Europol's Quantum Warning: What It Means for Messaging

Europol says encrypted data collected today could face future quantum decryption. Here's what post-quantum messaging means, what ML-KEM-768 actually protects, and where Z-TEXT fits.

Europol, October 7, 2026: the quantum threat is coming. Z-TEXT protects three layers: who talks to whom (zk-SNARKs), what is said (ML-KEM-768 quantum-resistant key on every one-to-one message
Message today. Still protected tomorrow. Source: Europol, 7 October 2026.
Z-TEXT privacy bird

Europol's Quantum Warning: What "Harvest Now, Decrypt Later" Means for Private Messaging

Key findings

  • On October 7, 2026, Europol published two reports on the quantum threat: one on crypto wallets, and one on "harvest now, decrypt later".
  • "Harvest now, decrypt later" means encrypted data is copied today and decrypted once a powerful enough quantum computer exists.
  • The EU recommends that member states adopt a post-quantum migration strategy by the end of 2026.
  • Z-TEXT encrypts every one-to-one message with a hybrid X25519 + ML-KEM-768 key (NIST FIPS 203) before the message is written to the BitcoinZ blockchain.
  • Z-TEXT protects three layers: who talks to whom (zk-SNARKs), what is said (ML-KEM-768), and who you are (no phone, no email, no SIM).
  • Honest limits: Channels, Communities, the wallet and signatures are not yet quantum-resistant, and the Z-TEXT app is not independently audited yet.

Z-TEXT is a privacy messenger built on the BitcoinZ blockchain, with no phone number, no email and no SIM. On October 7, 2026, Europol published two reports on the quantum threat. This article explains what they say, what it means for private messages, and what Z-TEXT does, and doesn't, protect.

Z-TEXT Shielded Permanence: a green zk-SNARKs shield over a chain of BitcoinZ blockchain blocks, with the words "No one can read it. No one can erase it." Z-TEXT messages stay permanently on-chain and unreadable to anyone but the recipient.
Shielded Permanence: on-chain forever, readable only by the recipient. With a quantum-resistant key on every one-to-one message.

❓ 1. What did Europol announce on October 7, 2026?

Europol's European Cybercrime Centre published two reports.

The first, "Quantum computing and cryptocurrencies", names crypto wallets as the main point of exposure, not blockchains. (Source: Europol)

The second, "Harvest Now, Decrypt Later", was written with Carlos III University of Madrid. Both reports recommend preparing now, before a deadline appears.

Mini-resume

On October 7, 2026, Europol's European Cybercrime Centre published two reports on the quantum threat. The first names crypto wallets as the main point of exposure. The second, "Harvest Now, Decrypt Later", was written with Carlos III University of Madrid. Both recommend preparing now.

❓ 2. What does "harvest now, decrypt later" mean?

An attacker copies encrypted data today and stores it.

No quantum computer is needed for that step.

Once a powerful enough quantum computer exists, the attacker decrypts the archive.

Mini-resume

"Harvest now, decrypt later" means an attacker copies encrypted data today, without a quantum computer, and decrypts it once a powerful enough quantum computer exists.

❓ 3. Why do encrypted messages have long-term value?

A message about a source, a deal or a health problem can still matter in 10 years.

In September 2026, the EU's three financial supervisors (EBA, EIOPA and ESMA) warned that anything intercepted today with long-term value is already at risk. (Source: Decrypt)

Mini-resume

Private messages can stay sensitive for years. In September 2026, the EU's financial supervisors warned that anything intercepted today with long-term value is already at risk from future quantum decryption.

❓ 4. Why does post-quantum cryptography matter now?

Moving to new cryptography takes years.

Estimates for Q-Day, the day a quantum computer breaks today's public-key cryptography, run from 2030 to 2032 or later.

The EU recommends that member states adopt a post-quantum migration strategy by the end of 2026. (Source: Decrypt)

Mini-resume

Cryptographic migrations take years, and Q-Day estimates run from 2030 to 2032 or later. The EU recommends that member states adopt a post-quantum migration strategy by the end of 2026.

❓ 5. What is ML-KEM-768?

ML-KEM is a key encapsulation mechanism: a way for two people to agree on a secret key.

ML-KEM is designed to resist attacks from quantum computers.

768 is the mid-level parameter set.

Mini-resume

ML-KEM-768 is a post-quantum key encapsulation mechanism: a way for two people to agree on a secret key, designed to resist quantum computers. 768 is the mid-level parameter set.

❓ 6. What does NIST FIPS 203 mean?

FIPS 203 is the US government standard that defines ML-KEM.

