- Spanish police arrested a suspect wanted in the kidnapping of Ledger co-founder David Balland.
- French and Spanish authorities traced the fugitive across Spain before the Benalmádena arrest.
- The gang allegedly demanded €10 million and mutilated Balland during the January 2025 attack.
Spanish police have arrested a fugitive wanted by French authorities over the January 2025 kidnapping of Ledger co-founder David Balland and his partner. According to an official report from the Civil Guard, the suspect was found in Benalmádena, Málaga, after investigators tracked his movements across several Spanish provinces.
The arrest followed a joint operation between Spain’s Civil Guard and French authorities, who had already detained the other alleged members of the group. Investigators say the gang demanded a ransom of €10 million, or about $11.5 million, during the attack.
A Violent Crypto-Linked Kidnapping
French authorities say the kidnapping began as Balland and his partner dropped their children off at school in central France. Three masked men, reportedly armed with firearms, ambushed the couple and took them to separate locations.
Investigators said the attackers used extreme violence to pressure the victims and their contacts into meeting ransom demands. As part of that intimidation, the kidnappers amputated one of Balland’s fingers, according to police statements.
Law enforcement later freed both victims after several hours in captivity and launched a broad crackdown on the network behind the attack. At the original crime scenes, authorities arrested 10 suspects, while one man managed to flee France before police closed in.
How the Manhunt Reached Spain
Spanish police said the wanted man entered Spain and initially stayed in the Valencia region with his partner and a friend. Investigators said the group kept a low profile and used short-term rentals booked through online platforms.
Authorities also said expenses were paid with a bank card belonging to a fourth person, a tactic designed to reduce traceable links. From Valencia, the trio moved to Seville, then Cádiz, before settling in Benalmádena on Spain’s southern coast.
The Civil Guard’s Central Operational Unit led the search inside Spain and eventually located the suspect late last week. Officers described the arrest as high-risk and said a large deployment was used for the detention, transfer, and court custody process.
Spanish police said the operation reflected both the suspect’s dangerous profile and the risk of interference from the wider criminal organization. He was later taken to the courts in Fuengirola, where extradition proceedings began.
Related: UK Moves to Dissolve Zedxion Exchange Over Deceptive Crypto Filings
Extradition and the Broader Crackdown
The arrest effectively closes the gap in the French investigation, with authorities saying all identified gang members have now been detained. The case is proceeding under a European Arrest Warrant issued by France, a mechanism that streamlines extraditions within the European Union.
Under that system, courts in Spain and France can coordinate directly without relying on slower diplomatic channels. That process has made cross-border arrests faster in cases involving violent organized crime and financial extortion.
The case also lands amid a rise in violent attempts to force crypto holders and executives to surrender digital assets. French authorities have recently responded to several attacks targeting industry figures, relatives of company employees, and social media personalities tied to crypto.
For Spanish police and French investigators, the Balland case has become one of the clearest examples of how crypto-related crime can move across borders quickly. The latest arrest, however, shows law enforcement can move just as fast when agencies share intelligence and pursue suspects across jurisdictions.
