FBI agent stole $2.5M in crypto from the cases he worked: guilty plea
A former FBI supervisory special agent has pleaded guilty to wire fraud and money laundering after admitting he moved about $2.47 million in cryptocurrency out of wallets connected to the cases he was assigned to investigate. Patrick Steven Yaroch, 37, of Ashburn, Virginia, entered the plea in the Eastern District of Virginia, according to BleepingComputer and Gizmodo. Prosecutors put the fraudulent proceeds at $2,474,380.66, moved through roughly 100 transfers using credentials tied to 35 separate FBI investigations.
How the scheme worked, according to prosecutors
The mechanics were unglamorous. According to court documents and reporting on them, Yaroch pulled wallet passphrases out of FBI case-management systems and a separate platform used to share investigative data between agencies. Those passphrases unlocked cryptocurrency wallets the bureau had identified, frozen or otherwise taken control of during investigations: wallets belonging to suspects, to nation-state actors, and in at least one instance to a wallet the FBI itself had set up for an operation. He then moved the coins to addresses he controlled and swapped them into other cryptocurrencies to break the trail. At least ten of the wallets belonged to victims of financial crimes who were cooperating with investigators, according to Gizmodo's account of the filings. Between November 25, 2025 and January 13, 2026, he moved about $93,082 into a single account and shuffled funds between accounts to cover credit cards, car payments and loans, BleepingComputer reported.The passphrase problem
The case is a reminder of something unglamorous about cryptocurrency seizures: the asset is only as secure as the string of words that controls it. A seized wallet is not in government custody in any physical sense. It sits on a public ledger, and whoever holds the seed phrase or passphrase can move it at any time, from anywhere, without a signature and without a wire transfer to trace. That makes investigative credential stores a single point of failure. A case-management system that aggregates passphrases from dozens of investigations concentrates risk: one agent with legitimate access, and a motive, can reach every wallet in the system without touching a physical evidence bag or tripping a control built for paper. The FBI affidavit described in NBC News quotes Yaroch saying he "went into FBI systems and found keys needed to transfer money from wallets to himself."- Passphrases sat in systems built for case coordination, not for asset custody.
- Access went to an agent whose assignment was counterintelligence, not asset management.
- The transfers spanned 35 investigations before anyone raised an alarm, according to prosecutors.
Why victims should care about the restitution line
For the people whose wallets were drained, the plea is a mixed result. A conviction establishes the loss, but restitution in crypto cases depends on what the government can actually recover and forfeit. Prosecutors said hundreds of thousands of dollars were still sitting in exchange and DeFi accounts when he was arrested, which suggests partial recovery at best against a $2.47 million total. There is also a structural question about who counts as a victim here. Some of the wallets belonged to people under investigation rather than to people who had reported a loss. Those owners may have a claim, but they will have to press it while also defending the underlying case. The financial-crime victims whose seized assets were meant to be returned are in a cleaner position, though they are now waiting behind a forfeiture proceeding that did not exist when they agreed to cooperate.The evidence is clear that the defendant planned to use this cryptocurrency for his own personal enrichment, just like any other fraudster.