2025 is on track to set a record for violent crimes against persons (VCAP) involving cryptocurrency theft. With May not yet over, at least 27 such incidents (kidnapping, burglary, robbery) have already been publicly reported worldwide. At this pace, the total could exceed 65 cases by year\u2019s end\u200a\u2014\u200anearly doubling the previous record of 36 set in 2021, and marking the highest number in the past\u00a0decade.<\/p>\n
Yearly Publicly Reported Cases (2022\u20132025) of Crimes Against Persons (Kidnapping, Robbery, Burglary) Committed for Cryptocurrency Theft\u200a\u2014\u200aData compiled by Nefture based on Jlopp Github<\/a> reporting.In the past three and a half years, 113 cases have been publicly reported, resulting in over $166 million in losses, the deaths of six victims, and the unspeakable torture of many\u00a0others.<\/em><\/p>\n Those figures are only the very tippy-top of the VCAP iceberg, as they represent only the publicly reported cases\u200a\u2014\u200atypically because the perpetrators were arrested, the victims were high-profile, or the incident was particularly violent or\u00a0unusual.<\/p>\n These are the types of cases that make it into the press and are thus recorded by \u201cJLopp\u201d, who maintains a public GitHub database cataloging physical attacks related to cryptocurrency.<\/p>\n Source: Jlopp\u00a0Github<\/a><\/p>\n We analyzed data dating back to 2022 and identified patterns and peculiarities within this multifaceted and malicious industry.<\/p>\n A closer look at a GitHub repository<\/a> quickly reveals that the occurrence of these crimes is intrinsically linked to the state of the crypto\u00a0market.<\/p>\n If the market is up, physical attacks are\u00a0up.<\/em><\/p>\n A trend confirmed by the GitHub creator, Jameson Lopp, co-founder and Chief Security Officer of Casa, a self-custody solution, in an interview with the\u00a0CBC<\/a>.<\/p>\n According to\u00a0him:<\/p>\n \u201cThe rates of these kinds of incidents tend to correlate with the exchange rate of bitcoin.\u00a0[\u2026]<\/em>As the price goes up, more awareness of the space permeates throughout society, and as a result, more criminally minded people decide they want to try to figure out what the ROI of executing a physical attack against a known crypto holder\u00a0is.\u201d<\/em><\/p>\n For Lopp, violent attacks in crypto theft are also motivated by how convenient they can be for criminals compared to robbing a bank or an armored\u00a0truck.<\/p>\n When you think about it, \u201ccrypto kidnapping\u201d can be considered, from a criminal perspective, as one of the most efficient forms of extortion.<\/p>\n In this method, criminals can demand extremely large sums of money in the form of cryptocurrency, which can be transferred in a matter of minutes with just a few\u00a0clicks.<\/p>\n This makes the process faster, more discreet, and less physically demanding than traditional kidnapping.<\/em><\/p>\n In contrast, traditional kidnappings often involve more logistical challenges. Victims are unlikely to have millions of dollars lying around their homes, meaning family members must be mobilized to acquire the ransom from banks or other sources, adding complexity to the\u00a0process.<\/p>\n Moreover, the physical delivery of money in more traditional kidnapping settings\u200a\u2014\u200aor even classical bank wiring\u200a\u2014\u200acreates more opportunities for law enforcement to track the ransom exchange, increasing the risk for the perpetrators.<\/p>\n On the other hand, with crypto kidnapping, the use of digital currencies allows criminals to bypass these obstacles.<\/p>\n With Bitcoin making headlines worldwide after surpassing $100,000 in value, it\u2019s highly likely that large cryptocurrency holders will face an increased risk of such crimes in 2025\u200a\u2014\u200aa trend already evident so\u00a0far.<\/p>\n One of its latest absurd victims isn\u2019t even human. A crypto ATM was stolen after a truck-ramming raid at a shopping center in Melbourne. Apparently, the digital nature of Bitcoin has eluded the\u00a0thieves.