Tim Heath, a prominent Australian crypto billionaire and founder of Yolo Group, narrowly escaped a violent kidnapping attempt in Estonia by biting off part of a kidnapper’s finger, according to recent courtroom revelations.

Brutal Ambush Thwarted in Seconds

The incident took place in July 2024, when two men disguised as painters ambushed Heath in the stairwell of his Tallinn apartment building. Heath, worth an estimated $1.61 billion AUD, was reportedly targeted for his cryptocurrency holdings.

During the 30-second struggle, one attacker — later identified as Allahverdi Allahverdiyev, an Azerbaijani national and former boxer — attempted to silence Heath by covering his mouth. In response, Heath bit through the assailant’s index finger, allowing him to break free and retreat to his apartment.

Heath lost a tooth, but his quick thinking helped thwart the attempted abduction.

Plot Months in the Making

Estonian prosecutors revealed that the kidnapping plot involved at least seven individuals, some of whom entered the country using forged Georgian passports. The attackers used GPS tracking devices to stalk Heath’s movements and purchased painters’ uniforms to disguise themselves.

Their plan was to transport Heath to a rented sauna house, where they intended to coerce him into transferring crypto funds. A hacker was reportedly enlisted to facilitate the theft.

Aftermath and Ongoing Threats

The attackers fled the scene, abandoning their getaway van. A severed finger was later discovered 100 meters from the crime scene.

Since the attack, Heath has reportedly spent over $3.1 million on personal security and moved to a new residence. Prosecutors claim that weeks later, Heath received a Telegram message containing photos of his apartment and a demand for 30 Bitcoin — roughly $3.3 million USD at the time.

Though no further contact was made, authorities believe the threat remains active.

Legal Proceedings Underway

Two suspects — Allahverdiyev and Georgian citizen Ilgar Mamedov — are currently on trial in Estonia. Allahverdiyev admitted he was promised €100,000 for the kidnapping but claims he later advised the group to abort the mission. Mamedov, accused of being the getaway driver, denies involvement, calling the charges “a fabrication.”

Three members of the gang remain unidentified, and two others, including the alleged mastermind Najaf Najafli, are still wanted by authorities.


Key Takeaways:

  • Tim Heath fought off attackers by biting off a kidnapper’s finger.
  • The plot involved forged passports, GPS tracking, and a planned crypto theft.
  • Heath has since invested millions in private security, with a potential ongoing threat still under investigation.
  • Legal proceedings continue as multiple suspects face trial in Estonia.

Disclaimer

This content is for informational purposes only and does not constitute financial, investment, or legal advice. Cryptocurrency trading involves risk and may result in financial loss.

logo

blockto.io

info@blockto.io

Blockto.io Copyright © 2025, All rights reserved

News
Rates
Buy
More
We use cookies to personalize content and ads, provide social media features, and analyze our traffic. In accordance with GDPR/AVG and EU cookie regulations, data is processed only with your consent. We may share information about your use of our website with our social media, advertising, and analytics partners, and you can manage or withdraw your consent at any time. View more
Cookies settings
Accept
Privacy & Cookie policy
Privacy & Cookies policy
Cookie name Active

Privacy Policy

At BitxJournal.com, we respect your privacy and are committed to protecting your personal data. This Privacy Policy explains how we collect, process, store, and protect personal information in accordance with the General Data Protection Regulation (GDPR) and AVG (EU privacy legislation).

1. Data Controller

BitxJournal.com acts as the data controller for all personal data processed through this website.

2. Personal Data We Collect

We may collect and process the following categories of data:

Personal Data

  • Name and email address (when you subscribe to newsletters or contact us)

Technical & Usage Data

  • IP address, browser type, operating system

  • Device information

  • Pages visited, referral sources, and interaction data

This data is collected via cookies, log files, and analytics technologies.

3. Legal Basis for Processing

We process personal data only when a lawful basis exists, including:

  • Consent – when you explicitly agree (e.g., cookies, newsletter sign-up)

  • Legitimate interest – to operate, secure, and improve our website

  • Legal obligation – when required by applicable laws

You may withdraw your consent at any time.

4. Purpose of Data Processing

Your data is processed for the following purposes:

  • Operating and maintaining the website

  • Improving content, usability, and performance

  • Sending newsletters or updates (only with consent)

  • Analyzing traffic and user behavior

  • Responding to inquiries or support requests

5. Cookies & Consent Management

We use cookies and similar technologies in compliance with EU Cookie Law.

  • Non-essential cookies are placed only after explicit user consent

  • Users may accept, reject, or manage cookie preferences at any time

  • Consent can be withdrawn without affecting prior lawful processing

Detailed cookie information is available in our Cookie Settings panel.

6. Third-Party Data Processing

We may share limited data with trusted third-party service providers, including:

  • Analytics providers (e.g., Google Analytics)

  • Advertising partners (for personalized or non-personalized ads)

These third parties act as data processors and process data only under contractual obligations compliant with GDPR/AVG.

7. International Data Transfers

Where data is transferred outside the European Economic Area (EEA), we ensure appropriate safeguards are in place, such as Standard Contractual Clauses (SCCs) or equivalent legal mechanisms.

8. Data Retention

We retain personal data only for as long as necessary to fulfill the purposes outlined in this policy or as required by law.

9. Data Security

We implement appropriate technical and organizational security measures to protect personal data against unauthorized access, alteration, disclosure, or destruction.

10. Your GDPR Rights

Under GDPR/AVG, you have the right to:

  • Access your personal data

  • Rectify inaccurate or incomplete data

  • Request data erasure (“right to be forgotten”)

  • Restrict or object to processing

  • Data portability

  • Withdraw consent at any time

  • Lodge a complaint with a supervisory authority

11. Changes to This Privacy Policy

We reserve the right to update this Privacy Policy at any time. Any changes will be posted on this page with a revised effective date.

12. Contact Information

For privacy-related inquiries or GDPR requests, contact:

📧 Email: support@blockto.io
🌐 Website: https://blockto.io

Save settings
Cookies settings