Key Takeaways
- Pavel Durov, founder of Telegram, attributes France’s spike in crypto kidnappings to compromised tax databases
- Approximately 41 cryptocurrency investors have been abducted in France during early 2026 — averaging one incident every 2.5 days
- Ghalia C., a former tax administration employee, faces charges for allegedly selling cryptocurrency holder information to organized crime rings
- Victims include Ledger’s co-founder David Balland and multiple families targeted for ransom demands
- Durov threatens Telegram’s withdrawal from France if forced to grant government access to encrypted communications
Cryptocurrency investors in France are experiencing an unprecedented security crisis. Pavel Durov, the creator of [[LINK_START_0]]Telegram[[LINK_END_0]], has drawn direct connections between compromised government tax records and an alarming increase in violent attacks against digital asset holders.
In a statement shared on X, Durov revealed that approximately 41 individuals holding cryptocurrency have been abducted across France since January 2026. This frequency translates to nearly one kidnapping case every two and a half days.
“More data = more victims,” Durov stated, highlighting what he describes as widespread breaches of tax administration databases and the criminal exploitation of cryptocurrency investor information.
The threat mechanism is disturbingly simple. Once criminal organizations obtain personal identification details, residential addresses, and financial profiles, they can systematically identify affluent cryptocurrency holders and execute targeted physical assaults.
Durov drew particular attention to Ghalia C., a former employee within France’s tax administration who was arrested in June 2025. Prosecutors allege she monetized confidential information about cryptocurrency investors and industry professionals, selling it to criminal enterprises. This intelligence reportedly enabled criminals to orchestrate sophisticated kidnapping operations and extortion schemes.
Notable Victim Cases
Multiple incidents have captured public and media scrutiny. David Balland, co-founder of hardware wallet manufacturer Ledger, was kidnapped alongside his spouse in January 2025. During the horrific ordeal, Balland suffered severe hand injuries before law enforcement secured his release.
In April 2026, criminals abducted a woman and her 11-year-old child in the Burgundy region. Four individuals demanded 400,000 euros from the woman’s husband, identified as an entrepreneur in the cryptocurrency sector.
Another violent home invasion occurred in Ploudalmézeau, where attackers held a mother, her two children, and their grandparents captive for multiple hours. These criminal operations span numerous French regions.
May 2025 witnessed an attempted abduction in broad daylight targeting the daughter of a cryptocurrency company executive in Paris. Additionally, a family member of another crypto investor was successfully kidnapped, with perpetrators demanding payment in digital currency.
These incidents demonstrate a troubling evolution from sporadic attacks to systematic, organized criminal campaigns specifically targeting the cryptocurrency community.
Government and Security Response
French government officials acknowledge the severity of this emerging threat. Jean-Didier Berger, minister delegate to the interior minister, addressed attendees at Paris Blockchain Week on April 16, confirming the implementation of protective measures for cryptocurrency investors.
Blockchain investigator ZachXBT has also elevated these cases in his workload. “I prioritize these types of cases as they have grown more frequent,” he announced on X, encouraging victims to contact him immediately.
Durov, however, rejects proposals to expand government surveillance capabilities as a solution. He contends that broader data access creates additional vulnerabilities and announced that Telegram would cease French operations rather than comply with demands for access to encrypted private communications.
As of April 2026, French law enforcement agencies have confirmed active investigations and numerous arrests connected to organized criminal networks, including some operations with international dimensions.
