Coinbase forensics help convict five in London crypto kidnapping

The investigation began in July after a 36-year-old man from Hertfordshire met four strangers at a Shoreditch bar. The group forced him back to his home, coerced him into opening several accounts including a Coinbase account, and moved funds away from his control, court records show.

When the attackers attempted to transfer assets off the exchange, Coinbase’s internal systems flagged the customer as being under duress and alerted police while the incident was still underway. Officers responded and an inquiry was opened by the Hertfordshire Major Crime Unit.

Coinbase’s Global Intelligence team monitored on-chain activity in real time and mapped how the stolen assets moved across multiple wallets. Investigators traced about £1,900 in cryptocurrency, plus additional sums converted to fiat, and linked at least one wallet address to a suspect who held a Coinbase account.

On-chain transaction records, account links and expert testimony were presented at St Albans Crown Court during the prosecution. Four defendants were convicted of conspiracy to rob, kidnapping and false imprisonment. A fifth defendant was convicted of money laundering.

Paul Grewal, Coinbase’s chief legal officer, said in a statement the company’s investigations team worked with UK law enforcement to track and convict those involved and that blockchains allowed the activity to be traced in real time.

Court documents and police statements described the exchange’s account alerts and real-time monitoring as instrumental to collecting a digital trail and enabling arrests while criminal activity continued. Prosecutors told the court that combining internal alerts, blockchain tracing and traditional investigative work led to the charges.

The verdict comes amid a rise in physical attacks tied to cryptocurrency holdings. Security firm data recorded 34 verified physical attacks on token holders between January and April 2026 and identified London as a recurring location for muggings that target wallet applications and private keys. Exchanges and analytics teams have increasingly used blockchain forensics to link transactions to suspects and to cooperate with police.