Physical attacks targeting cryptocurrency holders have increased sharply in 2026, with 46 publicly documented incidents reported in the first half of the year and more than $30 million in losses, according to Chainalysis. While kidnappings remained comparatively stable as a percentage of all incidents, home invasions accounted for 37 per cent of reported crimes in 2026, up from 26 per cent in 2023.
Kidnappings, home invasions, armed robberies, hostage situations, and extortion intended to compel victims to transfer bitcoin are some of the incidents. The figure follows a record $58 million stolen in violent crypto attacks in 2025.
The events, known as “wrench attacks”, target people rather than the digital infrastructure. The criminals have the ability to force their victims to make valid blockchain transactions, which are frequently irreversible once verified. Chainalysis claims that there are different levels of criminal skill involved in the stolen funds; some just cash out, while others use cryptocurrency services for money laundering.
Chainalysis reported that during the first half of 2026, there was an increase in violence related to cryptocurrency. Researchers documented 46 violent incidents with projected losses above $30 million. The report also highlights a change in the way these crimes are committed. In the past, isolated kidnappings and robberies were common. Attacks that have occurred more recently exhibit indications of well-planned operations with several personnel, monitoring teams, safe houses, transit logistics, experts in digital laundering, and international coordination.
Some incidents have been connected by investigators to multinational criminal groups and sophisticated money laundering businesses that transfer stolen assets between several blockchain networks before law enforcement can step in. According to Chainalysis, if this trend continues through H2, 2026 will surpass 2025’s total of $58 million and become the worst year ever for violent cryptocurrency attacks.
France has reported the highest number of cases. At the same time, similar incidents have also been recorded in the United States, the United Kingdom, Belgium, Australia, Canada, Latin America, and several Asian markets. Law enforcement agencies increasingly view cryptocurrency-related violence as an international organised crime issue rather than a series of isolated domestic robberies.
According to Chainalysis, physical attacks targeting cryptocurrency holders are becoming more common and more organised. Digital assets are increasingly being treated by criminal groups in the same way as cash, luxury goods, or precious metals, with the added advantage that they can be transferred across borders almost instantly and leave little physical evidence.
The report stated that despite a year-over-year increase in attacks, criminals are finding it harder to secure payouts. Data shows that only 26 per cent of violent cryptocurrency theft attempts in the first half of 2026, or 12 out of 46 incidents, resulted in payment. That marks a decline from a 49 per cent success rate in 2025, when 47 of 95 attacks resulted in payouts, and from 67 per cent in 2024, when 32 of 48 attacks were successful.
France has become the country most affected by the recent rise in physical cryptocurrency attacks. By the middle of 2026, Chainalysis had recorded over thirty occurrences that were known to the public, an increase over prior years. Additionally, the attacks have expanded geographically. Although incidents have happened elsewhere, the Greater Paris region continues to be the primary hotspot.
French Interior Minister Laurent Nuñez said authorities had recorded more than 70 crypto-related violent incidents. In response, he announced measures to strengthen protection for people working in the cryptocurrency sector, including a rapid identification and alert system for individuals considered at risk.
Attacks have become far more frequent. Attacks occurred at an average monthly rate of 1.9 in 2025 and 4.6 in the first half of 2026. There are two explanations for the rise in the frequency of attacks. First, tax break information was made public by French officials in January 2026, which may have drawn the attention of criminals who used the information from the stolen documents to take action. Second, 50,000 people were impacted by another security issue that Waltio announced in the same month.
French authorities are treating the surge in violence as a form of organised crime. The cases are being handled by JUNALCO (Juridiction nationale chargée de la lutte contre la criminalité organisée), France’s specialised organised crime prosecutor’s office. By mid-2026, the investigation had resulted in around 200 arrests, 88 indictments, 75 suspects placed in pretrial detention, and more than a dozen active investigations.
While most crypto crime unfolds online, physical violence against holders is accelerating. With $30M already stolen in 2026, "wrench attacks" and home invasions are on pace for a record year, with France emerging as the primary global hotspot. Read our new research for a… pic.twitter.com/ilJiOyJtLy
— Chainalysis (@chainalysis) August 6, 2026
A rising percentage of recorded wrench attacks are house invasions, according to Chainalysis. Residential break-ins accounted for almost 26 per cent of all cases reported in 2023. That percentage has increased to almost 37 per cent by the middle of 2026.
Hardware wallets, backup recovery phrases, authentication devices, personal computers, and financial information are frequently found in a victim’s house. When hackers obtain access, they might coerce victims into divulging passwords while looking for recovery phrases and other digital assets. Many of the logistical difficulties associated with moving and detaining a victim elsewhere are also avoided by staying inside the house.
Chainalysis found that family members, close friends and acquaintances now account for about one-quarter to one-third of documented cases, a sharp increase from a few years ago. In France, reports indicate that more than 40 per cent of some documented incidents involved someone connected to the intended cryptocurrency owner.
Attackers are changing their tactics. In the early years, nearly all violent crypto-related attacks targeted cryptocurrency holders directly. By early 2026, however, family members, friends and acquaintances accounted for around 25 per cent to 30 per cent of reported cases, up from almost none in 2021. The trend is particularly pronounced in France, where more than 40 per cent of incidents involved a relative or associate rather than the crypto owner.
The data also shows that most victims are local residents rather than tourists or visitors. In Sweden, all victims with known residency status were local residents. The figure stood at 93 per cent in France, 82 per cent in Brazil and 77 per cent in the United States. The Netherlands was an exception, with 67 per cent of victims identified as non-residents.
Overall, the emphasis on local victims points to a high degree of preparation and reconnaissance. According to investigators, attackers may find targets by keeping an eye on social media activity, examining blockchain data, taking use of personal information that has been exposed, or getting insider tips. Family members are increasingly being used as leverage, which emphasises how organised crime groups are changing their tactics to coerce victims into giving up digital assets.
