Crypto Kidnappings in France: 88 Charged as PNACO Faces Unprecedented Wave
📋 En bref (TL;DR)
- 88 people charged in 12 crypto kidnapping cases in France, including over 10 minors
- 135 incidents recorded since 2023: 18 in 2024, 67 in 2025, and already 47 in 2026
- France accounts for 70% of all reported crypto extortion cases worldwide
- The government announces a ministerial protection plan for digital asset holders
- Criminals recruit minors through Telegram and exploit data breaches from crypto platforms
One kidnapping every two and a half days. That is the alarming pace of “crypto-kidnappings” in France since the start of 2026. On April 24, Vanessa Perrée, head of France’s national anti-organized crime prosecution office (PNACO), revealed the full scale of the phenomenon. 88 people have now been charged, including over 10 minors. Faced with this unprecedented wave, the government is promising an action plan. But is it enough?
135 Kidnappings in Three Years: France, the Global Epicenter
The numbers are staggering. Since 2023, French law enforcement has recorded 135 kidnappings or attempted kidnappings linked to crypto assets. The acceleration is brutal: 18 cases in 2024, 67 in 2025, then 47 cases in just the first four months of 2026.
The PNACO (Parquet national anti-criminalité organisée), France’s national anti-organized crime prosecution office created in January 2026, now centralizes these cases. Across 12 ongoing investigations, 88 suspects have been charged. 75 of them are in pretrial detention. Prosecutor Vanessa Perrée describes a “rapidly escalating criminal phenomenon.”
France alone accounts for 70% of all reported crypto extortion cases worldwide. Globally, these physical attacks — known as “wrench attacks” — surged 75% in 2025. Losses have reached $106 million since the start of 2026.
Organized Criminal Networks Recruiting Minors
The modus operandi is now well documented. Criminals identify their targets through data breaches from crypto platforms. These databases are cross-referenced with public records to pinpoint wealthy crypto holders.
Alarmingly, over 10 minors are among the 88 people charged. These young individuals are recruited through Telegram channels as “operational soldiers.” They take part directly in the kidnappings and acts of violence. The charges are severe: kidnapping as part of an organized gang, extortion, and money laundering.
Pavel Durov, founder of Telegram, even responded by claiming that “French tax officials are selling data to criminals.” A serious accusation that illustrates the prevailing climate of distrust.
High-Profile Cases: From the Ledger Co-Founder to Kidnapped Couples
The most publicized case remains the kidnapping of David Balland, co-founder of Ledger, in January 2025. He and his partner were held captive by an armed commando. The case highlighted the vulnerability of crypto entrepreneurs — even those specializing in security.
In November 2025, a couple was kidnapped in Challes-les-Eaux (Savoie region). Three suspects, aged 25 to 30 and with prior convictions, extorted €8 million in cryptocurrency under duress. The investigation was led by the Chambéry research unit and the UNPJ.
A month later, in Dompierre-sur-Mer (Charente-Maritime), another couple suffered the same fate. Three masked men held them captive for several hours. Links were established with the Savoie case. In some incidents reported in 2025, the kidnappers went as far as mutilating their victims to obtain private keys.
Government Announces Action Plan to Protect Crypto Holders
Faced with this crisis, the government has responded. Jean-Didier Berger, France’s Deputy Interior Minister, announced at Paris Blockchain Week a “ministerial plan for the security of digital asset holders.” The plan will mobilize all domestic security forces.
A prevention platform for digital asset holders has already been launched. It recorded thousands of sign-ups within days. Law enforcement now uses blockchain analysis to trace ransom payments.
On-chain investigator ZachXBT helped freeze $800,000 in funds following the kidnapping of a French content creator’s father. Binance’s security team assisted in tracing payments on the blockchain.
DAC8 and Data Leaks: A Vicious Circle?
The paradox is cruel. The EU’s DAC8 directive — which requires crypto platforms to collect sensitive user data for tax reporting — could inadvertently create new targets. The more comprehensive the databases, the more valuable they become to criminals.
Data breaches from exchanges like Coinbase have already been exploited. Criminals cross-reference this information with social media and public records. Flaunting wealth on social media is a major risk factor.
To stay safe, experts recommend never publicly disclosing your crypto holdings, using separate wallets, and limiting personal information on platforms. Discretion remains the best defense.
A Threat That Extends Beyond France
This phenomenon is not limited to France. Globally, wrench attacks reached 72 verified cases in 2025 according to CertiK. Losses doubled compared to 2024, reaching $40 million. In 2026, that figure has already been multiplied by 2.5.
The creation of PNACO and the government action plan mark a turning point. But the race between criminals and authorities has only just begun. The decentralized nature of cryptocurrency, which makes transactions irreversible, complicates fund recovery. Only a combined approach — prevention, blockchain tracing, and international cooperation — can stem this tide.
Glossary
- Crypto assets: digital assets based on blockchain technology, including cryptocurrencies such as Bitcoin and Ethereum
- Wrench attack: a physical attack aimed at forcing someone to transfer their cryptocurrency under duress or violence
- Telegram: an encrypted messaging app used by millions of people, sometimes exploited for criminal activity
- Ledger: a French company that manufactures hardware wallets for securing cryptocurrency offline
- Blockchain: a decentralized digital ledger that records all transactions transparently and immutably
- Wallet: a digital wallet used to store, send, and receive cryptocurrency
Frequently Asked Questions
Why is France so heavily targeted by crypto kidnappings?
France accounts for 70% of all reported cases worldwide. This is due to a combination of massive data breaches, high crypto adoption rates, and a visible ecosystem of crypto entrepreneurs. Learn more about crypto risks
How do criminals identify their victims?
They cross-reference data leaks from crypto platforms with social media profiles and public records. Flaunting wealth online makes it significantly easier for criminals to spot targets.
What is PNACO?
PNACO (Parquet national anti-criminalité organisée) is France’s national anti-organized crime prosecution office, created in January 2026 to centralize investigations into organized crime. It is headed by prosecutor Vanessa Perrée.
How can you protect your cryptocurrency against physical attacks?
Never publicly disclose your holdings, use separate wallets with limited amounts, enable multi-factor authentication, and minimize personal information on platforms. Learn how to secure your crypto
Does the EU's DAC8 directive increase the risk?
The EU directive requires platforms to collect more personal data for tax reporting. If these databases are breached, they can create new targets for criminals.
Sources
This article is based on the following sources:
- Cryptoast – Crypto-rapt: 88 suspects charged, PNACO mobilizes
- Journal du Coin – Bitcoin or your life: 88 indictments in France’s crypto kidnapping wave
- Franceinfo – 135 incidents recorded since 2023 according to PNACO
- Blockonomi – France’s Crypto Crisis: 41 Kidnappings in 100 Days
- Blockchain News – France Tackles Crypto Kidnapping Crisis After 41 Attacks
How to cite this article:
Fibo Crypto. (2026). Crypto Kidnappings in France: 88 Charged as PNACO Faces Unprecedented Wave. Retrieved from https://fibo-crypto.fr/en/blog/crypto-kidnappings-france-88-charged-pnaco
The simplest way to buy, swap and manage your crypto
Join the first users and get priority access. No seed phrase, fees 3.5x lower, built-in DeFi yield.
Get early access →
