TLDR
- Pavel Durov, founder of Telegram, attributes the increase in crypto-related kidnappings to compromised tax data in France
- Early 2026 data shows approximately 41 cryptocurrency kidnappings in France — averaging one incident every 2.5 days
- Ghalia C., a former tax official, faces detention charges from 2025 for allegedly providing crypto investor information to criminal organizations
- Notable victims include Ledger co-founder David Balland and a family targeted in Burgundy
- Telegram’s founder states the platform would cease French operations before granting message access to government authorities
A significant increase in violent crimes against cryptocurrency holders has emerged across France. Telegram founder Pavel Durov has drawn direct connections between this troubling pattern and compromised tax information, allegedly involving a former government employee.
In a statement shared on X, Durov revealed that approximately 41 individuals holding cryptocurrency have been abducted in France during the opening months of 2026. The frequency translates to an incident occurring every two and a half days.
Durov emphasized the correlation between data volume and victimization, highlighting widespread tax database breaches and the criminal exploitation of crypto investor records.
The threat mechanism is clear. Criminal organizations gain access to personal identifiers, residential addresses, and financial information, enabling them to locate affluent cryptocurrency holders for physical attacks.
Durov directly referenced Ghalia C., a former employee of France’s tax administration who was taken into custody in June 2025. Authorities accuse her of providing sensitive information about crypto investors and industry professionals to criminal syndicates. This data allegedly facilitated the planning of violent confrontations and extortion schemes.
High-Profile Cases
Multiple incidents have captured public attention. David Balland, co-founder of Ledger, along with his spouse, were abducted in January 2025. The attack resulted in severe physical harm to Balland, who suffered hand mutilation before authorities secured his release.
Another case in April 2026 involved a mother and her 11-year-old child in Burgundy. Four individuals demanded 400,000 euros from the father, identified as a cryptocurrency business owner.
A home invasion in Ploudalmézeau resulted in the detention of a mother, two children, and their grandparents for multiple hours. The geographic distribution of these crimes extends throughout various French territories.
May 2025 witnessed an attempted daytime abduction of a crypto CEO’s daughter in Paris. Another incident involved the kidnapping of a crypto investor’s family member, with ransom demands made in digital currency.
These events demonstrate a transformation from sporadic occurrences to a systematic pattern of organized criminal activity focused on cryptocurrency holders.
Law Enforcement Response
French government officials have acknowledged the severity of the situation. During Paris Blockchain Week on April 16, Jean-Didier Berger, minister delegate to the interior minister, announced the implementation of protective measures for cryptocurrency investors.
Blockchain investigator ZachXBT has elevated these cases in his work priorities. “I prioritize these types of cases as they have grown more frequent,” he stated on X, encouraging victims to make contact without delay.
Durov challenged the notion that broader government data access would improve security. He contends such measures amplify risk and declared Telegram would withdraw from France rather than provide French officials with access to private communications.
By April 2026, French law enforcement has verified active investigations and numerous apprehensions connected to organized crime networks, including operations with international links.
