Mentioned in This Article
1. Toronto police announce arrests in a crypto kidnapping
Toronto police announced on Wednesday, October 14, that seven men have been arrested and charged with a combined 82 offenses after the abduction of a cryptocurrency exchange owner in July. Three of the accused serve in the Canadian Armed Forces. The charges include kidnapping for ransom and a long list of firearms offenses, and investigators say they recovered a stockpile of weapons and ammunition, most of it allegedly taken from the military.
Police have not named the victim, and they have not said which exchange he owns. What they have described is a targeted attack: according to investigators, he was chosen because of his access to digital assets. The case is one of the more striking recent examples of a crime that has become a recurring concern for the cryptocurrency industry, in which wealthy holders and company executives are physically confronted rather than hacked.
The involvement of serving or reserve military members has pushed the case beyond the usual boundaries of a ransom investigation. Chief Myron Demkiw said he was concerned that three of the people accused are trained members of the armed forces, and he pointed to the risks officers face whenever they investigate cases involving weapons. The investigation is still open, even though police say no further arrests are expected.
For readers following crypto security, the announcement matters for a practical reason. Most public discussion of theft in this industry centers on software flaws, compromised keys and fraudulent contracts. A kidnapping for ransom belongs to a different category, one in which the weakness being exploited is a person rather than a protocol, and where the consequences include physical harm as well as financial loss.
2. What happened to the exchange owner on July 25?
According to police, the victim was approaching his vehicle near Finch Avenue East and Bayview Avenue in Toronto on July 25, 2026, when he was abducted at gunpoint. He was handcuffed and assaulted. Investigators say the men holding him tried to gain access to his cryptocurrency and to the security systems that protect his business.
The man was eventually released. Before that happened, police say, he was threatened and warned not to contact the authorities. Police did not describe how he was freed or how the investigation first identified suspects, and they have not disclosed whether any ransom was paid.
Chief Superintendent Joe Matthews said the victim was targeted because of his access to crypto assets, adding the word "allegedly" to keep the statement consistent with the fact that none of the accused has been convicted. The detail about the attackers seeking access to business security systems is notable. It suggests that the aim was not only to extract a transfer of funds but also to reach the operational controls of a company that holds customer assets.
Police have not said how the suspects learned about his holdings or where he was when they first approached him beyond the cross-streets cited, and those details are likely to emerge, if at all, through the court process rather than in police statements.
3. Who has been charged, and when were they arrested?
Police made the arrests in three stages across roughly two months. On July 26, one day after the abduction, officers arrested Saiefeddine Adem, 22, and Raheem Bishop-Jackson, 24. On August 11, they arrested Talarambage Fernando, 22, James Moreau, 29, and Christian Darbandi, 39. The final two arrests came on September 24, when police detained Jack Miley, 24, and Suhaib Alekozai, 39.
In total, seven men face the 82 charges. Police confirmed that three of them, Fernando, Moreau and Miley, are members of the Canadian Armed Forces. Fernando and Moreau are reservists with the 7th Toronto Regiment. The Department of National Defence has said both were removed from military duties after their arrests.
Police report that no suspects remain outstanding and that they do not expect to charge anyone else. Even so, they have not fully mapped how the seven men relate to one another. Matthews said investigators are still trying to determine how all of the suspects fit together in what he described as a puzzle. That candid admission indicates that the roles of individual defendants, and the question of who planned the abduction, are likely to be tested in court rather than settled in a police briefing.
The spread of the arrest dates shows how the inquiry widened. The first two arrests came within a day of the abduction, which suggests investigators moved quickly on early evidence. The later arrests, on August 11 and September 24, indicate that identifying the remaining suspects required further work, including the searches that turned up the weapons and ammunition.
4. What did police find in the searches?
Searches of homes and vehicles produced a substantial cache. Officers seized a shotgun and two 9mm firearms that had 3D-printed receivers, along with two silencers. They also found GPS tracking devices and handcuffs, as well as large quantities of methamphetamine and cocaine.
