Violent Crypto Extortion Turns Deadly

Spanish law enforcement has arrested five people linked to a brutal kidnapping and murder in Málaga earlier this year, believed to be part of a “wrench attack”—a violent tactic used to force victims to hand over access to their cryptocurrency wallets. Authorities in Denmark have also charged four additional suspects connected to the case.

According to a statement by the Policía Nacional, the incident took place in April when a couple was assaulted in Málaga. The attackers allegedly shot the man in the leg and held both victims inside a house for several hours while attempting to extract access credentials to their digital wallets.

The woman was later released and alerted authorities. Tragically, her partner’s body was found days later in a nearby wooded area.

A joint Spanish–Danish operation resulted in multiple arrests. Two of the Danish suspects were already serving sentences for similar crimes. During raids, investigators seized two firearms, an expandable baton, a balaclava, blood-stained clothing, and biological samples matching DNA found at the crime scene.

The Málaga case highlights the growing wave of physical assaults targeting crypto holders as Bitcoin and other digital assets hit record valuations in 2025. These incidents—often referred to as "wrench attacks"—involve criminals coercing victims into transferring crypto assets under threat of violence.

According to Jameson Lopp, CTO of Casa, at least 66 crypto-related physical assaults have been documented globally this year, ranging from home invasions and kidnappings to mutilation cases. Notably, Ledger co-founder David Balland was kidnapped earlier this year in France, reportedly with ransom demands in cryptocurrency.

Industry Response and Security Concerns

Experts warn that as digital wealth grows, so does the risk of offline attacks. Ong Zi Jiang, OTC sales executive at Coinut, noted:

“Wrench attacks have become a serious issue since last year, driven by worsening economic conditions. However, the crimes shouldn’t define the crypto industry—victims must be protected, and perpetrators held accountable.”

Similar high-profile attacks have been reported across Europe, Asia, Africa, and the Americas, including attempted abductions, robberies, and extortion attempts targeting prominent crypto users and their families.

Security professionals continue to stress the importance of multi-layered wallet protection, operational anonymity, and physical safety precautions for those managing substantial digital assets.