Turkish Police Seized 6 Cold Wallets From Richard Heart. The Jurisdiction That Matters Is the One Holding the Hardware

In this report
Key Takeaways04
01

Justice Minister Akın Gürlek's account, as reported by The Block and Bitcoin.com News: Heart and his wife were detained on Wednesday, October 14, at a residence in Istanbul's Beşiktaş district after surveillance by the national intelligence agency and Istanbul police; 3 people described as his bodyguards were detained afterward; searches of 15 addresses produced $7.15 million in cash, 6 cold wallets, 28 watches, 7 firearms with 1,400 rounds, and phones, laptops and desktop computers. The minister did not say what the wallets hold or whether Finland has filed an extradition request. The first Turkish press figures ($4 million, 64 watches) were lower on cash and higher on watches.

02

The detention rests on an Interpol red notice issued at Finland's request in December 2024 over suspected aggravated tax fraud between June 2020 and April 2024 and an alleged assault on a 16-year-old; a Finnish court had ordered him detained in absentia in September 2024. 10 weeks after the notice, Judge Carol Bagley Amon of the Eastern District of New York dismissed the U.S. Securities and Exchange Commission's (SEC) suit over more than $1 billion in token sales because a U.S. citizen living in Finland and talking to the whole internet had not aimed his conduct at the United States. Both outcomes were correct on their own terms. Only one of them decided where he could live.

03

A keeps a key off a computer. It does not keep the key from a state that holds the device and the owner. What a seized wallet yields depends on 3 variables: the PIN (Ledger devices wipe after 3 wrong entries, Trezor's Safe 3 and Safe 5 after 16, and Coldcard offers decoy and self-destruct PINs), whether a separates the written words from the money, and the local law on compelled disclosure, which runs from the United Kingdom's 2-year maximum sentence for refusing a key-disclosure notice to a U.S. patchwork in which Utah treats a spoken passcode as testimony and Massachusetts compels it once the state proves you know it. In London, 4 devices seized in 2018 had given up more than 61,000 bitcoin by July 2021.

04

The posture that follows is the one a already demands: no device you carry should be able to spend the estate alone; keep the words and the money apart with a passphrase you have actually restored from; know which disclosure regime you are walking into before a border; and keep the phones and laptops around the wallet as empty as the wallet. answer the custodian problem. They do not answer the state, and a key that lives in 1 device, in 1 pocket, in 1 jurisdiction is a single point of attachment.

What Happened

Turkey's justice minister, Akın Gürlek, confirmed on Saturday, October 17, that Richard James Schueler, known as Richard Heart, the founder of Hex and PulseChain, was detained on Wednesday, October 14, at a residence in Istanbul's Beşiktaş district, together with his wife, after surveillance by the National Intelligence Organization (MİT) and the Istanbul police.

3 people identified as his bodyguards were detained afterward. According to The Block's and Bitcoin.com News' accounts of the statement, searches of 15 addresses produced $7.15 million in cash, 6 cold wallets, 28 watches, 7 firearms and 1,400 rounds of ammunition, and phones, laptops and desktop computers.

The minister did not say what the 6 wallets contain; the examination of the seized material is described as ongoing.

The legal basis is an Interpol red notice issued at Finland's request in December 2024. Finnish police suspect Schueler of aggravated tax fraud between June 2020 and April 2024, in the hundreds of millions of euros according to Europol's most-wanted listing, and of assaulting a 16-year-old; a Finnish court ordered him detained in absentia in September 2024.

A red notice is not an arrest warrant: it asks police everywhere to locate and provisionally detain a person pending extradition, and each country decides whether to act. Turkey acted 22 months later. Gürlek did not say whether Finland has filed an extradition request, no Turkish court decision had been reported as of this writing, and Schueler has been convicted of nothing anywhere.

In the United States, the only case against him was dismissed.

The ruling he won said one regulator could not reach him. It never said no one could. For a holder, the jurisdiction that counts is the one the hardware is sitting in.
◇

The Court He Beat and the Country That Holds Him

On July 31, 2023, the U.S. Securities and Exchange Commission (SEC) sued Schueler, Hex, PulseChain and PulseX in the Eastern District of New York over token offerings it said raised more than $1 billion. On Friday, February 28, 2025, Judge Carol Bagley Amon dismissed the case without reaching the merits: the SEC had not shown that a U.