<\/p>\n Source: The Bitcoin\u00a0Express<\/a><\/p>\n After collecting data since 2022, we categorized the cases by modus operandi\u200a\u2014\u200akidnapping, burglary, and robbery\u200a\u2014\u200ato identify potential trends.<\/p>\n It quickly became clear that kidnapping has seen a sharp rise over the past few years, increasing from just 7 reported cases in 2022 to 15 in 2024, with 15 cases already recorded by May\u00a02025.<\/p>\n Yearly Typology of Publicly Reported Cases (2022\u20132025) of Crimes Against Persons\u200a\u2014\u200aKidnapping, Robbery, and Burglary\u200a\u2014\u200aCommitted for Cryptocurrency Theft\u200a\u2014\u200aData compiled by Nefture, based on Jlopp\u2019s GitHub reporting<\/em><\/p>\n Across the many cases we reviewed, we found that in several instances, the perpetrators had prior experience with kidnapping\u200a\u2014\u200athey simply shifted their focus to crypto holders, likely drawn by both a more straightforward modus operandi and the promise of larger payouts (in\u00a0theory).<\/p>\n Among 49 documented kidnappings, at least $127.5 million was stolen. However, this figure underrepresents the true total, as the amount taken is often not publicly disclosed.<\/p>\n By comparison\u200a\u2014\u200aand keeping in mind this same limitation\u200a\u2014\u200a40 robberies brought in over $17 million, while 28 burglaries resulted in approximately $21.5 million in stolen\u00a0assets.<\/p>\n Those kidnapping doesn\u2019t always target the crypto holder themselves, parents, spouses and children are also kidnapped either alongside or on their\u00a0own.<\/p>\n Those attacks have proven to have a high success rate, even though the amount successfully stolen is often well below the kidnappers\u2019 expectations.<\/p>\n Unfortunately, kidnapping also have a high lethal rate. They are the most lethal VCAP, as they account for 4 deaths, one each year since\u00a02022.<\/em><\/p>\n One of the most tragic cases occurred on July 28th, 2024, when a 29-year-old Moroccan Bitcoiner was kidnapped from his apartment, forced to transfer 3 BTC, and then strangled to death before being buried in a forest in\u00a0Ukraine.<\/p>\n The victims who escaped death shared harrowing accounts of their ordeal. One man, for example, was dragged from his bed and tortured over six days\u200a\u2014\u200aduring which his teeth were pulled out\u200a\u2014\u200aas his captors tried to extort $5 million from his girlfriend\u2019s wealthy crypto-trader relative.<\/p>\n Another man\u2019s story seems straight out of a B movie, with the victim repeatedly overvictimized over the course of one\u00a0year.<\/p>\n It began with an armed robbery at his front door in January 2023, followed by a similar attack one month later by another associate from the same gang as the first perpetrator. In October 2023, he was coerced into going to the gang\u2019s hideout, where he was kidnapped and subjected to a horrific reign of terror: drugged, threatened, deliberately burned, beaten with weapons, locked in a cupboard, and bound with\u00a0cables.<\/p>\n This torture lasted several days until he gave up money. Although he was released, days later the gang returned, kidnapped him again, extorted him, and released him once\u00a0more.<\/p>\n On November 30th, they picked him up directly from a friend\u2019s home, threw him into a van, and imprisoned him again. This time, however, the police\u200a\u2014\u200aacting on a tip-off\u200a\u2014\u200awere able to rescue the victim and finally put an end to his tormentors.<\/p>\n The gang behind this ordeal\u2014 Source:\u00a0GTCV<\/a>What stands out most about the recent rise in kidnappings is that one country\u200a\u2014\u200aFrance\u200a\u2014\u200ahas been driving this trend over the past several\u00a0months.<\/em><\/p>\n Since 2022, there have been significant shifts in the countries where VCAPs\u00a0occur.