The rise and fall of a gang of crypto-ransom kidnappers

In recent years, France witnessed a surge in high-profile abductions linked to cryptocurrency ransom demands. This criminal phenomenon traced its origins back to 2023, when unsuspecting victims became targets for gangs hoping to capitalize on the digital wealth of crypto investors and their families.

The gang’s first known attack occurred in August 2023, in the quiet Sarthe countryside. Bruno D., a retired postal worker, started his day as usual, never suspecting he was about to become the group’s inaugural victim. His mundane morning routine was interrupted when a young man disguised as a delivery driver rang his doorbell. This encounter set off a shocking sequence of events that would evolve into a broader campaign targeting those connected to the fast-growing world of cryptocurrencies.

By January 2025, the criminals escalated their violence, abducting prominent individuals like David Balland, and in May, targeting the father of a poker player who had made his fortune in crypto. These increasingly brazen attacks involved elaborate schemes, including surveillance and disguises, as well as terrifying tactics meant to coerce families into transferring millions in digital currencies.

Paris police began unraveling the network’s operations after a failed kidnapping attempt in western France in May 2025. Teams of masked criminals had planned to seize relatives of a cryptocurrency entrepreneur, but their efforts were thwarted when residents intervened. Investigators connected this incident to a wider pattern, ultimately linking it to more than twenty individuals—many under the age of twenty, and some even minors—who orchestrated and executed these crimes.

The gang’s attempts included targeting the daughter of a crypto exchange founder and the father of a well-known influencer, reflecting how criminals were exploiting the public profiles and perceived wealth of their victims. Analysis of ransom payments led authorities to identify the mastermind: a French-Moroccan individual residing abroad who coordinated the group’s violent activities.

The downfall of this network arrived after diligent police work, with two major waves of arrests and tactical raids in May 2025. Suspects faced charges that included kidnapping, conspiracy, and acts of torture. The operation not only dismantled the gang but also highlighted the vulnerabilities of those invested in cryptocurrencies, urging the community and law enforcement to strengthen defenses against such modern threats.

These events underscore how rapid changes in technology and wealth create new risks—and how law enforcement must adapt to track and break down increasingly sophisticated criminal organizations. The rise and fall of France’s crypto-ransom kidnappers is a cautionary tale for both digital entrepreneurs and the society at large.