Crypto Kidnappings in France: First Convictions and Criminal Network Exposed
📋 En bref (TL;DR)
- First convictions : 9 and 5 years in prison in Amiens, 10 months to 2 years in Paris — French courts are beginning to hand down sentences for crypto-related kidnappings
- Criminal network exposed : a judge consolidated three cases, revealing 45 suspects charged and a structured organization with masterminds, recruiters, and enforcers
- Alarming pace : one crypto-related attack every 5 days in France since January 2026, with at least 13 cases in three months
- High-profile victims : David Balland (Ledger co-founder), the father of a crypto entrepreneur (finger severed), the family of Paymium’s CEO
- Government response : Interior Minister’s 4-measure security plan, address anonymization decree, GIGN and BRI mobilization
- Aggravating factor : the Waltio data breach (50,000 clients) reportedly helped criminals target several victims
French courts strike for the first time
On April 1, 2026, a Paris criminal court sentenced three men from Garges-lès-Gonesse (Val-d’Oise) to 10 months, 18 months, and 2 years in prison. On January 19, at 5 AM in Paris’s 16th arrondissement, four individuals — equipped with balaclavas, gloves, knives, and zip ties — were preparing to kidnap a couple of cryptocurrency investors. The building’s concierge, who had found a knife hidden in a flowerpot, alerted the police. Officers arrived within ten minutes, arresting two suspects in a stolen vehicle.
A few weeks earlier, on February 23, the Amiens court sentenced two men to 9 and 5 years in prison for holding an entire family hostage — including two young children — in the Somme department on Halloween night 2025. Their goal: to force the father to transfer his crypto under threats of “cutting off your fingers.”
These convictions, among the first for cryptocurrency-motivated kidnappings in France, send a signal. But given the scale of the phenomenon, they remain modest.
An organized criminal network behind the attacks
On March 27, 2026, an investigating judge made a critical decision: consolidating three separate proceedings into a single investigation. The finding: a single criminal organization was behind several attacks committed in May 2025.
The three consolidated cases:
- May 1, 2025 — Paris: a man kidnapped by four masked individuals while walking his dog. The real target: his son, a crypto millionaire entrepreneur. Ransom of 5 to 7 million euros. Finger severed when payment didn’t arrive. Freed after 60 hours by France’s elite BRI unit.
- May 13 — Paris (11th): attempted kidnapping of the pregnant daughter and grandson of Pierre Noizat, CEO of Paymium. The partner intervened, and the attackers fled.
- May 26 — Couëron (Loire-Atlantique): ten masked men arrested before they could kidnap a crypto entrepreneur and his family.
In total, 45 people have been charged in these interconnected investigations. The judge identified a pyramid structure: hidden masterminds (some abroad), recruiters, and very young enforcers — aged 16 to 23, including 6 minors — recruited through Telegram.
A disturbing acceleration in 2026
Since January 2026, the pace of attacks has accelerated further: at least 13 cases in three months, roughly one every five days.
Among the most notable:
- January 14 — Sallanches: retired couple kidnapped, 8 million euro ransom demanded from their son, fingers lacerated.
- January 25 — Voiron: 70-year-old man kidnapped, hand mutilated, 3 million euro ransom. Freed by the BRI.
- February 12 — Vaucresson/Saint-Mandé: David Princay, president of Binance France, directly targeted. Three armed men searched for his apartment (he was absent), then went to the wrong address and struck a woman with a rifle butt.
- February 5-6 — Saint-Martin-le-Vinoux: a magistrate and her mother held hostage for 30 hours. The partner has interests in a crypto startup.
- March 9 — Le Chesnay: a man forced to transfer €900,000 in Bitcoin at knifepoint.
These figures only include publicized cases. According to Jameson Lopp, a Bitcoin security researcher, approximately 70 physical attacks related to crypto were recorded worldwide in 2025 — a record, up 169% from 2024. France alone accounts for about 80% of European cases.
The founding case: the David Balland kidnapping
The case that started it all remains that of David Balland, co-founder of Ledger. On January 21, 2025, he and his partner were kidnapped from their home, separated to two different locations. The ransom: 100 BTC (approximately $10 million). When payment was delayed, a finger was severed and the video sent to relatives.
France’s elite GIGN unit intervened after 24 hours. The partner was found tied up in a car in Étampes. 160 police officers were mobilized, 10 suspects arrested. This case triggered a national awakening about the physical threat facing cryptocurrency holders.
The Waltio factor: when tax data becomes a weapon
On the night of January 21, 2026, Waltio — a platform specializing in crypto tax reporting — disclosed a data breach. The Shiny Hunters group claimed the hack of 50,000 clients, with access to email addresses, aggregated crypto balances, and 2024 tax data.