<\/p>\n The U.S. has consistently been a prime target, dominating the landscape between 2022 and 2024. Meanwhile, Dubai, the UK, and India\u200a\u2014\u200aeach of which saw a notable share of cases in 2022\u20132023\u200a\u2014\u200ahave reported almost no such incidents since\u00a02024.<\/p>\n However, the most interesting recent developments involve Thailand\u200a\u2014\u200awhich we will discuss shortly\u200a\u2014\u200aand\u00a0France.<\/p>\n Yearly Publicly Reported Cases (2022\u20132025) of Crimes Against Persons (Kidnapping, Robbery, Burglary) Committed for Cryptocurrency Theft by Country\u200a\u2014\u200aData compiled by Nefture based on Jlopp\u2019s GitHub<\/a> reporting<\/p>\n While France experienced sporadic physical attacks related to crypto between 2022 and 2024, such incidents surged in the early days of 2025, starting with the kidnapping of a crypto influencer\u2019s father on New Year\u2019s\u00a0Eve.<\/p>\n Twenty days later, the most high-profile crypto kidnapping yet on the global stage took place when David Balland, a founder of Ledger\u200a\u2014\u200aa major crypto company\u200a\u2014\u200awas abducted along with his romantic partner. This launched a days-long manhunt by police involving 230 officers. The abductors demanded a \u20ac10 million ransom and sent a video showing Balland\u2019s severed finger to his business\u00a0partner.<\/p>\n Days later, a French crypto miner was also kidnapped and later rescued. Since then, three additional kidnapping cases have occurred.<\/p>\n The most recent case to date had an even greater social impact in France than the Balland kidnapping, as it happened in broad daylight, involved the target\u2019s daughter, was caught on video, and ended with the woman being saved by passersby.<\/p>\n https:\/\/medium.com\/media\/b0cd03f244064972e73d11438fa2e5b3\/href<\/a><\/p>\n The true target was Pierre Noizat, a French entrepreneur and one of the pioneers of Bitcoin in France, best known as the founder of the crypto exchange\u00a0Paymium.<\/p>\n The French crypto community has called for action in response to the rising number of crimes on French\u00a0soil.<\/p>\n In reaction to the increasing kidnappings targeting crypto entrepreneurs, French Interior Minister Bruno Retailleau has pledged to enhance security measures for those in the crypto industry. These include prioritizing emergency police response and providing security assessments for the homes of at-risk individuals.<\/p>\n As of now, France is the most targeted country for VCAP in 2025, with 6 kidnappings taking place\u200a\u2014\u200aaccounting for nearly one-quarter of VCAP activity this\u00a0year.<\/em><\/strong><\/p>\n While France is grappling with a surge in crypto-related kidnappings within its borders, Thailand has also got its share of physical attacks targeting crypto\u00a0owners.<\/p>\n However, the profiles of both victims and assailants differ between the two countries. In France, both criminals and victims are predominantly French nationals, whereas in Thailand, no Thai nationals have been identified as either targets or perpetrators in VCAP cases reported since\u00a02022.<\/p>\n What quickly jumped out during our analysis of Thailand\u2019s VCAP cases is that they\u2019ve got a Russian gang\u00a0problem.<\/p>\n Top 5 Countries for Physical Attacks on Individuals Targeted for Cryptocurrency, 2022\u20132025\u200a\u2014\u200aData Compiled by Nefture Based on Jlopp\u2019s GitHub<\/a> Reporting<\/p>\n The first Thailand-based VCAP case recorded in the Jlopp database is dated January 15, 2018. Its two victims, a young Russian couple\u200a\u2014\u200aMaxsim Latsoka and Anna Nikurina\u200a\u2014\u200awere targeted by a Russian gang posing as Interpol agents, from whom they extorted $110,000.<\/p>\n Between 2022 and 2025, 10 VCAPs were reported in Thailand. Of these, 7 involved Russian perpetrators, usually gangs, who most often targeted other Russian nationals through kidnapping and\/or armed\u00a0robbery.<\/p>\n But how do Russian gangs know to target these crypto-rich compatriots?