S. citizen living in Finland had aimed his conduct at the United States, and his online communications were, in the court's words as quoted by Decrypt, 'untargeted, globally available information.' The agency let its April 21 deadline to amend pass and said it would not refile. His lawyer called it a complete victory; on the question the court decided, it was.

The ruling protected him from a single regulator's civil suit. It said nothing about the country where he had lived, or about the one he chose to live in afterward. A protocol has no jurisdictional contact point: no office to serve, no board to enjoin, no custodian to order. A person has an address, and the address is the contact point.

The October 14 operation needed no theory of personal jurisdiction over Hex. It needed a residence in Beşiktaş and a notice Finland filed in 2024. Whatever the 6 cold wallets hold, on Wednesday morning they sat in the one jurisdiction that mattered: the one their owner was standing in.

◐

What a Seized Cold Wallet Yields

A hardware wallet exists to keep a private key off a computer. It was never designed to keep the key from a state that holds both the device and the owner, and what a seizure yields comes down to 3 variables. The first is the PIN. Ledger devices factory-reset after 3 wrong entries; Trezor's Safe 3 and Safe 5 erase the wallet after 16; Coldcard adds trick PINs that open a decoy wallet, silently wipe the seed, or destroy the secure element.

A wipe costs nothing to an owner who holds the recovery words, and nothing to an investigator who finds the words on a card in the same drawer. The second variable is whether a Bitcoin Improvement Proposal 39 (BIP-39) passphrase stands between the words and the money: the bare words are a valid wallet with an empty passphrase, every other passphrase opens a different wallet from the same words, and whoever recovers the card restores what the card opens and nothing else.

The third variable is the law on compelled disclosure, and no device setting changes it. In the United Kingdom, a notice under section 49 of the Regulation of Investigatory Powers Act 2000 requires a person to hand over a key or render the data intelligible; knowingly failing to comply carries up to 2 years in prison under section 53, or 5 where national security or child indecency is involved, and the statute presumes that someone who held the key before the notice still holds it.

The United States has no Supreme Court ruling and a split beneath it: Massachusetts' highest court held in 2019 that the state may compel a passcode once it proves the suspect knows it; Utah's held in 2023 that ordering a suspect to speak one aloud demands testimony. The precedent that matters most for holders is simpler.

In 2018 the Metropolitan Police seized 4 devices from a London safe-deposit box and a residence, and by July 2021 it had recovered the more than 61,000 bitcoin on them. The skeptic's reading of the Istanbul inventory is fair: a 'cold wallet' on a police list can be any USB stick, the 6 may hold nothing, and no one has said the state will try to open them.

All true, and none of it is the owner's decision anymore.

▪

The Travel Posture

Step 1, the estate: nothing you carry should be able to spend it alone. A 2-of-3 with keys in different places, ideally in different countries, turns a seized or lost device into a replacement job, and with a co-signer and a written procedure a detention does not freeze a family's savings.

Step 2, the words: separate them from the money with a passphrase, keep a modest balance on the bare seed, and test it before it holds anything real by wiping the device, restoring from words plus passphrase, and confirming the balance. A passphrase you have never restored from is a theory.

Step 3, the border: decide what you will say before you are asked. U.S. Customs and Border Protection searched nearly 15,000 devices in the second quarter of 2025, a record; a U.S. citizen cannot be denied entry for refusing a password, but the device can be held, and a non-citizen can be refused.

'I don't remember' is not a plan where possession is presumed. Step 4, the perimeter: the phones and computers on the Istanbul list are where any examination starts. No photographs of seed cards, no watch-only wallet on the phone that crosses the border; the inventory around a cold wallet usually says more than the wallet.

Step 5, the limit: none of this is a license to obstruct a lawful order. In several jurisdictions refusing is itself a crime, destroying a key after a notice can be another, and this piece is not legal advice. The design goal is the one a wrench attack already imposes: a seized device must not be a seized estate.

◯

What This Means for You

The lesson is not about Heart, whose guilt or innocence in Finland is a question for a Finnish court and whose U.S. case ended in his favor. The lesson is the inventory. A U.S. citizen with a federal ruling in his pocket and a Finnish problem behind him was picked up at home in a third country, and 6 cold wallets went into evidence bags alongside the phones and laptops they were paired with.

