Coinbase forensics help convict five in London crypto kidnapping

Coinbase’s blockchain forensics team traced stolen cryptocurrency in real time and alerted UK police while a violent incident was under way, court records show. The tracing work was used in a prosecution that ended with five convictions at St Albans Crown Court.

The incident began in July when a 36-year-old man from Hertfordshire met four people at a Shoreditch bar in east London. The group later forced him back to his home and coerced him into opening multiple accounts, including on Coinbase, before attempting to move funds.

Coinbase’s internal monitoring flagged the account as being used under duress. The company contacted police while transfers were occurring, and its Global Intelligence team mapped the flow of assets on the public blockchain as transactions moved between wallets and exchanges.

Investigators tracked about £1,900 ($2,500) in cryptocurrency and additional fiat value through several wallets. One crypto address was linked in court documents to a suspect who held a Coinbase account. Blockchain records and expert testimony were presented at trial.

Four defendants were found guilty of conspiracy to rob, kidnapping and false imprisonment. A fifth defendant was convicted of money laundering. The Hertfordshire Major Crime Unit led the police investigation that supported the prosecution.

In a company statement, Paul Grewal, Coinbase’s chief legal officer, wrote, “Our investigations team worked with UK law enforcement to successfully track and convict five individuals involved in crypto-related kidnapping. Blockchains allowed us to spot and trace their actions in real time as it was happening.”

Security firm CertiK recorded 34 verified physical attacks on token holders between January and April 2026. London has been reported as a frequent location for robberies that target mobile wallet applications.

Exchanges and law enforcement routinely use blockchain tracing to follow transfers from wallet to wallet and to identify points where funds are converted to fiat or linked to user accounts. Those on-chain records are then used alongside traditional investigative work in criminal cases.