The ammunition drew particular attention. Police say they recovered more than 2,700 rounds, and that about 2,500 of them were stolen from the Canadian Armed Forces. The scale of the theft is the main reason the case is being treated as a matter of military oversight as well as a kidnapping. Ammunition on that scale does not normally leave military custody without a failure of controls somewhere along the way, though police have not explained how the rounds were taken.
Firearms built with 3D-printed parts add another layer of concern for law enforcement. Such weapons can be assembled outside the regulated supply chain and are harder to trace than factory-made guns. Their presence alongside silencers and stolen military ammunition suggests the group had access to equipment well beyond what is typical in a criminal case that begins as an extortion plot.
Police also reported finding drugs in significant quantities, which indicates that the investigation touched on activity beyond the abduction itself. Whether prosecutors link those offenses to the kidnapping, or treat them as separate counts within the 82 total, has not been specified. The combined list of charges, spanning kidnapping for ransom, numerous firearms offenses and the other offenses police cited, gives prosecutors wide latitude in how they build the cases against individual defendants.
5. How police describe the threat of crime tied to digital assets
In a statement, Matthews said criminals keep adapting their methods and looking for fresh opportunities to profit. He characterized the case as an example of more sophisticated, targeted offenses in which digital assets are the objective. That framing reflects a change that police forces in several countries have noted: when cryptocurrency can be moved quickly and, once sent, is hard to recover, a person who controls the keys becomes an attractive target for those willing to use violence.
The risk is not limited to individual investors. People who run exchanges, custody services and other crypto businesses hold access that can extend to customer funds, which raises the stakes of any coercion. An attacker who forces an executive to hand over credentials, or to disable security checks, may gain far more than a single wallet. That is why the reported attempt to reach the victim's business security systems stands out.
Chief Demkiw also made a broader point about accountability. He said that the military, the police and public officials are all subject to the law. His remark reads as a response to the unusual fact that members of the armed forces are among the accused, and it signals that the service affiliation of the defendants will not shield them from prosecution in the civilian courts.
Each of these earlier cases ended differently, from a ransom payment to a long prison sentence to a delayed trial, but they share a pattern: the victims were identified as people with substantial digital wealth or a visible public profile in the sector. The Toronto allegations fit that pattern, while adding the unusual element of armed forces members among the accused and of ammunition drawn from military stocks.
6. Crypto kidnappings in Canada are not new
The Toronto case follows several earlier incidents in the country. In 2024, WonderFi chief executive Dean Skurka was released after a ransom of $720,000 was paid. In September 2025, a man who had kidnapped a victim and demanded a bitcoin ransom of $1 million was sentenced to 13 years in prison.
Another case that drew wide attention involved Aiden Pleterski, who calls himself the "Crypto King." He was abducted in December 2022. One of the men who took him later pleaded guilty to nine charges, including kidnapping, assault and firearms offenses, while the trial of a co-defendant was delayed.
Taken together, these cases show how physical coercion has become part of the threat landscape for people with large holdings or senior positions in the industry. Security experts often describe such crimes as a low-technology route around strong cryptographic protections, because a password or a hardware key can be defeated more easily by threatening its owner than by attacking the underlying software.
7. What happens next in the case
The seven accused now face the court process on 82 charges. Police have not announced trial dates, and the allegations have not been tested in court. The central open questions are how the group was organized, who selected the victim, and how the stolen ammunition left military control.
Matthews said the investigation is ongoing even though police do not anticipate more arrests. The Department of National Defence has already taken the step of removing the two reservists from duty, and further decisions about the service status of the three military members will depend on how the criminal cases progress.
For the crypto industry, the case is likely to reinforce calls for executives and large holders to treat personal security as seriously as digital security. For military authorities, the recovery of roughly 2,500 stolen rounds raises its own questions about how ammunition stocks are tracked and protected. Neither issue is resolved by the arrests alone, but both are now part of the public record of this case.