NIST published FIPS 203 in August 2024, as one of its first post-quantum standards. (Source: NIST FIPS 203)

Mini-resume

NIST FIPS 203 is the US government standard that defines ML-KEM. NIST published it in August 2024, as one of its first post-quantum standards.

❓ 7. How do today's messengers approach the problem?

Signal added post-quantum key exchange (PQXDH) in 2023 and a post-quantum ratchet (SPQR) in 2025. (Source: Signal)

Apple added PQ3 to iMessage in 2024. (Source: The Hacker News)

Both protect message content. Both tie your account to a phone number or an Apple ID.

Messenger Post-quantum key Identity needed
Signal Yes (PQXDH, SPQR) Phone number
iMessage Yes (PQ3) Apple ID
Z-TEXT Yes (hybrid ML-KEM-768, one-to-one) None (24-word seed)

Mini-resume

Signal added post-quantum key exchange in 2023 (PQXDH) and a post-quantum ratchet in 2025 (SPQR). Apple added PQ3 to iMessage in 2024. Both protect message content, and both need a phone number or an Apple ID. Z-TEXT uses a hybrid ML-KEM-768 key on one-to-one messages and needs no phone number.

❓ 8. How does Z-TEXT approach it?

Z-TEXT protects three layers.

🔒 Who

zk-SNARKs (zero-knowledge proofs, which prove a transaction is valid without revealing it) hide who is talking to whom on the BitcoinZ blockchain.

🔒 What

Z-TEXT encrypts every one-to-one message with a hybrid key that combines X25519 and ML-KEM-768 (NIST FIPS 203) before the message is written to the blockchain. Recording the chain today and breaking classical cryptography later is not enough to read it.

🔒 You

No phone number, no email, no SIM. Your Z-TEXT identity is a 24-word seed.

(Source: Z-TEXT security docs)

Mini-resume

Z-TEXT protects three layers: zk-SNARKs hide who talks to whom; a hybrid X25519 + ML-KEM-768 key locks every one-to-one message before it reaches the BitcoinZ blockchain; and Z-TEXT needs no phone number, no email and no SIM.

❓ 9. What does Z-TEXT protect, and what doesn't it?

Z-TEXT part Quantum-resistant?
One-to-one message content ✅ Yes
Channels and Communities ❌ Not yet (classical)
BitcoinZ shielded layer and wallet ❌ Not yet (set by BitcoinZ)
Signatures ❌ Not yet (Ed25519)

Shielding hides the sender and the receiver on the blockchain. It does not hide network data like your IP address or timing.

The Z-TEXT zk-SNARKs messenger has not been independently audited yet. A public bug bounty is open.

Mini-resume

Z-TEXT one-to-one message content is quantum-resistant. Z-TEXT Channels, Communities, the BitcoinZ shielded layer, the wallet and Ed25519 signatures are not yet. Shielding does not hide IP address or timing, and the Z-TEXT app is not independently audited yet.

❓ 10. Why does decentralised messaging change the threat model?

Z-TEXT has no central message server.

Messages live on the BitcoinZ blockchain, copied on every node. No one can delete them.

That also means anyone can harvest them, forever.

This is exactly why the quantum-resistant lock on the message itself matters. The chain is public, so the message has to stay unreadable on its own.

BitcoinZ lives at getbtcz.com.

Mini-resume

Z-TEXT has no central message server: messages live permanently on the public BitcoinZ blockchain. Anyone can harvest them, so each one-to-one message carries its own quantum-resistant lock and stays unreadable on its own.

❓ 11. Sources

  1. Europol, Quantum computing and cryptocurrencies (7 October 2026)
  2. Decrypt, EU supervisors' Q-Day warning (September 2026)
  3. NIST FIPS 203, ML-KEM
  4. Signal, post-quantum ratchets (SPQR)
  5. The Hacker News, Apple PQ3
  6. Z-TEXT security docs
  7. Can Quantum Attacks Break Z-TEXT's Wallet or Messages?
  8. BitcoinZ

Message today. Still protected tomorrow.

Download Z-TEXT for Android, macOS, Windows or Linux at z-text.com/downloads.

Keywords: Europol quantum warning · harvest now decrypt later · quantum-resistant messaging app · ML-KEM-768 · post-quantum messenger · private messaging app · zero-knowledge proof messenger · no phone number messaging app · Signal alternative

🔗 Also read:   Quantum Attacks and Z-TEXT  ·  Signal vs Z-TEXT  ·  WhatsApp vs Z-TEXT  ·  Session vs Z-TEXT  ·  Telegram vs Z-TEXT

👉 No Phone. No Email. No SIM.
Just Z-TEXT.
Z-TEXT privacy bird

Enjoyed this? Add Z-TEXT as a preferred source on Google