Spanish Police Smash Crypto Kidnap Ring After Fatal Attack

• Spanish police broke a violent crypto kidnapping ring after a fatal Mijas abduction.
• Attackers used guns and physical force to demand access to victims’ crypto wallets.
• Spain and Denmark coordinated arrests, showing the rise of cross-border wrench attacks.

Spanish police have ended a violent crypto kidnapping ring after a man was abducted and killed in Mijas, Málaga, in April. The attack targeted a couple for access to their cryptocurrency wallets and involved masked gunmen armed with handguns. Authorities arrested five suspects in Spain and charged four others in Denmark following a joint investigation.

Kidnapping in Mijas and International Investigation

The case began in April when a woman arrived at a Málaga police station late at night. She reported that attackers abducted her and her partner earlier that day in Mijas. Notably, three or four masked men dressed in black ambushed the couple.

The suspects wore balaclavas, gloves, and carried handguns, according to police. During the assault, the man tried to escape. However, one attacker shot him in the leg before forcing both victims into a vehicle.

The kidnappers drove the couple to a nearby house and held them for several hours. During that time, they attempted to access the couple’s cryptocurrency wallets. Investigators said the attackers demanded credentials linked to digital assets.

Around midnight, the group released the woman and abandoned her. She immediately contacted authorities and filed a formal complaint. Meanwhile, her partner remained missing, prompting an urgent search across the area.

Police later found the man’s body in a wooded area near Mijas. He showed signs of physical violence beyond the gunshot wound. Officers treated the case as a kidnapping and homicide tied to crypto theft.

Raids in Spain and Charges Filed in Denmark

Following the report, the Spanish National Police launched a detailed investigation across multiple regions. Evidence gathered at the holding site helped identify several suspects. Consequently, officers carried out coordinated raids weeks later.

Police conducted six searches at properties in Madrid and Málaga. During those raids, officers seized two handguns, including one replica. They also recovered an expandable baton, a balaclava, and blood-stained trousers.

Investigators collected biological material matching the blood found inside the house. In addition, officers seized mobile phones, electronic devices, and documents linked to the suspects. These items helped establish movement and communication patterns.

Authorities arrested five people in Spain during the operation. Meanwhile, Danish police charged four additional suspects connected to the same group. Notably, two of those charged already serve prison sentences for similar crimes.

Spanish police confirmed they worked closely with Danish authorities throughout the case. The coordination allowed officers to track suspects operating across borders. Officials described the group as organized and focused on violent crypto theft.

Related: Two Suspects Held in Vienna Killing Linked to Crypto Wallet

Crypto “Wrench Attacks” Draw Wider Attention

The Málaga case fits into a pattern known as “wrench attacks,” involving physical force to unlock crypto wallets. Such attacks have drawn increased attention in 2025. Notably, criminals targeted victims directly rather than online systems.

Jameson Lopp, chief technology officer at security firm Casa, has tracked these incidents. He documented at least 66 physical crypto-related attacks this year. These cases include kidnappings, home invasions, and assaults on public figures.

Among reported incidents, attackers attempted to abduct a French crypto executive’s daughter and grandchild. In London, criminals drugged an American tourist posing as a fake Uber driver. They drained about $123,000 from his wallets.

Another case involved Ledger co-founder David Balland. Attackers severed one of his fingers during the assault. Several similar mutilation cases were also reported in France, according to public records.

Chainalysis data adds further context to the trend. As of July, the firm recorded 35 wrench attacks worldwide this year. The figure puts 2025 on pace to exceed levels seen during the 2021 bull market.

More than $2.17 billion was stolen from crypto services this year. Nearly a quarter of losses came from personal wallet attacks. Bitcoin holders faced higher average losses due to targeted large wallets.

Commenting on the issue, Ong Zi Jiang of crypto exchange Coinut addressed the violence. He said wrench attacks have become a serious issue since last year. However, he stressed that criminals, not victims, bear responsibility.

The Spanish investigation shows how quickly digital assets can attract physical threats. It also shows how law enforcement now responds across borders. Together, the arrests, seizures, and charges outline the full scope of the deadly Mijas attack.