CustodyStress
Archive › Physical coercion
Part of the CustodyStress archive of observed Bitcoin custody incidents
CS-00869

The attacker claimed to have installed surveillance on the holder's home and demanded 1

Constrained
Case description
A Bitcoin holder received a series of threatening encrypted messages in August 2021. The attacker claimed to have installed surveillance on the holder's home and demanded 1 BTC per week. The holder paid for six weeks while gathering evidence. Blockchain analysis traced the extortion wallet to an exchange account in Eastern Europe. An international arrest warrant was issued.
Custody context
Stress conditionPhysical coercion
Custody systemMobile or software wallet
OutcomeConstrained
DocumentationUnknown
Year observed2021
CountryUnknown
Structural dependencies observed
Single point of failure
What this illustrates
There was only one way in. When that path was gone, so was access. Whether full access was ultimately possible is unclear, but significant delay or outside intervention was involved.
Outcome interpretation
Access remained possible, but only with delay, dependence, or significant difficulty.
Source
Publicly Reported
Evidence type
Forum post
Related cases involving physical coercion
105 cases involve physical coercion 572 cases involve mobile or software wallet View archive statistics →
This archive documents observed custody survivability failures. It does not attempt to document all Bitcoin losses or security incidents. Submit a case
← All cases
Framework references
Terms guide
Survives
Access remained possible under the reported conditions.
Constrained
Access remained possible, but only with delay, dependence, or significant difficulty.
Blocked
Access was not possible under the reported conditions.
Indeterminate
There was not enough information to determine the outcome.
Single-person knowledge
Recovery depended on information or capability held by one individual who was unavailable.
Institutional dependence
Recovery depended on a third-party institution or service that was inaccessible or uncooperative.
Documentation gap
Recovery depended on instructions that were missing, incomplete, or unclear.
Authority mismatch
The person with legal authority to act did not have operational access, or vice versa.