French data leaks fuel wave of crypto-support vishing

Massive French data leaks have led to a rise in fraudulent phone calls impersonating cryptocurrency customer support. Scammers use leaked names, phone numbers, email addresses and fragments of account history to contact people across France and attempt to seize digital assets.

French authorities and cybersecurity firms reported a sharp increase in so-called vishing incidents over recent weeks. Call reports reference specific recent transactions and account details published in breaches to make calls appear legitimate and to lower recipients’ guards.

Attackers commonly pose as support agents for major exchanges or wallet providers. They place calls from numbers that look like official helplines, claim a security problem that requires immediate action and request one-time authentication codes, installation of remote-access software, or transfers to a temporary ‘secure’ address controlled by the caller. In some cases fraudsters cite scanned identity documents or partial credentials taken from the leaks.

The calls are concentrated in metropolitan areas with larger numbers of crypto users, including Paris, Lyon and Marseille, and occur throughout the day. Investigations show both mass-calling operations using scripts and smaller, targeted campaigns where callers build longer, personalized conversations to gain trust.

A cybersecurity researcher who requested anonymity described why these calls are effective: “When a caller uses a name, a recent transaction and part of an ID, it creates the impression the exchange itself is calling,” the researcher added. “That reduces the usual skepticism toward unsolicited support calls.”

Outcomes vary. Some people end the call without loss. Others follow instructions and later find funds missing from wallets or exchange accounts. One victim who granted remote access after a caller quoted a recent deposit reported that the app was used to transfer assets out of reach.

French authorities have urged people to treat unsolicited support calls cautiously and to verify any request through official websites or apps. Investigators are working to trace the origin of the calls, but caller ID spoofing and foreign-based call centers complicate efforts. Consumer protection groups report more requests for help from account holders contacted with specific personal details from recent exposures.

Security analysts say the leaks have lowered the cost and increased the accuracy of social engineering attacks because criminals can cross-reference multiple datasets to build convincing narratives for victims. Exchanges and wallet providers have repeated standard security guidance: confirm support requests through official channels, never share one-time codes or private keys by phone, and refuse pressure to move funds immediately.

Investigators encourage anyone targeted by these calls to report incidents to local police and to their platform’s fraud or support teams. Industry and consumer groups are discussing measures such as background checks on leaked datasets and stronger procedures for verifying customer identity on phone calls.