They get your home address because the bank or exchange has a breach but let's throw the people who try build privacy tools in jail.
A 35-year-old Hong Kong man has been sentenced to seven years in prison after a home invasion in which a gang of attackers traumatized a B.C. family with beatings, waterboarding and sexual assault while stealing some $2.2 million from their crypto accounts.
Court papers reveal that on the evening of April 27, 2024, the family answered a knock at the front door of their house, revealing two men dressed in Canada Post uniforms and wearing face masks. They said they had a package that required a signature.
When the family’s daughter, a student, went to get her father, the men entered the house and were followed by two more, all wearing gloves and masks. They spoke in Mandarin, Cantonese and English and referred to each other only by numbers, one to four.
The intruders restrained the family members, pushing their heads down and binding their wrists with zip ties. They then took the family’s cellphones and laptops and demanded passwords, threatening to cut or kill them if they were not provided. One had a firearm or imitation firearm.
The home invasion lasted 13 hours.
There's a lot more pretty horrible details in the article.
The link stopped working. Here's a working link: https://winnipegsun.com/news/b-c-family-tortured-for-13-hours-by-thieves-impersonating-mailmen-in-2m-crypto-heist
Here's the article on MSN: https://www.msn.com/en-ca/news/canada/b-c-family-tortured-for-13-hours-by-thieves-impersonating-mailmen-in-2m-crypto-heist/ar-AA1QU0ko
Thanks for the updated link. I must have been too zealous in stripping off the tracking stuff.
Security is all about friction and inconvenience. If you have convenient access to USD 1.6M, there are scenarios like this that you're not secure against.
But if they had been secure against it, wouldn't the attackers have cut his genitals off? Of course there's a chance, but the calculus doesn't really check out. It's a significant and unusual escalation for no realistic gain.
The problem starts when the attackers know roughly how much you have, so they won't leave you alone until they get it all. Travel Rule helps to make this info leakable.
In this case it also didn't help that the husband had been bragging about his bitcoin trading success, even lying about having 200 bitcoin.
Oh, did not see that detail. Indeed an idiot.
Yeah, it's not in the article, but in the judgment, which is worth a read: https://www.canlii.org/en/bc/bcpc/doc/2025/2025bcpc192/2025bcpc192.html
It the article link working for people? I get a "page does not exist".
Sorry, I screwed it up stripping the tracking. See pinned comment.
This is the real danger of KYC, not that a gov will give a shit about your DCA from an exchange.
All these KYC data will be instant hand over to data brokers and from there nobody knows who can get it for few bucks.
Here is the other side of such stories, how and who is getting these KYC data, listen this Darknet Diares episode: https://darknetdiaries.com/episode/162/