French police dismantle $1.8M crypto villa scam targeting luxury property sellers
French authorities have uncovered a high-end real estate scam involving cryptocurrency, arresting two suspects accused of stealing around $1.8 million in digital assets from a wealthy couple under the guise of a multimillion-euro villa transaction.
The operation, led by the Gassin-Saint-Tropez gendarmerie, culminated on June 25 with the arrest of a mother and her adult son at a rented villa in Cavalaire-sur-Mer. Investigators say the pair engineered a highly polished “rip deal” – a form of confidence trick often used in luxury transactions – that specifically targeted the owners of a prestigious property in Ramatuelle on the French Riviera.
A €10 million villa and a too-good-to-be-true buyer
The victims had put their villa, valued at about €10 million (roughly $12 million), up for sale in spring 2025. According to the investigation, the suspects presented themselves as professional intermediaries working on behalf of an affluent Italian buyer supposedly eager to acquire the property.
To lend credibility to their story, they arranged meetings in Milan rather than conducting negotiations remotely. The sellers were invited to Italy, where they met the alleged buyer and discussed the terms of the transaction.
During these meetings, the supposed buyer reportedly made an extremely attractive offer: not only to purchase the property, but to pay more than the asking price. However, there was a condition. Before finalizing the deal, the sellers were told they needed to demonstrate they could provisionally cover €1.5 million (around $1.8 million) in transaction-related fees and guarantees using cryptoassets.
The Milan meetings: from negotiations to digital theft
Investigators say the second meeting in Milan marked the decisive phase of the scam. According to the gendarmerie, the suspects insisted they needed to “verify” that the necessary cryptoassets existed in the victims’ possession before the sale could proceed. This verification, they claimed, was a standard step in large, cross-border transactions involving high-net-worth individuals.
Under this pretext, the victims were asked to access their crypto wallet and show the balance. It was during this demonstration that the alleged fraudsters are believed to have put their real plan into action.
Authorities say the suspects used a pair of glasses equipped with concealed cameras to secretly capture the victims’ sensitive information. While distracting the couple with questions and paperwork, the criminals allegedly recorded wallet interfaces, account details, and – crucially – private security keys or recovery phrases.
Armed with this information, the suspects are believed to have gained full access to the victims’ crypto wallets. Soon after, the funds were reportedly drained, with the equivalent of approximately $1.8 million in digital assets vanishing from the accounts.
Long, complex investigation unmasks suspects
What followed, according to the Gassin-Saint-Tropez gendarmerie, was a lengthy and highly technical investigation. The fraudsters reportedly operated under fake identities, moved frequently across French territory, and made efforts to cover their tracks, complicating the work of detectives.
Despite these obstacles, investigators managed to trace them back to the Paris region, where they are said to reside. Both suspects reportedly have prior criminal records for similar forms of financial deception, which helped connect the dots between this case and past offenses.
Once in custody, the pair denied all accusations during questioning. Nevertheless, the evidence gathered was deemed strong enough for prosecutors to proceed.
Judicial supervision and asset seizures
The suspects are currently under judicial supervision as the case moves through the courts. They are expected to stand trial before the Draguignan Criminal Court on September 1, facing charges including organized fraud and failure to justify the origin of their financial resources.
Pending the outcome, French judges have ordered the seizure of three properties on the Côte d’Azur linked to the suspects. These real estate assets are estimated to be worth a combined €1.9 million and could eventually be used to compensate the victims if the defendants are convicted.
France’s broader struggle with crypto-related crime
Although investigators describe the Ramatuelle case as a “classic rip deal” – relying on charm, confidence and manipulation rather than physical violence – it is part of a darker trend. France has seen a notable surge in offences targeting holders of digital assets, ranging from sophisticated cons to brutal physical attacks.
Authorities recorded 77 incidents in 2026 involving kidnapping, unlawful detention, extortion or attempted offences directly tied to the crypto sector, a sharp increase from 45 such cases in 2025. These numbers, shared by the interior ministry with industry representatives, highlight how quickly criminals are pivoting toward crypto as a lucrative target.
Officials say the situation is serious but stress that emergency security measures introduced over the past year are beginning to show effect. Around 200 people have reportedly been arrested in connection with attacks or preventive operations linked to crypto-related violence and extortion. At the same time, hundreds of industry players have registered with a rapid-identification framework designed to help law enforcement act quickly when incidents occur.
From “crypto wrench attacks” to high-end fraud
Analysts who track crypto crime note that France accounts for a disproportionate share of reported physical attacks on crypto holders and their families. These include kidnappings, home invasions and assaults where victims are forced, under threat, to unlock wallets or transfer funds.
Such incidents are often dubbed “crypto wrench attacks,” referring to the idea that no matter how strong the digital security, a simple physical threat can still compel access. Recent data suggests there have been dozens of such kidnappings in France in 2026 alone, averaging roughly one incident every few days.
