France’s DAC8 directive is designed as a tax compliance tool. Francis Pouliot says it’s a kidnapping factory.
Pouliot, CEO of Bull Bitcoin, has filed a landmark lawsuit with France’s supreme administrative court to annul the rule. He argues DAC8 forces exchanges to report granular user data - names, addresses, full transaction histories - to a pan-European database the state cannot secure. On TFTC, Pouliot said France expects 150 to 180 crypto kidnappings in 2026 alone, averaging one every 2.5 days in the first quarter, fueled by leaked government data sold by convicted bureaucrats to criminal gangs.
“France is the crypto kidnapping capital of the world.”
- Francis Pouliot, TFTC: A Bitcoin Podcast
The database is the target. Pouliot points to a breach of the French national agency for secure credentials in early 2026 that exposed up to 19 million accounts. On Bitcoin And, David Bennett highlighted the grim reality of 'wrench attacks,' where criminals target crypto holders for non-reversible assets. France ranks as the second-most dangerous epicenter for such physical attacks globally.
The legal challenge represents a strategic pivot from writing privacy code to fighting in court. Pouliot told TFTC the industry has a 'cuckoldry' problem, where large firms cheer for regulations like MiCA to build moats, smuggling in expanded surveillance. Bull Bitcoin secured its regulatory license before filing, ensuring standing to fight from within the system.
On Rabbit Hole Recap, Matt Odell framed it as a three-pronged fight: building tools, using them, and litigating. If courts fail, jurisdictional competition is the only lever - move your business to a state that doesn’t treat your financial history as public property.
“The rule forces exchanges to share names, addresses, and full transaction histories across 27 member states.”
- Matt Odell, Rabbit Hole Recap
The suit hinges on proportionality and human rights. Pouliot argues the state already has tools for warranted police investigations and doesn’t need an automatic annual data dump to tax authorities. He aims to repeal DAC8, delay it, or mitigate its harm. If the French challenge fails, Pouliot plans to take the fight to the European Court of Justice.
