Last updated: October 17, 2026
A "wrench attack" is a physical attack — robbery, home invasion or kidnapping — to force a crypto holder to hand over their coins, and the best defense is not to be identifiable as a holder in the first place: keep holdings private, limit the personal data you give to exchanges, and set up wallets so that no single person can move everything under pressure. These attacks rose sharply in 2025, with a wave of kidnappings in France and leaks of exchange customer data that included home addresses. Privacy is the first layer of physical security — which is why no-KYC swaps such as BTC → XMR matter beyond online privacy.
- 2025 record year for wrench attacks
- 1 data leak can reveal your address
- Multisig removes the single point of pressure
- 0 holdings shown in public
How attackers find crypto holders
| Source | What it reveals | Mitigation |
|---|---|---|
| Social media bragging | That you hold, how much, sometimes where you live | Never post balances, gains or screenshots |
| Exchange KYC data leaks | Name, ID scan, home address, balance | Share as little personal data as possible; prefer no-KYC tools |
| On-chain analysis | Large balances tied to an identity | Hold savings in a private coin; avoid address reuse |
| Deliveries and purchases | Your address linked to a wallet | Separate wallets for purchases |
| Conferences and meetups | Your face linked to "crypto investor" | Keep a low profile about holdings |
Reduce your exposure (step by step)
- Stop advertising. Remove posts that show balances, wallet screens or big wins.
- Minimize KYC footprints. Each verified account stores your ID and address somewhere that can leak. Use no-KYC swaps for coin-to-coin moves — see exchanges with no registration.
- Break the on-chain link. Move savings into Monero so your balance isn't visible to anyone who knows one of your addresses. See is Bitcoin anonymous.
- Use a separate delivery address or pickup point where possible.
- Review your privacy habits with 12 crypto privacy mistakes.
Set up wallets that resist coercion
- Decoy wallet: hardware wallets support an optional passphrase that opens a different, hidden wallet. Keep a small amount in the default wallet.
- Multisig: require 2 of 3 keys held in different places or by different people, so you physically can't move everything alone.
- Distance: keep seed backups away from home (see seed backup) and don't keep large balances on your phone.
- Spending wallet only on you: carry only what you'd be willing to lose.
- Plan for your family: make sure loved ones know the security plan without knowing the keys — see crypto inheritance.
If you are threatened
Your safety comes first: comply rather than resist, and contact the police as soon as you can. Decoy wallets and multisig exist so you can hand over something without losing everything. Afterwards, move remaining funds to new wallets with new seeds and review what information exposed you.
Frequently asked questions
What is a crypto wrench attack?
A physical attack — robbery, home invasion or kidnapping — aimed at forcing someone to transfer their cryptocurrency. The name comes from the idea that a wrench beats encryption.
Why did wrench attacks increase?
Rising crypto prices, people publicly showing wealth, and leaks of exchange customer data that included names and home addresses all made holders easier to find.
Does no-KYC help against wrench attacks?
Yes, indirectly: every exchange that stores your ID and address is one more database that can leak. Fewer KYC accounts mean fewer places linking your identity to your holdings.
What is a decoy wallet?
A wallet with a small balance you can reveal under pressure, while most funds sit in a hidden wallet protected by an extra passphrase, or in multisig.
Should I keep my seed phrase at home?
Not your only copy. Keep backups in separate secure places so a single break-in can't give access to all your funds.
Keep your holdings private: BTC → XMR, USDT → XMR or the most private exchanges. No account, no ID, no logs.