TLDR
- Two California high school students, aged 16 and 17, drove over 600 miles to Scottsdale, Arizona, disguised as delivery drivers to steal $66 million in cryptocurrency
- Police arrested the suspects after they fled the scene and recovered restraints, duct tape, and a 3D-printed firearm without ammunition
- Investigators say anonymous contacts on Signal messaging app directed the attack and sent $1,000 for supplies
- Both teens face eight felony charges including kidnapping and aggravated assault and will be tried as adults
- The case is the first US wrench attack of 2026, part of a rising trend that saw roughly 70 such incidents globally in 2025
Two teenagers from California are facing multiple felony charges after allegedly traveling to Arizona to carry out a violent home invasion targeting cryptocurrency worth $66 million. The suspects, aged 16 and 17, drove more than 600 miles from San Luis Obispo County to a residence in Scottsdale’s Sweetwater Ranch neighborhood.
BIZARRE PARALLELS: Two teens were arrested in an Arizona home invasion tied to an alleged $66 million cryptocurrency plot that happened the same day Nancy Guthrie was last seen before disappearing from her Tucson home about two hours away.https://t.co/J9MWMSangS
— Fox News (@FoxNews) February 6, 2026
The incident occurred on the morning of January 31. Court documents cited by local media show the teens wore delivery-style uniforms resembling those used by shipping companies.
The Attack
The suspects forced their way into the home and restrained two adults with duct tape. They demanded access to digital assets while assaulting the victims.
One victim told the attackers they did not own cryptocurrency. This denial led to further violence, according to court records.
An adult son in another part of the house called 911. Police arrived to find a woman screaming and a man struggling with one of the intruders.
The suspects fled in a blue Subaru. Officers stopped them at a nearby dead end shortly after.
Authorities recovered zip ties, duct tape, stolen license plates, and a 3D-printed firearm. The weapon contained no ammunition and its functionality remains unclear.
Anonymous Recruitment
The younger suspect told investigators both teens had been recruited through the encrypted messaging platform Signal. Unknown individuals using the aliases “Red” and “8” allegedly directed the operation.
These contacts provided the victims’ home address and sent $1,000 to fund the attack. The money was used to purchase disguises and restraints from Target and Home Depot.
The suspect claimed he was pressured into participating. He said he was invited on a trip to “tie people up” for access to cryptocurrency.
Both teens were initially held in juvenile detention. Prosecutors plan to try them as adults.
Criminal Charges
Each suspect faces eight felony counts. These include kidnapping, aggravated assault, and second-degree burglary.
The older teen faces an additional charge of unlawful flight from law enforcement. Both were released on $50,000 bail with electronic monitoring devices.
Rising Pattern of Wrench Attacks
The Scottsdale case represents the first recorded US incident of 2026 involving physical violence to steal cryptocurrency. Security researcher Jameson Lopp’s public database tracks these so-called wrench attacks.
The database lists roughly 70 such incidents globally in 2025. This marks a sharp increase from about 41 cases in 2024.
Previous 2026 cases were recorded in France, Belgium, and the Philippines. Experts believe many incidents go unreported.
Security analysts say criminals increasingly use leaked personal data to identify targets. They also recruit young perpetrators online to reduce traceability.
A recent industry breach involving customer identity information has raised exposure risks. Investigators cited this as a factor in the rising threat.
In May, two 16-year-olds from Florida faced 22 felonies after allegedly kidnapping a man following a Las Vegas crypto event. They reportedly stole $4 million in digital assets with remote direction from another individual.
Authorities have not linked the Scottsdale incident to separate cryptocurrency ransom demands reported the same day in Tucson. The two cases occurred about two hours apart.