A hacker subsequently posted a message claiming to have provided the data used in at least three major kidnappings, with a total estimated haul of over $17 million. He demanded $2.5 million or threatened to reveal the robbers’ identities to police — blackmail within blackmail.
This case highlights a structural French problem: tax transparency (FICOBA database, commercial registry) combined with data breaches makes victim targeting easier than elsewhere.
The government’s response: the Retailleau plan
Under pressure, Interior Minister Bruno Retailleau met with crypto industry leaders at the Place Beauvau on May 16, 2025, announcing four measures:
- Priority access to emergency services and home security consultations by police safety officers.
- Security briefings by elite units (GIGN, RAID, BRI) for crypto entrepreneurs.
- Dual contact point: emergency line for urgencies and ComCyberMI for sector-specific support.
- Law enforcement training on crypto asset money laundering.
A decree published in August 2025 now allows business owners to conceal their personal address from the commercial registry — a common-sense measure, though voluntary and not automatic.
How to protect yourself: essential tips
The French national police sums it up in one sentence: “When it comes to crypto assets, discretion is protection.”
- Never display your gains on social media — no portfolio screenshots, no crypto-related signs of wealth.
- Use a decoy wallet: keep a wallet with a minimal amount readily accessible, and your main portfolio out of immediate reach.
- Separate your identities: don’t use the same email address for crypto exchanges and social media.
- Report your profile to local police to enable home surveillance if necessary.
- Stay informed: follow security best practices from trusted sources and community security researchers like Jameson Lopp.
The threat is real, but it shouldn’t deter responsible crypto investing. It should remind us that in this space, security extends far beyond passwords and private keys.
📚 Glossary
- Cryptocurrency: A digital currency operating on a blockchain without banking intermediaries. Bitcoin and Ethereum are the most well-known examples.
- Bitcoin (BTC): The first cryptocurrency created in 2009, often called digital gold. Its high value makes holders targets for criminals.
- Wallet: An application or physical device used to store and manage cryptocurrencies. A hardware wallet (like Ledger) stores keys offline for maximum security.
- Binance: The world’s largest cryptocurrency exchange. Its France president, David Princay, was targeted in a kidnapping attempt in February 2026.
- Paymium: France’s oldest Bitcoin exchange, founded by Pierre Noizat in 2011. His family was targeted in May 2025.
- Waltio: A French crypto tax reporting platform, victim of a data breach in January 2026 that exposed the balances of 50,000 users.
Frequently Asked Questions
How many crypto-related kidnappings have occurred in France?
Over 30 cases have been recorded since 2017, with a dramatic acceleration: 20 cases in 2025 and at least 13 in just three months in early 2026 — roughly one every five days. France accounts for approximately 80% of European cases.
What sentences do crypto kidnapping perpetrators face?
Kidnapping carries up to 20 years in prison in France. The first effective sentences range from 10 months (thwarted attempt, Paris) to 9 years (hostage-taking with violence, Amiens). The murder of Simon Arthuis in 2021 resulted in a 30-year sentence.
How do criminals identify their victims?
Multiple sources are exploited: social media (displaying gains), the commercial registry (business owners’ addresses), the FICOBA tax database, and data breaches like Waltio’s in January 2026, which exposed the crypto balances of 50,000 clients.
How can you protect yourself if you hold cryptocurrency?
Police recommend absolute discretion: never display your gains, use a decoy wallet with a minimal balance, separate crypto and personal identities, and report your profile to local police. Security researchers like Jameson Lopp maintain updated best practice guides.
Is the Waltio data breach linked to the kidnappings?
A hacker claimed a connection between the Waltio breach (50,000 exposed clients with 2024 tax data) and at least three major kidnappings totaling over $17 million. The investigation is ongoing, handled by the J3 section of the Paris prosecutor’s office.
📰 Sources
This article is based on the following sources:
- Cryptoast – Crypto kidnapping: 10 months to 2 years in prison for Paris attempt perpetrators (April 1, 2026)
- Cryptoast – Crypto kidnappings: a single criminal organization behind multiple attempts (March 27, 2026)
- Journal du Coin – First firm convictions for crypto hostage-taking in Amiens (February 23, 2026)
- Cryptoast – Complete list of crypto-related kidnappings and attacks in France
- French Ministry of Interior – How to strengthen security for your crypto assets
How to cite this article: Fibo Crypto. (2026). Crypto Kidnappings in France: First Convictions and Criminal Network Exposed. Retrieved April 7, 2026 from fibo-crypto.fr
The simplest way to buy, swap and manage your crypto
Join the first users and get priority access. No seed phrase, fees 3.5x lower, built-in DeFi yield.
Get early access →
