Former FBI Agent Admits Crypto Wallet Theft Scheme
Former FBI agent Patrick Steven Yaroch has pleaded guilty to wire fraud and money laundering after authorities said he used cryptocurrency credentials held in FBI systems to take funds connected to 35 investigations.
The Department of Justice said Yaroch made approximately 100 fraudulent transfers and gained approximately $2,474,380.66, a figure often rounded to $2.5 million in coverage by Decrypt and Yahoo.
What happened
According to the U.S. Department of Justice, Yaroch, 37, of Ashburn, Virginia, admitted stealing cryptocurrency through credentials that the FBI had collected during investigations. The credentials related to wallets tied to 35 separate FBI matters.
The Justice Department said Yaroch conducted approximately 100 fraudulent transfers, resulting in gains of approximately $2,474,380.66. His plea covers wire fraud and money laundering, and sentencing is scheduled for March 4, 2027. He faces up to 20 years in prison.
Yahoo reported that Yaroch worked at the FBI Boston Division from 2017 until early 2025. From February 2025 through July 2026, he worked in the FBI’s Counterintelligence and Espionage Division. Court evidence cited by Yahoo said his position gave him access to FBI systems containing cryptocurrency credentials gathered during investigations.
The alleged movement of funds included transfers to Yaroch’s own accounts. The Justice Department said that between as of September 25, 2025 and as of January 13, 2026, Yaroch transferred approximately $93,082 to accounts he controlled and used funds for credit cards, car payments and other loans.
Decrypt reported that Yaroch later acknowledged making very poor decisions involving crypto wallets in a conversation with a former Justice Department colleague as of July 29, 2026. He then self-reported to FBI headquarters, initially describing about 10 to 12 transfers worth under $1 million.
That early account differed substantially from the eventual plea figure. Decrypt said agents later documented about $188,600 on Kraken and $933,800 in Suilend, while the Justice Department’s account describes approximately 100 transfers and approximately $2,474,380.66 in gains.
Why it matters
The case centers on a sensitive point in cryptocurrency investigations: access to wallet credentials can allow control over assets when those credentials are available to an authorized investigator. The Justice Department’s allegations describe an insider using access gained through FBI work rather than an outside breach of an exchange or wallet provider.
It also involves investigative material across a broad set of matters. The 35 affected FBI investigations included work involving criminal groups and nation-state adversaries, according to the case background. The same background says the conduct compromised FBI sources and methods used for foreign intelligence collection.
Those circumstances place the matter beyond a straightforward allegation of personal financial misconduct. Cryptocurrency credentials collected by law enforcement can represent both access to seized or tracked assets and sensitive records tied to the underlying investigations. The guilty plea puts the handling of such credentials, and the controls around access to them, at the center of the case.
The difference between Yaroch’s initial self-report and the plea account is also significant. Decrypt’s reporting on the initial estimate of 10 to 12 transfers under $1 million contrasts with the Justice Department’s figure of approximately 100 transfers. The public accounts establish that investigators ultimately identified a much larger alleged scope than the one first described.
Background and context
The Justice Department said Yaroch used credentials collected during FBI investigations. Yahoo similarly reported that his work gave him access to FBI systems holding cryptocurrency credentials. His FBI assignments spanned the Boston Division and the Counterintelligence and Espionage Division.
The case background states that the affected investigations involved criminal groups and nation-state adversaries. It also identifies exposure of FBI sources and methods used in foreign intelligence collection. Those elements explain why the matter involves more than the value of the cryptocurrency transfers alone.
Decrypt and Yahoo reported that Yaroch considered leaving the United States. Decrypt said he asked ChatGPT for advice on starting a new life in Europe, while Yahoo reported that he sought guidance on maximizing investments and where to live in Europe.
The Justice Department said Yaroch asked ChatGPT where to live in the European Union and, as of June 15, 2026, gave power-of-attorney to lawyers in Portugal to obtain a tax identification number. Authorities said he also arranged travel to Portugal for September 2026.
What to watch
The next formal milestone is Yaroch’s scheduled sentencing on March 4, 2027. The Justice Department has stated that he faces up to 20 years in prison, though the sentence itself remains for the court to determine.
Further attention may focus on the 35 investigations tied to the credentials and the extent of any operational impact on sources, methods and related cases. Public reporting from Decrypt identifies amounts associated with Kraken and Suilend, while the Justice Department provides the broader approximate transfer count and total gains.
It will also be important to follow any further public account of how access to the FBI-held credentials was managed across Yaroch’s assignments. The available reports establish his access to the relevant systems and his guilty plea, but the cited accounts focus primarily on the transfers and planned move abroad.
