Crypto millionaire and investor Evan Luthra has revealed details of a kidnapping in Oxford, England, in which five masked men forced him to hand over more than $2 million in cryptocurrency in about 30 minutes. Police had not previously named the victim publicly.
In an interview with BeInCrypto, Luthra said the most costly period came after the attack, when he spent hours without a phone while the stolen funds were moved.
The attack
Luthra, a Forbes 30 Under 30 investor, was in London for Halloween last year and had also attended an award ceremony at the House of Lords and spoken at Oxford University. On November 4, 2025, he left an Oxford event with four friends in a private car booked through an acquaintance. The driver had been driving him for several days.
On the way back to London, the driver turned into a secluded, tree-lined lane. Five masked men got into the car, punched Luthra and told the group they were only there for him.
“Within the first ten seconds, I realised this was a kidnapping. I also realised I was going to lose millions of dollars,” Luthra said. He chose not to resist. “There were five guys in my kidnapping, so I gave them everything,” he said.
The attackers first took his special-edition Richard Mille watch, which police valued at around £450,000. They then unlocked his phone using Face ID. From his Binance account, they withdrew several assets worth just over $1.5 million. They also drained roughly $600,000 in Ethereum from his Gate exchange account, then tried to access his bank accounts.
After about half an hour, the attackers left with everyone’s phones. According to police, the vehicle was left in the Five Mile Drive area of north Oxford.
“They already knew who I was. I have a pretty public profile. The promoter who arranged the driver knew who I was, and I believe he was involved in organizing what happened,” Luthra said.
The hours after
With no phones, the group walked to a local police station. The attack had happened in the afternoon, but they were still giving statements after midnight. During that time, Luthra had no internet access and could not warn anyone or try to stop transfers already in progress.
“Looking back, I consider that my biggest mistake. If I had first been able to get back to my hotel, access my laptop and message the people I knew at the exchanges, I believe we could have secured a lot more of the money,” he said.
The delay was critical because exchanges can generally freeze funds only while they remain on their platforms. Once stolen crypto moves to private wallets or other services, recovery becomes far harder.
Luthra said the group was lucky in that he was hit but no one suffered lasting injury.
Partial recovery
Once Luthra regained access to his devices, he contacted his contacts at Binance and MEXC. Both exchanges froze some of the stolen funds and helped return part of them.
Binance returned roughly $370,000. The recovery relied on a UK court order under the Proceeds of Crime Act (POCA), which allows courts to seize and return criminal proceeds. Luthra said it was the first POCA order involving Binance. The London law firm Cooke, Young & Keidan secured the orders and handled the recovery.
MEXC also blocked funds and shared data on where some of the remaining money went, supporting the tracing work.
In total, Luthra said he has recovered just under $1 million. He declined to give the exact figure, and a large share of the stolen funds remains missing.
“The exchanges acted quickly once I reached them,” he said. In his view, faster contact would have allowed more money to be frozen before it moved elsewhere.
Investigation and trial
Thames Valley Police has run what Detective Sergeant Stuart McMaster called a “complex investigation,” covering CCTV, number-plate cameras, and cryptocurrency and financial inquiries.
“We are supporting the victims and keeping them updated during our complex investigation,” McMaster said in the force’s November 2025 appeal.
Officers arrested four men from London, Birmingham and Kent that month, aged between 19 and 37. All were released on bail at the time.
In December 2025, police charged Abdul Malik Cali, 24, with five counts of conspiracy to commit robbery. He was arrested at Heathrow Airport and remanded in custody at the time, according to local reports.
Luthra said several arrests have now been made and the case involves multiple defendants. The trial was due to start this month but has been moved to November 2027. According to Luthra, the court now needs five weeks instead of four, and no slot that long was available sooner.
“I understand that they need to do it properly and give the case enough time. But it is still very disappointing to have to wait another year,” he said. He added that police told him a robbery of this size was rare for Oxford in recent times.
Wider trend
Luthra believes his visibility made him a target. His case fits a wider pattern of so-called wrench attacks, in which criminals use physical force to make victims hand over crypto. According to Chainalysis, such attacks stole a record $58 million in 2025. The blockchain analytics firm counted another $30 million taken in the first half of 2026. France has seen the sharpest rise, including a recent home invasion targeting a crypto worker and his family.
Chainalysis also notes that attackers who cash out through exchanges leave the most traceable trail. Luthra’s partial recovery shows that window exists, but also how quickly it closes.
“You can always make money. You can always buy another watch… But you cannot get back your life or undo permanent physical harm,” Luthra said.
