A multimillion-dollar cryptocurrency theft in the United States escalated into a violent kidnapping conspiracy after criminals allegedly targeted the parents of a 19-year-old Connecticut man who participated in the theft of more than $245 million worth of Bitcoin — one of the largest individual cryptocurrency thefts on record, exceeding the scale of many exchange breaches and placing it among the most significant person-to-person crypto heists documented to date.

Federal authorities say the case involved two separate groups of alleged kidnappers, a daytime carjacking, surveillance outside the family's home, and a second plot to carry out a home invasion.

The first attack unfolded in Danbury, Connecticut, on Aug. 25, 2024, just one week after the theft of approximately $245 million in Bitcoin from a victim in Washington, D.C. According to the U.S. Department of Justice, six Florida men were arrested after allegedly crashing into a Lamborghini Urus carrying the parents of the 19-year-old, forcing them from the vehicle and kidnapping them. The incident was interrupted after witnesses contacted authorities and an off-duty FBI agent happened to be nearby.

The case has since expanded into a broader federal investigation involving alleged cryptocurrency theft, social engineering, kidnapping, and attempted robbery. Federal prosecutors say a separate group of men from Missouri and California later monitored the same family for days as they allegedly prepared another attempt to obtain cryptocurrency.

The story has drawn attention not only because of the enormous value of the Bitcoin involved, but also because it illustrates how digital theft can move from online fraud into physical-world violence — a progression that security researchers have warned about as cryptocurrency adoption has grown.

A $245 Million Bitcoin Theft Set the Events in Motion

At the center of the investigation is Veer Chetal, a 19-year-old from Danbury who pleaded guilty to federal conspiracy charges connected to a cryptocurrency theft worth more than $245 million.

According to federal court records and prosecutors, Chetal worked with Malone Lam and Jeandiel Serrano in an online social-engineering operation targeting cryptocurrency holders. The group allegedly used information obtained about wealthy individuals and contacted victims while pretending to be representatives of major technology or cryptocurrency companies.

Chetal and Serrano were accused of impersonating technical-support personnel, including representatives associated with companies such as Google and Yahoo. The objective was to convince victims to provide sensitive information that could ultimately allow the conspirators to access their cryptocurrency accounts.

On Aug. 18, 2024, authorities say the scheme resulted in the theft of more than 4,100 Bitcoin from a victim in Washington, D.C. At the time, the cryptocurrency was worth approximately $245 million.

Social engineering involves manipulating people into revealing information or taking actions that compromise their own accounts. In cryptocurrency cases, attackers may attempt to convince victims that their wallets or accounts have been compromised. They can then pose as support representatives and instruct the victim to provide information supposedly needed to protect their funds. The danger is that once a victim provides private credentials, recovery phrases, or other sensitive information, the attacker may be able to transfer assets directly. These attacks have become one of the most prevalent vectors in cryptocurrency crime, in part because blockchain transactions — once confirmed — generally cannot be reversed, leaving victims with little recourse compared to traditional banking fraud.

According to court documents described by prosecutors, the group associated with Chetal allegedly used this type of approach repeatedly. Chetal was reportedly involved in approximately 50 separate incidents, with the broader activity generating millions of dollars in proceeds.

The Attack on the Family Came Days Later

One week after the Bitcoin theft, Chetal's parents were allegedly targeted in Danbury. According to the Justice Department, six men from Florida were involved in the violent carjacking and kidnapping attempt. The group allegedly targeted the couple as part of an effort to obtain cryptocurrency believed to be connected to their son.

The attack occurred in broad daylight. Authorities said the couple was traveling in a Lamborghini Urus when another vehicle crashed into them. Additional suspects allegedly arrived in a van, removed the couple from their vehicle, and assaulted them before attempting to take them away.

Witnesses reportedly called police, while an off-duty FBI agent happened to be driving nearby. The combination of the witnesses' calls and the agent's presence helped authorities respond rapidly. Danbury police arrested six Florida men in connection with the incident. The rapid response prevented the kidnapping from developing into a prolonged hostage situation.

Investigators believe the kidnappers were attempting to use Chetal's family to reach the cryptocurrency associated with the earlier theft. The parents were not accused of being responsible for their son's conduct. Yet prosecutors say they became targets because criminals believed they could be used to obtain access to cryptocurrency.

