Former Ukrainian police colonels allegedly turned their law-enforcement expertise into a criminal enterprise, kidnapping crypto entrepreneurs and extorting over $2.2 million in a series of crypto "wrench attacks,” according to prosecutors.
According to prosecutors, the suspects were active officers of the Main Police Department in the Autonomous Republic of Crimea and Sevastopol, Ukrainian territory that has been under Russian occupation since 2014, as well as a Kyiv-based unit, before being discharged following their arrest.
Two colonels among them organized the group, recruiting fellow officers and a civilian accomplice with a prior criminal conviction.
Prosecutors accuse the defendants of creating and participating in an armed gang, kidnapping, unlawful imprisonment, robbery, extortion, and illegal possession of drugs.
The officials identified at least four crypto entrepreneurs as victims who were allegedly tracked, kidnapped, held at gunpoint, and forced to surrender money and sign documents acknowledging non-existent debts.
The gang reportedly used official skills, connections, and resources to operate in a coordinated manner with a clear division of roles, communicating through encrypted messengers, using official transport, and presenting themselves as law enforcement officers while committing the crimes.
In one documented case, a victim in Kyiv was allegedly abducted at gunpoint and forced to draw up a fake "debt" of $5 million before being moved between multiple undisclosed locations.
The gang's illegal activities were terminated in November 2025, and all participants were released from the police service, with the case materials forwarded to the court.
Risk for crypto entrepreneursLaw enforcement credentials have been used in crypto “wrench attacks” before.
Cases where institutional authority is abused to coerce crypto holders remain unusual, cybercrime consultant David Sehyeon Baek told Decrypt.
“The victims' crypto may have been cryptographically secure, but that did not matter once violence, coercion, and forced agreements entered the picture,” he added.
Crypto creates a distinct security risk because assets can be transferred "quickly, across borders, and under duress," he said, adding once local protection becomes unreliable, entrepreneurs need to treat personal security, jurisdictional risk, legal backup, and operational secrecy as seriously as wallet security.
The case, Baek said, illustrates how crypto entrepreneurs can become targets not just for hackers but for actors capable of exploiting official power, warning that in high-corruption environments extortion can resemble "a distorted abuse of state authority" rather than ordinary street crime.
War, corruption, and institutional stress can create conditions in which coercive schemes are harder to detect, he noted, giving criminals more room to operate behind what he called "confusion, fear, and fake legal pressure."
