DOJ Says Former FBI Agent’s Crypto Theft Compromised Investigations
Former FBI agent Patrick Steven Yaroch pleaded guilty to wire fraud and money laundering after using cryptocurrency credentials stored in bureau systems to make about 100 fraudulent transfers. The transfers involved approximately $2, 474, 380.66. The credentials were tied to 35 investigations. At least one wallet had been created by the FBI for an operation.
- Guilty plea: Wire fraud and money laundering.
- Proceeds: Approximately $2, 474, 380.66, according to the Justice Department.
- Investigative impact: Prosecutors say multiple investigations, sources and methods were compromised.
- Sentencing: Yaroch faces up to 20 years in prison. Sentencing is scheduled for March 4, 2027.
The case was not described as a breach of a blockchain, exchange or wallet software. According to the Justice Department, Yaroch misused cryptocurrency credentials collected during investigations and stored in FBI systems. Depending on how a wallet is secured, valid access credentials can authorize transfers. The public account does not specify exactly what kind of credentials Yaroch used.
Credentials linked to 35 investigations
From 2017 through early 2025, Yaroch served on an FBI Boston Division squad focused on an adversarial nation-state. He then worked in the bureau’s Counterintelligence and Espionage Division from February 2025 to July 31, 2026, according to the U.S. Attorney’s Office for the Eastern District of Virginia.
The Justice Department says the credentials Yaroch used were linked to 35 separate investigations. They gave him access to wallets involved in other cases, including wallets controlled by investigation subjects and nation-state actors. The FBI had created at least one of the wallets for operational use.
The public account does not show that all 35 investigations were compromised to the same degree. Prosecutors say multiple investigations were affected, but they have not identified the cases or explained what information, people or techniques may have been exposed.
The government’s agreed statement of facts says Yaroch’s conduct compromised investigations and hindered employees’ ability to protect public safety and national security. The U.S. Attorney’s Office said:
“Yaroch’s actions also compromised FBI sources and methods used in foreign intelligence collection and criminal investigations.”
“Sources and methods” broadly refers to the people, information channels and techniques used in intelligence collection and criminal investigations. The Justice Department has not said what was exposed or what operational harm followed. The financial proceeds come with a precise figure. The security consequences remain largely undisclosed. The case has also been described as one in which investigations were compromised.
How the funds moved
The Justice Department says the conduct began no later than December 2024. Yaroch transferred cryptocurrency to wallets he controlled, exchanged it for another type of cryptocurrency, then made further transactions to obscure the funds’ source, nature and ownership.
The public account does not explain exactly when Yaroch accessed each credential or how that timing related to his FBI assignments. It also does not name the cryptocurrencies, wallet technologies, networks or transaction routes involved.
According to prosecutors, approximately $93, 082 moved into one of Yaroch’s accounts between November 25, 2025, and January 13, 2026. He then moved funds among accounts and used them to pay credit-card bills, car payments and other loans. That figure covers transfers during a specific period. It is not the total stolen, the total laundered or an amount recovered. The case also highlights the broader challenge of money laundering and anti-money-laundering controls in crypto.
Portugal plans, and what the chatbot detail shows
The Justice Department says Yaroch asked ChatGPT how to maximize investment profits and where to live in the European Union. The chatbot suggested buying a vineyard in Portugal, but the government’s account does not say he bought one. The ChatGPT and Portugal details concern his plans, not help with the alleged theft.
On June 15, 2026, Yaroch gave Portuguese lawyers power of attorney for specified administrative matters. These included dealing with the Portuguese Tax and Customs Authority, obtaining a tax identification number and collecting the password for his finance portal. He also arranged to travel to Portugal in September 2026.
These details show investment and relocation planning, not ChatGPT’s involvement in the theft or concealment of cryptocurrency. A chatbot’s vineyard suggestion did not make the proceeds legitimate, or prove that a vineyard ever changed hands.
The plea and what remains unknown
Yaroch pleaded guilty to wire fraud and money laundering in federal court in Alexandria, Virginia. U.S. District Judge Patricia Tolliver Giles accepted the plea. The Justice Department says the conduct he admitted to involved approximately 100 fraudulent transfers and produced approximately $2, 474, 380.66 in fraudulent proceeds.
Yaroch faces a maximum sentence of 20 years in prison. That is the statutory maximum, not a prediction of his sentence. The judge will decide the punishment after considering the Sentencing Guidelines and other statutory factors. Sentencing is scheduled for March 4, 2027.
The case shows that digital-asset security depends on more than the underlying network. Blockchains can record transactions reliably, but they cannot ensure organizations properly control credentials or stop an authorized insider from abusing access. Custody arrangements differ, but any organization holding wallet credentials needs safeguards for storage, access and oversight.
The Justice Department has not named the affected investigations, said which sources or methods were exposed, or confirmed whether any cryptocurrency was recovered. The case number is 1:26-CR-208. Court filings are available through the Eastern District of Virginia or PACER.
Key questions and answers
-
How much cryptocurrency did Yaroch admit stealing?
The Justice Department puts the fraudulent proceeds at approximately $2, 474, 380.66.
-
How did he access the wallets?
He used cryptocurrency credentials stored in FBI systems and collected during investigations. Officials have not specified the exact types of credentials.
-
Were all 35 investigations compromised?
The credentials were linked to 35 investigations, but prosecutors say multiple investigations were compromised and have not detailed the impact on each case.
-
Was this a blockchain hack?
No breach of a blockchain, exchange or wallet software is described. The government says Yaroch misused credentials held in FBI systems.
-
How much was recovered?
The public information does not say whether any cryptocurrency was recovered.
-
What sentence could Yaroch receive?
He faces a maximum of 20 years in prison. Sentencing is scheduled for March 4, 2027, and the judge will decide the actual sentence.
