Former FBI Agent Admits Stealing $2.5M in Crypto From Wallets in His Own Cases

A former FBI agent, Patrick Yaroch, has pleaded guilty to stealing about $2.47 million in crypto. He took the money from wallets the bureau controlled in its own investigations. For the market it is a reminder that the weak spot in security can sit inside the team that chases thieves.

What exactly did Yaroch admit?

Patrick Steven Yaroch, 37, of Ashburn, Virginia, pleaded guilty to wire fraud and money laundering. The court in Alexandria set sentencing for March 4, 2027, and he faces up to 20 years in prison.

From 2017 to early 2025 he worked in the FBI's Boston division, on a squad handling a hostile nation state that prosecutors do not name. He then moved to counterintelligence, where he could reach systems holding crypto keys collected in cases.

Both charges sound dry, but the meaning is simple. Wire fraud covers the deception itself carried out through electronic transfers, while money laundering describes an attempt to hide where the funds came from. One charge is about the theft, the other about the traces left behind.

At first the public figure was around $1 million (that was in August, when the case first surfaced). The total in the plea agreement came out far higher, and that matters for the scale of the story.

How did the scheme work?

To follow the mechanics, recall how the bureau ends up holding crypto. In cases, investigators obtain suspects' keys or seed phrases (a set of words that restores a wallet). The FBI also creates its own wallets for sting operations. Whoever holds that data can sign a transfer, and no hack is needed. The blockchain is public, so every such move is visible to everyone, but without keys or a record of the owner an address is just a string of characters.

According to the charging documents, Yaroch worked like this.

• Start: no later than December 2024 he began draining wallets of subjects in other cases, state-backed hacking groups and at least one wallet the FBI had set up for an operation.
• In total there were about 100 fraudulent transfers using data from 35 separate investigations.
• He swapped the loot into other cryptocurrencies and ran it through extra transactions to blur the trail.
• Part of the money went to credit cards, car payments and other loans.

What did this damage inside the FBI?

According to the plea agreement, Yaroch's actions compromised several investigations into criminal groups and adversary states. The sources and methods the bureau uses to collect foreign intelligence were hit as well.

The problem goes deeper than the money. When funds suddenly leave a wallet under watch, its owner can guess that someone else holds the keys. One transfer can wreck a case that took months to build.

How was he caught?

He turned himself in. On July 29 Yaroch broke down while talking to a former colleague at the Justice Department's National Security Division and said he had made "very poor decisions" involving crypto wallets. He then went to FBI headquarters. He said he had grown frustrated that the bureau "could not or would not act" against an adversary's crypto accounts, so he decided to "take matters into his own hands."

At first he described 10 to 12 transfers worth under $1 million. The figure in his plea agreement turned out to be almost two and a half times higher. A search of his home two days later turned up a Trezor hardware wallet, three passports and a slip of paper with seed phrases.

Some of the money sat on Kraken, about $188,600, mostly in dollars and USDC, with a little in Squid and Bitcoin. Another $933,800 was parked in the Suilend protocol on the Sui blockchain, reached through the Slush wallet app. By his own account he picked Suilend simply because the logo looked like a water drop. Agents moved about $925,000 to government wallets, but the $165,600 held in dollars on Kraken could not be taken the same way.

What do ChatGPT and a vineyard have to do with it?

After the thefts, Yaroch started looking for a place to go with the money.

This is the oddest detail of the case. Yaroch asked a chatbot how to grow his capital and where to live in the European Union. After it suggested buying a vineyard in Portugal, he gave local lawyers power of attorney to get a tax ID and planned a trip for September.

So the plan for a new life existed before the confession, and stolen money was already paying off debts.

What should a crypto holder take from this?

Security breaks where keys land in someone else's hands. Government systems are no exception. The bureau stored access to wallets from dozens of cases, and one person with privileges emptied part of them.

For an ordinary user the lesson is down to earth. Keep your seed phrase away from services and acquaintances, and hold main savings on a hardware wallet such as Ledger, where the key never sits in a file or the cloud. For the bureau it is a question of control, meaning who can move seized funds and under whose signature.

The practical minimum is simple for everyone. Check who gets access to your wallet and why. Never keep a recovery phrase as a screenshot. And remember that trusting one person without a second signature stays a risk, even if that person carries a federal badge.