Former FBI Agent Pleads Guilty to Stealing $2.47 Million in Crypto Using Bureau’s Investigation Credentials

A former Federal Bureau of Investigation agent has formally pleaded guilty to wire fraud and money laundering after admitting to stealing approximately $2.47 million in cryptocurrency. The funds were accessed using wallet credentials that the bureau had gathered and stored during the course of its own federal investigations, according to the U.S. Department of Justice.

Patrick Steven Yaroch, a 37-year-old resident of Ashburn, Virginia, entered his guilty plea in federal court in Alexandria. He now faces a maximum sentence of 20 years in federal prison. A federal judge has scheduled his sentencing hearing for March 4, 2027.

The case exposes a stunning breach of internal security within federal law enforcement. According to prosecutors, Yaroch’s career with the FBI spanned from 2017 until early 2025. He initially spent several years working in the bureau’s Boston Division, assigned to a specialized squad investigating an unnamed adversarial nation-state. He later transferred to the FBI’s Counterintelligence and Espionage Division. It was in this sensitive role that he gained authorized access to internal FBI systems and databases containing cryptocurrency credentials and private keys seized or compiled during active national security investigations.

Investigators revealed that Yaroch’s illicit activity began no later than December 2024. Using his privileged system access, he targeted crypto wallets controlled by various subjects of ongoing federal investigations, wallets operated by foreign nation-state actors, and at least one wallet that the FBI had explicitly set up for an undercover operation.

Over the course of his scheme, Yaroch executed roughly 100 fraudulent cryptocurrency transfers. These transactions drew from credentials linked to 35 separate FBI investigations. To obscure the trail of the stolen assets, he routinely swapped the digital funds into different cryptocurrencies and bounced them through a complex series of additional blockchain transactions designed to mask their origin. Prosecutors noted that Yaroch used portions of the stolen capital to cover personal expenses, including paying off credit card balances, car payments, and other outstanding loans.

As his financial acquisitions grew, Yaroch allegedly began formulating an elaborate exit strategy to build a new life abroad. Court documents show that he turned to OpenAI’s ChatGPT for lifestyle and financial guidance, asking the artificial intelligence chatbot how to maximize investment returns and inquiring about the best places to live within the European Union.

After ChatGPT suggested purchasing a vineyard in Portugal as a viable investment and relocation strategy, Yaroch took concrete steps to make it happen. He formally granted Portuguese lawyers power of attorney to secure a tax identification number on his behalf and made travel arrangements to visit Portugal in September.

Beyond the financial theft, the plea agreement’s statement of facts highlights the severe operational damage caused by Yaroch’s actions. His unauthorized intrusions compromised multiple active FBI investigations targeting criminal organizations and hostile foreign adversaries. Furthermore, his handling of the investigation credentials endangered sensitive human sources and intelligence-gathering methods utilized in foreign espionage collection.

Yaroch’s Confession

The investigation into Yaroch’s activities came to light largely because the former agent ultimately turned himself in. On July 29, Yaroch broke down emotionally while speaking with a former colleague at the Justice Department’s National Security Division. According to an FBI affidavit filed in the case, he confessed that he had made "very poor decisions" involving cryptocurrency wallets.

Following that conversation, Yaroch self-reported directly to FBI headquarters. He explained to investigators that he had grown frustrated because he believed the bureau "could not or would not act" swiftly enough against a foreign adversary’s cryptocurrency accounts. Consequently, he decided to "take matters into his own hands."

At the time of his initial confession, Yaroch claimed he had only executed 10 to 12 transfers totaling under $1 million—a figure that turned out to be a fraction of the actual scope uncovered by investigators later.

Federal agents executed a search warrant at Yaroch’s residence just two days after his surrender. During the search, agents seized a Trezor hardware wallet, three separate passports, and a physical slip of paper inscribed with cryptocurrency seed phrases, the affidavit detailed.

Financial tracing of his digital assets revealed significant holdings scattered across multiple platforms. His account on the Kraken exchange held approximately $188,600, primarily distributed between U.S. dollars and the USDC stablecoin, alongside smaller fractions of Squid and Bitcoin tokens. An additional $933,800 was discovered sitting in Suilend, a decentralized lending protocol operating on the Sui blockchain, which he had accessed via the Slush mobile wallet application.

When questioned about his choice of platform, Yaroch casually told federal agents that he deposited funds into Suilend "simply because he liked that the logo was a water droplet."

Promptly following the seizure, federal agents moved to secure the illicitly obtained funds, transferring approximately $925,000 from those digital accounts directly into government-controlled wallets. However, the recovery effort faced minor logistical hurdles; roughly $165,600 held as traditional U.S. fiat currency on Kraken could not be swept away using the same blockchain-based seizure methods.

Federal authorities and prosecutors continue to review the broader fallout of the breach as the case moves toward its scheduled sentencing in March 2027.