Five men have been detained in Ivanovo, accused of kidnapping and torturing a young programmer to gain access to his money and crypto wallets. For holders of digital assets, this is an alarming signal: technically reliable wallet protection does not save you when criminals get to the person himself.

According to the investigation, the attackers found the victim through social media, where the programmer showed off expensive cars and trips abroad. The more visible the wealth in public profiles, the higher the risk — especially in regions where such a lifestyle sharply contrasts with the surroundings. Ivanovo Oblast is considered one of the poorest regions in the country.

How the gang operated

The Investigative Directorate of the Investigative Committee of the Russian Federation for Ivanovo Oblast charges the group members with kidnapping and robbery (Articles 127 and 162 of the Criminal Code of the Russian Federation). The defendants are Antonov, Chervyakov, Bronnikov, Kozlov and Zaynutdinov. According to the agency, they acted out of mercenary motives, used weapons and objects that could replace them, and the violence threatened the life and health of the victim.

In the summer, the group members learned from social media about a young man who, judging by the photos, had a Ferrari, two BMWs and a Mercedes. He often traveled abroad and led a bohemian lifestyle. The perpetrators put him under surveillance and found out that he was just over twenty years old. The young man works as a programmer and supplies his developments to major companies.

The attackers seized the programmer on September 6 on his way to a store, handcuffed him and took him to the "Energetik" garage cooperative in a Peugeot bought from car thieves. People in balaclavas and with pistols beat the captive for about five hours in one of the garages, threatened him with torture by iron and soldering iron, and demanded money, passwords to his phones and crypto wallets.

Kidnappings for cryptocurrency: from Russia to France

Similar stories in Russia have already ended in tragedy: the case of former MMA fighters accused of murdering the wife of an entrepreneur from Novorossiysk has reached the Krasnodar Regional Court. According to the investigation, the criminals demanded a cryptocurrency ransom of 87 million rubles from the husband after the woman's death.

Social media is not the only source through which criminals find victims. The case of the robbery of a British trader for $800,000 with the Revolut data leak showed where clients' addresses and the history of their crypto transactions could have come from.

The Connecticut prosecutor's office accused three residents of St. Louis of preparing a robbery: according to the case files, they surveilled a participant in the theft of $230 million in BTC and his parents for two days, hoping to obtain the stolen coins through threats.

France has become the European center of such crimes: from 2023 to May 2026, 135 cryptocurrency-related kidnappings and attempts were recorded there — about 80% of cases in Europe. In May, six attackers tried to kidnap the wife of The Sandbox co-founder Sébastien Borget near the family's home, but neighbors intervened and the criminals fled.

Cryptalist analysis: The growing number of physical attacks on crypto investors points to a systemic shift in the threat model: technical protection of assets increasingly proves weaker than the owner's operational security. Public display of wealth and the linking of identity to a crypto portfolio create a new class of risks that institutional and private holders should consider on par with cyber threats.