Former FBI Agent Pleads Guilty to Stealing $2.47 Million in Cryptocurrency from Nation-State Hackers

A former senior FBI agent has pleaded guilty to stealing approximately $2.47 million in cryptocurrency from digital wallets connected to criminal investigations, nation-state adversaries and victims of financial crimes.

Patrick Steven Yaroch, 37, admitted using his position within the FBI to access cryptocurrency credentials held in investigative systems and secretly transfer funds into accounts under his control.

Yaroch pleaded guilty to wire fraud and money laundering charges on 5 November 2026 in a federal court in Alexandria, Virginia. He faces a maximum sentence of 20 years in prison.

According to the US Department of Justice (DoJ), Yaroch worked in the FBI’s Boston Division from 2017 until early 2025, where he was assigned to an investigative squad focusing on an unnamed adversarial nation-state. He subsequently moved to the FBI’s Counterintelligence and Espionage Division, where his responsibilities gave him access to systems containing cryptocurrency credentials gathered during investigations.

Prosecutors said Yaroch began exploiting this access no later than December 2024, using information obtained from FBI investigations to steal cryptocurrency from wallets controlled by suspected criminals, nation-state actors and other individuals.

The investigation revealed that he conducted approximately 100 fraudulent cryptocurrency transfers using credentials associated with 35 separate FBI investigations. The wallets reportedly included holdings connected to at least two adversarial nation-states, as well as cryptocurrency belonging to at least 10 victims of financial crimes.

One particularly concerning aspect of the case was the indiscriminate nature of the thefts. According to court documents, individual transactions ranged from just 81 cents to more than $580,000.

Cryptocurrency laundering and personal debts

After obtaining the cryptocurrency, Yaroch attempted to conceal its origins by exchanging the stolen assets for different cryptocurrencies and moving them through additional financial transactions.

The stolen funds were subsequently used to pay off personal debts, including credit cards, car payments and other loans.

Between November 2025 and January 2026, Yaroch transferred approximately $93,082 into one of his personal accounts before moving the money between other accounts to cover outstanding financial commitments.

Investigators also discovered that Yaroch had been planning to leave the United States and establish a new life in Europe.

Court documents revealed that he had used ChatGPT to research investment opportunities and potential places to live within the European Union. Following advice suggesting that he consider purchasing a vineyard in Portugal, Yaroch began making arrangements with Portuguese lawyers to obtain a tax identification number and establish the necessary financial arrangements.

He also organised travel to Portugal for himself and his family, with plans to relocate and potentially retire abroad.

FBI investigations compromised

Beyond the financial losses, the case has raised serious concerns about the security of sensitive investigative information held by law enforcement agencies.

The DoJ said Yaroch’s actions compromised multiple FBI investigations involving criminal organisations and nation-state adversaries.

By accessing cryptocurrency credentials associated with investigations he was not necessarily assigned to, Yaroch exposed investigative information and potentially alerted targets that their cryptocurrency wallets were being monitored.

Prosecutors said his activities compromised FBI sources and methods used in both foreign intelligence collection and criminal investigations.

The incident highlights the risks associated with insiders having access to sensitive investigative information, particularly when that information includes credentials capable of controlling financial assets.

It also demonstrates how cryptocurrency holdings seized or monitored as part of law enforcement operations can become vulnerable if internal access controls are abused.

Former agent eventually confessed

Yaroch’s activities came to light in July 2026 when he admitted his involvement to a Department of Justice employee whom he knew from previous work.

He reportedly told the employee that he had become frustrated with an investigation involving a cryptocurrency suspect connected to an unnamed adversarial nation-state and had decided to take matters into his own hands.

The subsequent investigation uncovered the much larger scale of the operation, including the cryptocurrency transfers connected to dozens of FBI investigations.

Yaroch has now admitted responsibility for wire fraud and money laundering. His sentencing is scheduled for 4 March 2027, when a federal judge will determine the appropriate punishment.

In addition to potential imprisonment, the case is expected to involve substantial financial forfeiture and restitution.

The incident represents a significant insider security failure for the FBI, with an individual entrusted with protecting national security and investigating cybercriminal activity instead exploiting that access for personal financial gain.