<\/p>\n In a March 2024 case involving yet another Russian gang and Russian victim, police revealed that the gang tracked the victim by monitoring the activities of Russian Bitcoin investors and their visits to Thailand.<\/p>\n This means that Russian Bitcoin investors effectively have a red target painted on their\u00a0backs.<\/p>\n It seems unlikely that these gangs simply stake out and wait for an identified Russian victim to arrive in Thailand. Rather, they appear to hunt them down there. For example, in February 2024, a Russian couple was kidnapped by a Russian gang. According to the investigation, while the couple arrived in Thailand in December 2023, the gang arrived in January and launched their criminal operation just days\u00a0later.<\/p>\n Why choose Thailand? The perpetrators seem to believe that Thai police are ineffective or nonexistent. However, they are mistaken, as the Thai authorities seem to have been relentless in pursuing and apprehending them.<\/p>\n But they may have learned their lesson, the most recent reported VCAP involving a Russian gang occurred in Bali at the end of 2024, rather than in Thailand.<\/p>\n At the same time, since 2024, there has also been a rise in attacks by Chinese gangs targeting Chinese nationals in VCAP incidents\u200a\u2014\u200anot only outside of China in Vietnam and South Korea, but also within Hong Kong and mainland\u00a0China.<\/p>\n There is a complete misunderstanding that criminals \u201cwouldn\u2019t dare\u201d to commit certain acts, and that somehow, in some places or around certain people, we are\u00a0safe.<\/p>\n If criminals are anything, it\u2019s\u00a0daring.<\/p>\n Nowhere is safe, and no one is\u00a0safe.<\/p>\n On November 6th, 2024, Dean Skurka, CEO of the Toronto-based crypto firm WonderFi Technologies, endured a terrifying ordeal when he was kidnapped.<\/p>\n WonderFi CEO Dean Skurka. Source:\u00a0LinkedIn<\/p>\n Forced into a car in downton Toronto during rushhour by multiple individuals, Skurka was told to pay up $1 million for his release. Left with little choice, he wired electronically and was later released in Centennial Park in Etobicoke, thankfully uninjured.<\/p>\n WonderFi CEO Dean Skurka reportedly said in an email that he is \u201csafe\u201d now and that no company funds and data were impacted.<\/p>\n After CBC broke the news, Skurka confirmed the kidnapping, assuring the public that he was safe and that no company funds or data had been\u00a0stolen.<\/p>\n OTC traders are prime targets in VCAP attacks because they are accustomed to handling large sums of money openly, often in public spaces or upscale hotels, spaces where they feel safe. They often don\u2019t expect that at some point, no deal will actually take place\u200a\u2014\u200aand instead, they will be robbed in broad daylight while people mill\u00a0around.<\/p>\n For example, in January 2025, on Jeju Island in South Korea, an OTC trader was swindled out of over $580,000 by fake traders at one of the island\u2019s most luxurious hotels.<\/p>\n Enjoying breakfast at a charming little caf\u00e9 with your spouse? Well, six men might suddenly join you for a \u201cdiscussion\u201d where you\u2019ll be forced to transfer all your assets immediately\u200a\u2014\u200aor die. That\u2019s exactly what happened to a Russian couple in September 2022.<\/p>\n Walking in the street in the middle of other workgoers? Kidnapped. Just as we have seen recently with the Noizat\u00a0case.<\/p>\n If criminals don\u2019t come looking for you, they\u2019ll find a way to make you come to them\u200a\u2014\u200aand they can be pretty creative about tricking\u00a0you.<\/p>\n In November 2023, Binance executives in charge of VIP clients were \u201cinvited\u201d on a fake business trip to Montenegro. They were flown there, then held hostage and forced to transfer $12.5 million to their kidnappers.<\/p>\n At the end of May 2025, John Woeltz, known as the \u201cCrypto King,\u201d with over $100 million in holdings, was arrested along with his partner on charges of kidnapping, unlawful imprisonment, assault, and\u00a0torture.