Telegram founder Pavel Durov said 41 kidnappings targeting crypto holders took place in France during the first 3.5 months of 2026, attributing the wave to criminals acquiring leaked government tax data that exposes wallet holdings.
Why it matters
Durov's framing puts the attacks squarely on government data-collection policy rather than on user OpSec alone. If attackers are cross-referencing tax filings with on-chain identity, the threat surface expands well beyond public-figure targeting — any declared crypto holder becomes a viable mark. France has been the European epicenter of so-called "wrench attacks," and Durov's figure, while not officially verified, is the first public count tying the surge to leaked fiscal records rather than to address leakage or social-media exposure.
Market impact
The warning lands as French and EU regulators push for wider reporting frameworks and as more jurisdictions require detailed disclosure of crypto holdings. Holders who previously treated on-chain pseudonymity as the primary defense are now weighing whether declared positions are themselves the attack vector. Watch for whether French authorities confirm Durov's count and whether other EU capitals report similar patterns — the policy response will hinge on whether the leaks are isolated or systemic.
Frequently asked questions
-
What did Pavel Durov say about crypto kidnappings in France?
Durov said 41 kidnappings targeting crypto holders occurred in France in the first 3.5 months of 2026. He attributed the crimes to criminals obtaining leaked government tax data, not to user OpSec failures.
-
Why are tax data leaks a risk for crypto holders?
If attackers cross-reference fiscal filings with on-chain identity, the threat surface expands well beyond public-figure targeting. Any declared crypto holder becomes a viable physical-attack target regardless of key hygiene.
-
Has France been a hotspot for physical crypto attacks?
France has been the European epicenter of so-called wrench attacks in recent years. Durov's 41-attack figure, if confirmed, would mark the sharpest documented escalation of the trend.
-
Has the French government confirmed Durov's kidnapping count?
No. The 41-attack figure is Durov's count, not an officially verified government statistic. French authorities have not publicly corroborated or disputed it at the time of this report.
-
How does this affect EU crypto reporting rules?
Durov's warning lands as French and EU regulators push wider crypto reporting frameworks that would deepen fiscal disclosure. The tension is whether expanded data collection protects or endangers declared holders.
TheBlock
CoinDesk
Lookonchain
CryptoSlate
CoinTelegraph