If the bags held your devices, what would open?

The answer marks the edge of the thesis, and it should be stated plainly. Private keys answer the custodian problem. They do not answer the state: a hardware wallet is a defense against the computer and the counterparty, not against a warrant executed at your door. The property that keeps a court order from freezing your coins is that there is nothing to serve the order on; once there is a person to serve, the order is served on the person, and the devices in the room come with them.

Key control that lives in 1 device, in 1 pocket, in 1 jurisdiction is a single point of attachment. Spread across keys and places, behind a tested passphrase, with a plan for who signs if you cannot, it becomes the reason a seizure is a bad day rather than the end of the estate.

▤

What to Watch

Whether Finland files a formal extradition request, and how a Turkish court rules on it, will decide whether the Finnish allegations are ever tested. Any statement from Turkish authorities on what the 6 wallets contain, or on whether access was obtained, is the first evidence of how this seizure resolves.

The Qian litigation in London, now headed for an appeal by the victims' lawyers, remains the clearest live record of what a state does with 61,000 bitcoin once a seized device has given them up.

Sources

Where this report's claims come from.

[1]

The Block — 'Turkey confirms Hex founder Richard Heart's arrest, says police seized $7.15 million and six cold wallets', October 2026

[2]

Bitcoin.com News — 'Turkey's Justice Minister Confirms Richard Heart's Istanbul Bust', October 2026

[3]

FinanceFeeds — 'Richard Heart Detained in Istanbul as Police Seize $7.15 Million in Cash', October 2026

[4]

CoinDesk — 'Hex founder Richard Heart arrested in Istanbul on Finnish Interpol Red Notice', October 2026

[5]

Decrypt — 'Hex Founder Richard Heart Detained in Istanbul on Interpol Red Notice: Report', October 2026

[6]

The Block — 'Hex and PulseChain founder Richard Heart detained in Istanbul: reports', October 2026

[7]

Protos — 'Richard Heart arrested in Turkey almost 2 years after Interpol red notice', October 2026

[8]

The Block — 'Hex founder Richard Heart wanted by Interpol, Europol on charges of tax evasion and assault', December 2024

[9]

Decrypt — 'US Court Dismisses SEC Case Against Richard Heart, Hex', Vince Dioquino, 2025

[10]

Decrypt — 'Hex Founder Richard Heart Claims Victory as SEC Abandons Fraud Lawsuit', April 2025

[11]

U.S. Securities and Exchange Commission — Litigation Release No. 25794, 'Richard J. Schueler a/k/a Richard Heart, Hex, PulseChain, and PulseX', July 2023

[12]

Coldcard — 'Trick PINs' documentation, accessed October 2026

[13]

Trezor — 'PIN protection on Trezor devices', accessed October 2026

[14]

Ledger Academy — 'Ledger PIN Code: What You Need to Know', accessed October 2026

[15]

UK Legislation — 'Regulation of Investigatory Powers Act 2000, section 53: Failure to comply with a notice', accessed October 2026

[16]

Just Security — 'Split Over Compelled Decryption Deepens With Massachusetts Case', Michael Price and Zach Simonetti, April 2019

[17]

American Bar Association Litigation News — 'Cell Phone Passcode Ruling Deepens Fifth Amendment Rift', 2024

[18]

Linklaters — 'Interpol in the spotlight: a bite-sized guide to Red Notices', June 2020

[19]

CryptoPotato — 'UK Police Seized Bitcoin Worth Nearly $1.8B From $6.3B China Investment Fraud', 2024

[20]

Mobile ID World — 'U.S. Border Device Searches Hit Record High with Nearly 15,000 Inspections in Q2 2025', 2025

[21]

OPNorange archive — 'A UK Judge Says Chinese Law Decides Who Owns 61,000 Seized Bitcoin. Being Owed Money Is Not Owning the Coins', October 14, 2026

[22]

OPNorange archive — 'CertiK Counted 52 Wrench Attacks in 6 Months as Home Invasion Becomes the Leading Vector', July 24, 2026

Act on this

This report names hardware you may own — this edge was matched at build time and every signal is auditable below.

See the vetted hardware list in the Kit →matched: trezor · ledger · coldcard · hardware wallet