Binance has rolled out a new security feature called Withdrawal Protection, giving users the ability to block outgoing on-chain transfers from their accounts for a chosen period of one to seven days. The default lock period is 48 hours. The move comes as violent “crypto wrench” attacks — incidents in which criminals use physical force, kidnapping, home invasion, or direct intimidation to compel victims to transfer digital assets — have become an increasingly visible threat worldwide.
How the feature works
According to the source material, Withdrawal Protection is a user-activated account safeguard rather than an automatic platform-wide control. Once enabled, it prevents all outbound on-chain withdrawals from a Binance account during the selected protection window. Importantly, the account itself remains accessible: users can still log in and continue trading, while only outgoing crypto transfers are blocked.
Binance also allows users to prepare for exceptional situations by enabling an early-cancel bypass setting before the lock is activated. If that option has not been configured in advance, no withdrawals can be made until the protection period expires — not even by the account holder. This makes the tool particularly relevant for scenarios in which a user fears being forced to unlock or move funds under pressure.
At the same time, the feature has clear limits. The report notes that the protection does not override court orders. It is also enforced through Binance’s internal systems rather than through cryptographic self-custody mechanisms, meaning users are relying on the exchange’s infrastructure and controls instead of a trust-minimized blockchain-native security model.
Why Binance introduced it now
The timing reflects a broader security problem that has spread well beyond online exploits and wallet compromises. In recent years, criminals targeting crypto holders have increasingly turned to physical coercion. These attacks differ from traditional cybercrime because the victim is confronted in the real world and pressured to sign a transaction, reveal access credentials, or authorize transfers immediately.
Public data cited in the article from security researcher Jameson Lopp shows that there have been 316 recorded kidnapping and ransom incidents involving crypto holders since 2014. Of those, 79 ransom-focused attacks were recorded in 2025 alone, with at least 27 more already reported in 2026. The numbers suggest that the risk is no longer anecdotal or isolated to a handful of high-profile cases.
Separate figures from blockchain security firm CertiK reinforce the same trend. Verified incidents of physical coercion targeting crypto holders reportedly rose 75% in 2025, reaching 72 confirmed cases. Incidents involving assault rose even faster, with a reported 250% increase over the same period. Together, those figures help explain why exchanges are beginning to consider features aimed at reducing the damage that can occur when account owners are threatened offline.
France emerges as a focal point
The article identifies France as the most acute hotspot in the current wave of crypto-related extortion and kidnapping. Local authorities have recorded 135 incidents since 2023. That total includes 67 cases in 2025 and 47 more already in 2026, which the report describes as roughly one attack every 2.5 days this year.
French prosecutors in Paris have reportedly charged 88 suspects, including minors, as part of a coordinated crackdown on organized crypto robbery networks. The scale of the prosecutions suggests that the issue has evolved beyond opportunistic crimes into a structured criminal market centered on identifying and coercing digital asset holders.
The crisis gained even more public attention in early 2026 when armed attackers reportedly attempted to kidnap David Prinçey, the head of Binance France, at his home in Val-de-Marne. He was not present at the time, but the incident underscored how senior figures linked to the crypto sector can also become targets, whether because of their visibility, perceived wealth, or association with major exchanges.
A platform-level response to an offline threat
Withdrawal Protection is notable because it addresses a category of risk that conventional account security tools do not fully solve. Two-factor authentication, device whitelisting, anti-phishing codes, and password hygiene are useful against remote attackers, but they offer limited protection when a victim is under direct physical threat and is forced to comply in real time.
By introducing a delay or hard block on withdrawals, Binance is effectively giving users a way to create time-based friction between coercion and asset movement. In practical terms, that may help reduce the chance that funds can be extracted immediately during a violent incident. Even if an attacker gains temporary access to the account owner or the account itself, the inability to move assets on-chain could alter the economics of the crime.
Still, the tool is not a complete solution. Because it depends on exchange-side enforcement, it applies only within the Binance environment and only to the extent that users proactively enable it. It also does not replace broader personal security practices, nor does it eliminate the risks faced by holders who keep assets in self-custody or across multiple venues. But as physical threats become more common, exchange-based defensive controls may become a more prominent part of user security planning.
Overall, Binance’s launch of Withdrawal Protection signals a shift in how the industry is thinking about safety. The central concern is no longer just hacking in the digital sense, but the growing overlap between crypto wealth and real-world criminal coercion. In that context, the ability to lock withdrawals for up to seven days represents a pragmatic response to a threat that is becoming harder for the market to ignore.