, once confirmed on-chain, was irreversible. Unlike a bank wire, which a financial institution can freeze or reverse within hours of a fraud report, a completed blockchain transaction cannot be recalled. Investigators can trace funds on a public ledger, but attackers typically route stolen crypto through multiple wallets in quick succession, sometimes crossing chains or using mixing services to obscure the trail. No on-chain data specific to this transfer had been published at the time of writing.

France Leads a Global Surge

This incident is not isolated. France's national judicial police directorate (DNPJ) has recorded 41 crypto-linked kidnappings and sequestrations (a legal category encompassing unlawful detention that may include incidents beyond traditional home invasions) in the country between January 1 and mid-April 2026, a frequency of roughly one attack every two and a half days. That figure already exceeds the approximately 20 cases recorded across France in the prior three years combined. At the current pace, analysts at blockchain.news project more than 100 incidents by year-end.

Several high-profile cases preceded the April 22 attack. On April 13, France's elite GIGN special forces unit freed a mother and her 10-year-old son held hostage for 20 hours in Burgundy while criminals demanded a ransom from the father, a crypto entrepreneur. Four suspects were arrested in connection with the case, and the father reportedly refused to pay the ransom. Three days earlier, on April 10, five masked individuals raided a villa on France's Basque Coast in Anglet belonging to the family of a crypto investor, holding multiple generations hostage for approximately one hour before fleeing with jewelry after failing to locate their primary target. The incident illustrates a pattern that authorities say is becoming more common: attackers increasingly target family members when the primary asset holder is not present. Around the same period, near Montpellier, a fake courier pushed into a worker's home and held his family at gunpoint demanding private keys. The victim wrestled the gun away; a shot was fired but no one was injured. The suspect was arrested within 72 hours. In March, a couple in their late 50s near Versailles lost the equivalent of $1 million in Bitcoin to individuals posing as police officers.

The current escalation has roots in a watershed event. In January 2025, David Balland, a co-founder of hardware wallet company Ledger, was kidnapped and had a finger severed as part of a ransom demand. The case galvanized French authorities and the broader crypto industry, drawing sustained attention to the physical dangers facing prominent holders and marking a turning point in the frequency and boldness of attacks that followed.

Éric Larcheveque, another Ledger co-founder, has spoken forcefully about the threat. "No one should have to hide or fear for their integrity simply because they've succeeded," he said. He has described the crisis as "the Mexicanization of France."

Globally, verified wrench attacks rose 75 percent in 2025, reaching 72 confirmed cases. Physical assault incidents tied to crypto rose 250 percent year over year, according to CoinDesk reporting from February 2026. Security researcher Jameson Lopp, who maintains a public database of physical Bitcoin attacks on GitHub, has documented more than 225 verified incidents since records began, with 2025 nearly doubling the prior year's count. Roughly two-thirds of documented attacks succeed in extracting funds or assets.

"Every time a wrench attack is successful, it tells the world that crypto owners are juicy targets," Lopp said in comments reported by CoinDesk on April 19.

Phil Ariss of blockchain intelligence firm TRM Labs described a shift in criminal methodology. "We're seeing a shift from 'find a wallet' to 'hunt a person,'" Ariss told CoinDesk. "Attackers now build victim profiles using social media, public appearances, and leaked data."

The Risk Is Not Limited to Europe

Bitcoin was trading near $79,000 at the time of this incident, with a market cap between $1.33 and $1.48 trillion. At that price level, even modest holdings carry significant real-world value, a dynamic that security analysts note broadens the pool of potential targets well beyond the ultra-wealthy.

Europe accounts for roughly 40 percent of documented global wrench attacks, and France ranked first among individual countries in 2025 with 19 confirmed cases. But the underlying conditions that make France a focal point are not unique to Europe. In India, where tens of millions of people now hold crypto, public communities and social media participation create the same visibility patterns that French police say criminals exploit. Organized criminal networks have already demonstrated an appetite for targeting South Asian crypto users: TRM Labs documented the Treasure NFT Ponzi scheme, which drained an estimated $800 million from South Asian retail investors in 2025.

In Nigeria, Africa's largest crypto market, documented cases include romantic-partner-based crypto coercion and large-scale financial fraud schemes such as the CBEX collapse, which drained an estimated $250 million, illustrating that crypto holders face criminal targeting across multiple vectors.

Physical coercion incidents are likely undercounted in both regions because many victims in lower-income environments do not report crimes.

Government Response and Practical Defenses

French authorities have acknowledged the severity. Jean-Didier Berger, France's minister delegate to the interior, said at Paris Blockchain Week on April 16 that the government has launched a prevention platform that has already attracted thousands of registered users. Interior Minister Laurent Nuñez is developing a broader protective strategy, with details expected in the coming weeks. Law enforcement has moved aggressively in parallel: authorities have made more than 24 arrests in connection with crypto-related kidnappings, according to reporting by the Organized Crime and Corruption Reporting Project, targeting what investigators describe as organized crews with defined roles including spotters, logisticians, and enforcers.

Security professionals are advising holders to review several practical options regardless of geography. Multi-signature wallets with time-locks can prevent an instant coerced transfer by requiring multiple approvals or introducing a mandatory delay. Decoy wallets loaded with small amounts are increasingly discussed as a standard defensive measure. Spending limits set at the wallet level can create friction during a coercion scenario. Emerging insurance products designed to cover physical crypto theft and kidnapping represent another layer of protection, with demand for what some in the industry call "wrench attack insurance" growing, according to Fortune. Above all, security professionals urge holders to reduce public signals of wealth, including public disclosures of portfolio sizes and attendance at high-profile industry events under real names.

The pattern out of France suggests that as Bitcoin's price rises and crypto ownership becomes more widespread, physical security will matter as much as digital security for anyone whose holdings are publicly known.