In contrast, the Ramatuelle villa case shows another side of the problem: criminals who use traditional white-collar methods – fake buyers, luxury property deals, forged identities and covert surveillance technology – to target wealthy individuals comfortable with crypto, but perhaps less experienced with its security pitfalls.
How scammers adapt classic real estate tricks to the crypto era
This case illustrates how old-school real estate fraud tactics are being updated for the digital asset age. Where scammers once used counterfeit bank guarantees, fake cashier’s checks or phony escrow accounts, they now ask victims to “prove funds” in cryptocurrency.
The pattern is often similar:
– Identify an affluent property owner or seller.
– Present a buyer who seems credible, often foreign and exceptionally wealthy.
– Offer an above-market price or unusually favorable terms to build trust.
– Introduce an urgent or technical requirement involving large sums in crypto.
– Create situations where the victim must access wallets or exchanges in front of the fraudsters.
– Secretly capture login data, keys or recovery phrases and empty the accounts.
Because luxury transactions can legitimately involve complex financial arrangements, victims may feel pressured not to question unusual demands, especially if they fear losing a rare, high-value deal.
Why wealthy individuals with crypto are attractive targets
Criminals increasingly view affluent property owners who also hold crypto as ideal victims. Several factors make this group particularly vulnerable:
1. High concentration of assets
Luxury homeowners often have significant net worth, and many have diversified into digital assets. A single wallet can hold millions, making them efficient targets.
2. Trust in “professional” environments
Negotiations involving villas, yachts or art frequently occur in settings that feel formal and secure – high-end offices, luxury hotels, or private villas. This sense of legitimacy can lower a victim’s guard.
3. Limited technical expertise
Some wealthy investors entered crypto through advisors or friends, relying on others to set up wallets or exchanges. They might not fully understand operational security, such as never exposing private keys or recovery phrases.
4. Desire for discretion
High-net-worth individuals sometimes avoid asking too many questions about crypto processes, fearing they might appear uninformed. Criminals exploit this reluctance to probe deeper.
Security lessons for crypto users in high-value transactions
The Ramatuelle case underscores several critical security principles for anyone using cryptocurrency in the context of large deals:
– Never share or display private keys or recovery phrases
No legitimate buyer, intermediary, bank or notary needs to see your seed phrase, private key, or full login process. If someone insists, the deal should be treated as suspicious.
– Avoid accessing wallets in front of strangers
If a counterparty demands proof of funds, consider using screenshots with sensitive details redacted, on-chain transaction histories from a separate device, or third-party proof-of-funds services that do not expose your keys.
– Use hardware wallets and separate devices
Keeping large sums in a hardware wallet reduces the risk of remote compromise. When showing balances, use a device that does not also store passwords or seed phrases, and never type a recovery phrase in a visible environment.
– Consult a legal or financial professional
For transactions involving millions, legitimate intermediaries such as notaries, lawyers, or regulated escrow providers can structure deals so that proof of funds is provided safely and in compliance with anti-money-laundering rules.
– Be wary of overgenerous offers
An offer significantly above market price, especially when paired with unusual conditions around crypto, is often a red flag rather than a stroke of luck.
How authorities are trying to respond
French law enforcement agencies are gradually adapting to these new forms of financial crime. Specialized cyber units now work alongside traditional fraud investigators, combining blockchain analysis with classic investigative techniques such as surveillance, financial tracing and informant networks.
Courts are also becoming more comfortable with freezing and seizing assets connected to crypto crimes, whether in the form of digital currencies or physical property acquired with illicit proceeds. The seizure of three Côte d’Azur properties in this case demonstrates that authorities are willing to move quickly to preserve wealth that might be used to compensate victims later.
At the same time, officials emphasize the importance of prevention. They encourage crypto holders – particularly those involved in public-facing or high-value sectors like real estate, finance or technology – to adopt strict security habits and to report any suspicious approaches, even if no crime has yet occurred.
The evolving face of crypto crime in Europe
The Ramatuelle villa scam captures a broader shift in how digital assets intersect with traditional crime. In the early years of cryptocurrency, illicit activity largely revolved around online hacks, exchange breaches and darknet markets. Today, the line between “crypto crime” and conventional organized crime is increasingly blurred.
Criminals who once specialized in real estate scams, art fraud, or luxury car deals are now folding crypto into their old playbooks, using it both as a target and as a tool for moving and concealing funds. This blend of digital theft and real-world social engineering creates complex cases that demand multidisciplinary responses.
As France and other European countries step up enforcement, the expectation is not that such crimes will disappear entirely, but that the cost and risk for perpetrators will rise. For crypto holders, particularly those engaged in large, cross-border deals, the message is clear: treat your digital wallets with the same, or greater, caution as a physical safe filled with cash and jewelry – especially when a supposedly perfect buyer appears with an offer that seems too good to be true.