Crypto Investor Evan Luthra Says Oxford Robbers Took Over $2 Million

Crypto investor Evan Luthra says five masked men stole more than $2 million from him in Oxford, England, in November 2025 — after beating him and unlocking his phone with Face ID. He has detailed the incident publicly, and the numbers he cites trace a fast, methodical operation rather than a opportunistic street crime.

Luthra said the men entered his private vehicle once it turned onto a quiet road. They assaulted him. Then they used his own face to open his device, and the clock started running. In roughly 30 minutes, he said, the attackers moved more than $1.5 million in crypto out of his Binance account and about $600,000 in Ether (ETH) from his Gate account. They also took a Richard Mille watch before leaving.

What does this change for crypto holders?

The practical question is the one every phone-carrying crypto user should now be asking: if someone physically controls you, do they control your exchange accounts too? On Luthra's account of events, the answer was yes. Biometric access — Face ID — converted a violent street robbery into a full drain of two centralized exchange wallets, executed inside half an hour.

That speed matters. It leaves almost no window for the victim to alert exchanges, freeze devices or rotate credentials while the attack is underway. The control that biometric login grants to a legitimate owner transfers just as completely to anyone holding the phone in front of the owner's face.

How much money came back?

Some of it, and the recovery effort shows where the system worked. Luthra said Binance and MEXC helped freeze and recover funds after the fact. Binance returned approximately $370,000, and Luthra put total recoveries close to $1 million.

That leaves a gap of roughly $1 million or more still unaccounted for, alongside the watch. It's a stark split: exchange-side intervention clawed back a meaningful share of the stolen crypto, but nearly half of the reported haul remains outstanding.

The recovery also illustrates the trade-off at the center of this story. Funds held on centralized exchanges can be frozen by those exchanges when a theft is reported quickly — something that is generally impossible with self-custodied wallets moved to new addresses. The same custodial structure that put $2 million behind a single Face ID scan also gave Binance and MEXC the ability to intervene.

The physical-security dimension

For high-profile investors, the incident marks a grim data point in a broader pattern of concern: visible wealth in crypto can translate into targeted physical risk. Luthra's attackers, by his account, knew what they wanted, moved with a plan, and finished inside 30 minutes.

No arrests, charges or law-enforcement confirmations appear in Luthra's public account of the Oxford attack, and his figures are his own. What's on the record is the recovery: about $370,000 back from Binance, close to $1 million returned overall. How much of the remainder is traced, frozen or permanently gone will determine the real final cost of those 30 minutes in Oxford.