<\/p>\n \u201cCrypto King\u201d John Woeltz\u200a\u2014\u200aSource: New York\u00a0Post<\/p>\n The victim, an Italian citizen, had arrived in New York on May 6, 2024, only to be entrapped by his business partners, who demanded he hand over his Bitcoin password. We may never know what could have happened to him since he knew the true identity of his torturers\u200a\u2014\u200aif he hadn\u2019t managed to escape on his\u00a0own.<\/p>\n Another case of don\u2019t trust your business partner or friend happened in India, where a couple staged a fake robbery in their own home. Their \u201cfriend\u201d\u200a\u2014\u200acrypto-rich from significant Bitcoin investments\u200a\u2014\u200awas invited over, only to fall into their\u00a0trap.<\/p>\n The couple, struggling financially, had recruited fake robbers hoping to coerce him into handing over his private keys. He did not. During the investigation, the couple was revealed as the real masterminds behind the robbery, and the \u201cfriendship\u201d was irreparably broken.<\/p>\n Speaking of friendship, this UK tourist in Spain thought he was well on his way to welcoming new friends into his life after chatting with a group of fellow UK tourists at his hotel, who quickly invited him to their apartment\u200a\u2014\u200aa trap disguised as a friendly gesture. Once they discovered he was a crypto broker, these \u201cnew friends\u201d seized the opportunity and, without any prior planning, organized his kidnapping purely to cash\u00a0in.<\/p>\n Fortunately, the victim managed to contact a friend during his captivity and was eventually rescued by the\u00a0police.<\/p>\n There have been multiple cases of attackers disguising themselves as police officers, but the most intriguing impersonation cases involve fake Uber\u00a0drivers.<\/p>\n After all, if there\u2019s one person you\u2019re least likely to guard against, it\u2019s your taxi chauffeur.<\/p>\n In May 2025, an American tourist in London named Jacob had a few drinks at a bar and decided to order an Uber. Minutes later, a man calling him by name\u200a\u2014\u200a\u201cJacob\u201d\u200a\u2014\u200aand resembling the assigned driver under dim lighting picked him\u00a0up.<\/p>\n Tired and a bit buzzed, Jacob didn\u2019t pay much attention when the \u201cUber\u201d arrived in a dark sedan instead of the Toyota Prius he expected. Unusually, Jacob was seated in the front passenger seat beside his very friendly\u200a\u2014\u200aand unusually attentive\u200a\u2014\u200adriver. While chatting, the driver offered him a cigarette, which Jacob accepted.<\/p>\n Unbeknownst to him, the cigarette was spiked. Not long after smoking it, Jacob passed out. He vaguely remembers feeling unusually docile, and ultimately complying when the driver demanded he hand over his unlocked phone \u201cfor directions.\u201d<\/p>\n Whether the attackers\u2019 main target was the crypto assets in Jacob\u2019s account or they simply stumbled upon it while rifling through his phone remains unclear. The end result was the same: $123,000 stolen from his crypto accounts.<\/p>\n A few months earlier, an ocean away in the United States, Nuruhussein Hussein was arrested for posing as a fake Uber driver to rob two unsuspecting victims of their crypto holdings.<\/p>\n In both cases\u200a\u2014\u200alike the one in London\u200a\u2014\u200athe fake Uber driver somehow knew the victims\u2019 names and called them out after they ordered a\u00a0ride.<\/p>\n Unlike the London case, Hussein didn\u2019t use drugs to extort his victims. Instead, he came up with excuses to get hold of their phones\u200a\u2014\u200aclaiming his own phone was dead, for\u00a0example.<\/p>\n Once he had their phones, he quickly transferred their crypto to his own accounts. In total, he stole $223,000 from his victims\u2019 Coinbase accounts.<\/p>\n As previously noted, these crimes have a high success rate\u200a\u2014\u200aat least for those publicly reported. With Bitcoin recently breaking the $100,000 mark and remaining around that level, kidnappings, robberies, and burglaries targeting individuals for cryptocurrency could see a significant increase in the coming\u00a0year.