A Second Group Allegedly Watched the Family

The first kidnapping attempt did not end the alleged effort to obtain cryptocurrency from the family. Federal authorities later identified another group that prosecutors say became involved in a separate plot.

The Justice Department has said James Schwab, Adam Iza, and Saif Faiq were charged in connection with an alleged conspiracy related to the attempted kidnapping. According to prosecutors, the three men allegedly planned and coordinated the operation.

Faiq was accused of helping recruit participants and conducting surveillance. Iza allegedly communicated with other participants and helped coordinate logistical arrangements. Schwab was accused of assisting with funding and transportation and of having a previous altercation with Chetal at a Miami nightclub.

The federal indictment says the men were connected to a plan to kidnap Chetal's parents and obtain cryptocurrency. In November 2025, federal prosecutors announced charges against Schwab, Iza, and Faiq. The allegations included conspiracy to commit kidnapping and conspiracy to interfere with commerce by robbery.

Surveillance Lasted for Days

The second operation was reportedly more deliberate. Rather than immediately attacking the family, investigators say members of the group monitored the victims and prepared for a potential home invasion. According to reporting based on court documents, the alleged conspirators used surveillance equipment and communications tools while watching the family.

The investigation described activity involving air rifles and walkie-talkies as the suspects allegedly prepared for the planned operation. The surveillance reportedly continued for approximately two days.

In a June 2026 announcement, the Justice Department said Saif Faiq pleaded guilty to an offense related to his involvement in the attempted robbery of Bitcoin and kidnapping in Danbury. The department said the investigation showed that Faiq and others planned the operation in an attempt to steal some of the Bitcoin.

Chetal Cooperated With Federal Investigators

After federal investigators approached Chetal in September 2024, he began cooperating with authorities, according to court documents. He ultimately agreed to testify against his alleged co-defendants. His cooperation became a major factor in the federal investigation into the larger cryptocurrency operation and the kidnapping attempts involving his family.

However, prosecutors later alleged that Chetal had failed to disclose another cryptocurrency theft. According to court records, the additional theft occurred in October 2024, after he had begun cooperating with investigators. The cryptocurrency involved was reportedly worth approximately $2 million. That allegation complicated his legal situation and contributed to his subsequent detention.

The additional cryptocurrency theft was reportedly carried out using another social-engineering scheme. According to court records reported by local media, a victim was contacted by individuals posing as representatives of Google and Gemini. The victim was allegedly persuaded that her cryptocurrency account was in danger and was instructed to provide sensitive wallet information. Approximately $2 million worth of cryptocurrency was then stolen.

Blockchain Tracking Became an Important Investigative Tool

The federal investigation into the Bitcoin theft relied partly on blockchain analysis. Bitcoin transactions are recorded on a public ledger. Although wallet addresses do not automatically reveal the identities of their owners, investigators can analyze transaction patterns and combine blockchain information with traditional evidence such as internet records, communications, and financial accounts.

In Chetal's case, investigators reportedly used blockchain-tracing methods to track cryptocurrency linked to the additional theft. A portion of the stolen funds was reportedly transferred to an online gambling account, and investigators eventually connected activity involving the account to an internet address associated with Chetal.

The case demonstrates one of the distinctive features of cryptocurrency investigations: although blockchain transactions can be pseudonymous, investigators can sometimes follow the movement of funds across multiple addresses and services. The same transaction history that allows criminals to move funds quickly across borders can also be used by investigators to reconstruct how stolen assets moved. However, despite these tracing capabilities, recovering stolen cryptocurrency remains difficult; funds can be laundered through mixers, cross-chain bridges, and privacy-focused services that complicate seizure efforts.

The Broader Criminal Activity

The headline figure of $245 million represents the most significant known theft associated with the investigation. But prosecutors say the broader criminal activity involved additional cryptocurrency thefts. Court records indicated that Chetal and his alleged co-conspirators were involved in other schemes that generated approximately $3 million in additional proceeds.

The federal investigation has revealed a network that prosecutors say extended beyond a single cryptocurrency theft. The original $245 million Bitcoin operation allegedly involved social engineering and impersonation. The kidnapping investigation revealed a separate group seeking to exploit the wealth associated with the stolen cryptocurrency. The subsequent discovery of another $2 million theft added another layer to Chetal's case.

