Chinese Real Estate Executive Killed After $2M Crypto Ransom Demand In Phnom Penh


A Chinese real estate business owner living in Phnom Penh has been killed after kidnappers demanded $2 million in cryptocurrency from his wife. The victim, identified as Yang Weixin, was a 53-year-old Chinese national and real estate company owner living in the Cambodian capital. His body was found on May 30 in a white Toyota Prius abandoned in Phnom Penh’s Dangkor district.

The abduction began the previous night. Security footage from Yang’s apartment building showed three unidentified men forcing him from the parking area into a vehicle at about 8 p.m. on May 29. Around 3 a.m. on May 30, messages sent from his phone demanded the crypto ransom from his wife. The final message arrived shortly before 9 a.m., after which contact stopped. Police later notified the family that Yang had been found dead.

The violence appears to have escalated quickly. Investigators found blood, knives, tape, plastic ties and other evidence in and around the vehicle. Early findings described torture, beating, stabbing and suffocation before the body was dumped with the car. The case is being handled as a kidnapping, extortion and homicide investigation.

Police are also examining whether an older business conflict played a role. Yang’s wife told investigators that her husband had been involved in a debt dispute with another Chinese national since 2014, and that the pressure allegedly resurfaced in 2025. No final motive has been confirmed, and the hunt for those involved is still active.

Crypto Crime Keeps Moving Into The Physical World

The Phnom Penh killing is part of a wider shift in crypto crime. The danger is no longer limited to wallet drainers, malware, fake apps or exchange account takeovers. When criminals believe someone can unlock large digital assets under pressure, the person, the family and the routine can become the target.

That pattern has already shaped recent coverage in Europe. France has become the clearest warning sign after a surge in reported crypto wrench attacks, where criminals use kidnapping, home invasion or direct threats to force transfers. The attempted kidnapping involving the wife of The Sandbox cofounder Sébastien Borget showed how relatives can become leverage even when the public crypto figure is not the easiest target.

Cambodia’s case is different in location and victim profile, but the mechanics are familiar. Attackers do not need to break cryptography if they can identify a high-value person and use violence. A crypto ransom adds speed, cross-border settlement and a perceived laundering path, even when blockchain tracing can later help investigators follow funds.

Physical Security Is Now Part Of Crypto Security

The strongest self-custody plan now has to account for real-world exposure. Public wealth displays, leaked identity records, visible business disputes, predictable parking routines, conference habits and family awareness all matter. A hardware wallet cannot protect someone whose address, car, daily schedule or relatives are already known to a violent group.

Better operational security means reducing single-person control and reducing personal visibility. Multisig wallets, withdrawal delays, separated custody, limited hot-wallet balances, private travel habits and clear family instructions can make it harder for criminals to turn pressure into an immediate transfer.

A practical wrench-attack defense starts with the assumption that the attacker may not care about the device first. Recent U.S. robbery cases have shown how forced access, home invasion and intimidation now sit beside phishing and malware in the same crypto-crime stack. The Phnom Penh killing gives that trend a harsher edge: for high-value targets, the attack surface may begin long before anyone opens a wallet app.