Physical coercion attacks againstcrypto-asset holders

Four men wearing Canada Post uniforms entered a home and controlled a family of three forthirteen and a half hours. They used waterboarding, beatings and death threats and took more than C$2 million in Bitcoin.

The victims included a minor daughter. The database contains 23 cases involving minors.

AChinese-Filipino entrepreneurand his driver were kidnapped and held. Offenders demanded US$20 million; the family paid about ₱200 million。

Both victims were still killed. Their bodies were later found. The Philippine National Police Anti-Kidnapping Group arrested three suspects; one surrendered and confessed. All three were charged with two counts of kidnapping resulting in death. About US$205,000 was also frozen by police and the anti-money-laundering authority.

This is a central reason the report refuses to advise whether ransom should be paid.

A Moroccan crypto holder was abducted by four people outside his home and taken to an abandoned building, where he was forced to transfer about 2.55–3 BTC(approximately US$170,000–207,000).

After the transfer, he was strangled and buried. A Ukrainian special police unit, including KORD, solved the case. Four suspects aged 24–29 were charged and prosecutors sought life imprisonment.

The amount was not exceptional, but the outcome was the worst possible.Severity of harm is not correlated with the amount involved—a recurring pattern in the database.

A couple were lured to a meeting by people posing as investors and abducted. The offendersbelievedthe man’s wallet held substantial digital assets and used knives and torture to demand access.

They failed.They then killed and dismembered the couple and buried them in the desert. Accomplices helped plan, rent vehicles and secure a villa. Three suspects were later arrested in Russia.

The attackers’ intelligence was wrong, but the violence did not diminish—it escalated.

A 35-year-old Bitcoin investment-scheme operator was held and tortured for three days byten former members of his investment team, who demanded credentials to ₹450 million (US$62.5 million) that he claimed was inaccessible after an “account hack.”

The offenders never obtained the password.The victim died from his injuries on the third day. Associates took him to two hospitals, where he was declared dead, then left his body in a hospital car park and fled.

More importantly, whether the US$62.5 millionever existed was never established。

A father of two was beaten and shot dead at home. Police saida close friendtold others that his Bitcoin wallet held US$10,000 and connected them to carry out the crime.

A suspect said the wallet containedonly about US$400. While offenders tried to access it through his phone, they shot him twice when he attempted to identify them.

One leaked fact, one stale balance, one life.

A game developer and crypto collector publicly stated that under weapon threats, abduction and threats of sexual violence, he was forced to surrender about US$24 million in stablecoins. He said offenders placed an axe against his hands and feet.

The victim offered a public 10% recovery reward. An on-chain security firm initially misclassified the transfer as address poisoning; the victim clarified that it was unrelated.

The largest confirmed Hong Kong loss in the database and the largest verified loss in Asia.

Three family members anda household employeewere abducted. Afterfive daysof detention, offenders forced a transfer of about US$15 million in crypto and released all four near a dry cleaner.

The facts appear in a 44-page FBI affidavit. Investigators recovered receipts, unused zip ties and surveillance footage from rental vehicles, a suburban short-term rental and several shops. Six men were charged with kidnapping.

The household employee had no connection to crypto—he was simply present。

Offenders posing as UPS couriers entered a home, used firearms and tape, beat residents andthreatened to sever fingers, whilereceiving instructions remotely by phoneto force transfers of about US$13 million in BTC and ETH.

Three Tennessee men were indicted by a federal grand jury. Investigators said the group obtained addresses bycompromising victims’ food-delivery accounts and carried out a series of attacks in San Francisco, San Jose, Sunnyvale and Los Angeles.

Remote direction by phone means:subduing the people on scene may not stop an asset transfer.

Several executives linked to a major exchange’s VIP client were lured there on abusiness trip, abducted and forced to transfer approximately US$12.5 million in USDT from their wallets.

The exchange’s head later said on-chain tracing and the stablecoin issuer helped freeze about US$11.8 million and move it to a secure wallet, producing a “94% recovery rate.”

But the database review found no record that the funds werereturned to the victims. Frozen is not the same as recovered.

Four men—two wearingCanada Post uniforms—entered a residence under the pretext of delivery and controlled a husband, wife andminor daughterfor approximately 13.5 hours. They used waterboarding, beatings, threats of sexual violence and death, and took more than C$2 million in Bitcoin.

The daughter escaped and called police. One defendant whoflew from Hong Kong to Vancouverspecifically to participate received seven years; other accomplices remain at large.

This is the first case in the database in whichwaterboarding was recorded as actually carried outrather than merely threatened.

A 28-year-old Italian man was held bytwo business partnersfor 17 days. He was bound, whipped with electrical cable, electrocuted after his feet were immersed in water, forced to take drugs, cut on the leg with a chainsaw and at one point suspended outside a fifth-floor window.

He never surrendered the password.On 23 May he escaped and sought help from a traffic officer, who called police.

Reporting explicitly states that his refusal “only brought more extreme violence.” It must never be converted into advice to refuse credentials.

Six men, including two minors, followed a holder and tried to drag him into a vehicle. The victim alerted someone close to him; the offenders fled and policearrested all six at the scene。

Dijon judicial-police investigators confirmed:this was the same group’s fourth kidnapping attempt against the same victim. Details of the first three were never reported. The victim is now under permanent police protection.

Only the fourth attempt, ending in on-scene arrests, revealed the full history. This suggests attempted cases may be far more underreported than completed ones.

The founder of a crypto-gambling group, worth more than A$2.2 billion, was ambushed in his apartment stairwell by two men posing aspainters. They tried to force him into a rental van. One, a former Greco-Roman wrestler, covered his mouth; the victim bit off the attacker’s index fingerand escaped. The severed fingertip was later found about 100 meters away.

Weeks later, however, offenders sent himphotographs of his homevia Telegram and demanded 30 BTC.

A successful escape does not mean the threat is over.

Three armed men entered a home at dawn, beat and tied up a couple, and searched for crypto assets.

Neither victim held any cryptocurrency.The offenders acted on false intelligence and obtained nothing. Three suspects were briefly located north of Paris but escaped; no arrest was found by the review cut-off.

The database now contains ten cases of incorrect attacker intelligence, six in 2025–2026. “I do not own that much crypto” is not protection.

A victim in one US casenever made a police report. The case entered the public record only after the victim disappeared a year later and police reconstructed the earlier event during the missing-person investigation.

A Swedish gaming creator with millions of followers was tortured at home. Repeated searches in Swedish and Englishfound no local-media report. The case became known only because the victim described it publicly.

In Chalon, France, officials confirmed this was the same group’sfourthkidnapping attempt against the same victim. The first three never appeared in reporting; only arrests during the fourth attempt revealed the full history.