Chetal's Legal Situation Remains Complicated

Chetal pleaded guilty to conspiracy charges associated with the $245 million cryptocurrency theft. He also agreed to cooperate with federal authorities and testify against his alleged co-defendants. However, prosecutors later raised concerns about his involvement in the additional $2 million cryptocurrency theft.

His immigration status has also complicated the case. Chetal was born in India and moved to the United States with his family as a child. Because of his criminal case and immigration circumstances, authorities have indicated that he could face deportation following the conclusion of the proceedings.

His father also reportedly lost his job following the kidnapping and the connection between the family and the cryptocurrency case.

As with all criminal charges, the defendants are presumed innocent unless proven guilty in court.

The Case Reflects a Growing Cryptocurrency Security Problem

The Danbury case is part of a broader trend in which criminals have increasingly targeted cryptocurrency holders. Large cryptocurrency holdings can sometimes be controlled through a relatively small amount of information, such as private keys or recovery credentials. That can make a person with substantial digital assets an attractive target.

Traditional financial accounts generally have layers of institutional protection. Banks can freeze accounts, reverse certain transactions, and provide customer-support mechanisms. Cryptocurrency wallets operate differently. Depending on the asset and custody arrangement, a transaction may be irreversible once it is confirmed on the blockchain. That creates strong incentives for criminals to obtain wallet credentials.

But the risks highlighted by the Danbury case are not limited to phishing emails and fake support calls. Criminals may attempt to identify the people behind cryptocurrency wallets and use physical intimidation to gain access to assets. Security researchers have long referred to this category of threat as a "$5 wrench attack" — the idea that physical coercion can bypass even the strongest cryptographic protections. Documented incidents of physical extortion targeting cryptocurrency holders have been reported in multiple countries in recent years.

The investigation also highlights the connection between online identity and physical security. Cryptocurrency users often share information about their holdings, lifestyle, or investments online — information that can become valuable to criminals. The physical kidnapping attempts represent a very different dimension of cryptocurrency crime. Online attackers can target victims without ever meeting them. Kidnappers must identify where a person lives, follow their movements, and physically confront them. The fact that multiple groups allegedly attempted to target the same family shows how the perceived value of cryptocurrency can dramatically raise the stakes.

The Coin Bureau account on X has also drawn attention to the case, helping circulate the details among cryptocurrency users and investors. The story has resonated within the crypto community because it illustrates a risk that is sometimes overlooked during discussions about digital-asset security. Most cryptocurrency security discussions focus on hacks, phishing, malware, and exchange breaches. The Danbury case highlights another threat: when criminals believe someone controls a large amount of cryptocurrency, they may attempt to obtain access through physical coercion.

The case also fits a documented pattern of young individuals executing major cryptocurrency thefts. Several high-profile crypto crime cases in recent years have involved perpetrators in their late teens or early twenties, exploiting the accessibility of blockchain tools and the speed at which digital assets can be transferred across borders. The combination of technical sophistication and limited deterrence has made social-engineering-driven crypto theft an area of growing concern for law enforcement agencies worldwide.

The case surrounding Veer Chetal has become one of the most striking examples of how a massive cryptocurrency theft can spill into the physical world. Federal authorities say Chetal, who was 19 at the time, participated in a social-engineering operation that resulted in the theft of more than $245 million in Bitcoin from a Washington, D.C., victim. One week later, his parents were allegedly attacked in broad daylight in Danbury by six Florida men who authorities say attempted to kidnap them in an effort connected to the stolen cryptocurrency.

The investigation eventually led to federal charges against James Schwab, Adam Iza, and Saif Faiq, who prosecutors say played roles in organizing the alleged kidnapping conspiracy. Chetal's own legal troubles also grew more complicated after authorities alleged that he was involved in another cryptocurrency theft worth approximately $2 million after he had begun cooperating with federal investigators. The remaining defendants face upcoming court proceedings where additional evidence is expected to be presented.

The chain of events demonstrates a growing reality of the digital-asset era: cryptocurrency theft is no longer limited to computer screens. When criminals believe that a person controls millions of dollars in easily transferable digital assets, the consequences can move into the real world.

Source: hokanews.com