<\/p>\n The promise of substantial ransom payouts is not only putting a target on the backs of prominent crypto holders but also on smaller investors.<\/p>\n Large crypto holders have been spooked through and through in recent years\u200a\u2014\u200ato the point that some have even started taking training to prevent abduction, such as learning how to escape from bindings.<\/p>\n Crypto holders taking Station70 classes to learn how to protect themselves in case of VCAP\u200a\u2014\u200aSource: Station70 via The New York\u00a0Post<\/a><\/p>\n Anyone who owns cryptocurrency should exercise caution and discretion about their holdings, keeping such information strictly private\u200a\u2014\u200aunless their profession requires public identification as a crypto\u00a0holder.<\/p>\n It\u2019s not only wise but essential for crypto owners to adopt strong privacy practices, including limiting what they share\u00a0online.<\/p>\n Nefture<\/em><\/a> is a <\/em>Web3 real-time security and risk prevention platform<\/em><\/strong> that detects on-chain vulnerabilities and protects digital assets, protocols and asset managers from significant losses or\u00a0threats.<\/em>Nefture core services includes <\/em>Real-Time Transaction Security<\/em><\/strong> and a <\/em>Threat Monitoring Platform<\/em><\/strong> that provides accurate exploits detections and fully customized alerts covering hundreds of risk types with a clear expertise in\u00a0DeFi.<\/em>Today, Nefture proudly collaborates with leading projects and asset managers, providing them with unparalleled security solutions.<\/em>Book a demo<\/em><\/strong><\/a>\u00a0<\/em><\/strong>\ud83e\udd1d<\/em><\/p>\n Crypto Up, Kidnapping Up?\u200a\u2014\u200aDissecting Cases from 2022 to 2025<\/a> was originally published in Coinmonks<\/a> on Medium, where people are continuing the conversation by highlighting and responding to this story.<\/p>","protected":false},"excerpt":{"rendered":" Crypto Up, Kidnapping Up?\u200a\u2014\u200aDissecting Cases from 2022 to\u00a02025 2025 is on track to set a record for violent crimes against persons (VCAP) involving cryptocurrency theft. With May not yet over, at least 27 such incidents (kidnapping, burglary, robbery) have already been publicly reported worldwide. At this pace, the total could exceed 65 cases by year\u2019s […]<\/p>\n","protected":false},"author":0,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[2],"tags":[],"class_list":["post-69497","post","type-post","status-publish","format-standard","hentry","category-interesting"],"_links":{"self":[{"href":"https:\/\/mycryptomania.com\/index.php?rest_route=\/wp\/v2\/posts\/69497"}],"collection":[{"href":"https:\/\/mycryptomania.com\/index.php?rest_route=\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/mycryptomania.com\/index.php?rest_route=\/wp\/v2\/types\/post"}],"replies":[{"embeddable":true,"href":"https:\/\/mycryptomania.com\/index.php?rest_route=%2Fwp%2Fv2%2Fcomments&post=69497"}],"version-history":[{"count":0,"href":"https:\/\/mycryptomania.com\/index.php?rest_route=\/wp\/v2\/posts\/69497\/revisions"}],"wp:attachment":[{"href":"https:\/\/mycryptomania.com\/index.php?rest_route=%2Fwp%2Fv2%2Fmedia&parent=69497"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/mycryptomania.com\/index.php?rest_route=%2Fwp%2Fv2%2Fcategories&post=69497"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/mycryptomania.com\/index.php?rest_route=%2Fwp%2Fv2%2Ftags&post=69497"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}Crypto Market Up, Physical Attacks\u00a0Up?<\/h3>\n
The Rise of Kidnapping as the MO of Choice in\u00a0VCAP<\/h3>\n
The Country Musical Chairs of Physical Attacks: France Emerges as the New Front-Runner<\/h3>\n
The Russian Gang Problem of\u00a0Thailand<\/h3>\n
Nowhere is Safe, No One Is\u00a0Safe<\/h3>\n
Public places will not save\u00a0you.<\/strong><\/h4>\n
Trust no one\u200a\u2014\u200anot even the rich, not even your\u00a0friends.<\/h4>\n
About us<\/h3>\n