He Stole $2.47 Million in Crypto From 35 FBI Investigations — Then Asked ChatGPT How to Start a New Life in Portugal
A former FBI agent entrusted with investigating criminal activity has admitted to stealing approximately $2.47 million in cryptocurrency using access to sensitive information held by his own agency.
But the case becomes even more extraordinary when investigators look at what happened after the money was stolen.
Patrick Steven Yaroch, 37, pleaded guilty to wire fraud and money laundering in federal court in Alexandria, Virginia, after carrying out approximately 100 unauthorized cryptocurrency transfers connected to 35 separate FBI investigations.
According to the US Department of Justice (DOJ), Yaroch used cryptocurrency wallet credentials available through FBI systems to access funds associated with investigation subjects, foreign adversary actors and even a wallet created by the FBI for an undercover operation.
The stolen cryptocurrency was subsequently converted and moved through additional transactions to conceal its origin.
Prosecutors say the consequences extended far beyond financial losses. His actions compromised multiple FBI investigations involving criminal groups and nation-state adversaries, potentially affecting intelligence sources and investigative methods.
Then came an unusual part of the case: Yaroch began exploring a future outside the United States. He consulted ChatGPT about investment opportunities and where to live in Europe. Following a suggestion involving the purchase of a vineyard in Portugal, he contacted Portuguese lawyers to arrange the necessary tax registration and legal representation.
Yaroch now faces a maximum potential sentence of 20 years in prison. His sentencing is scheduled for March 4, 2027.
How a Former FBI Agent Used His Own Agency's Access to Steal Cryptocurrency
According to court documents, Yaroch worked in the FBI's Boston Division from 2017 until early 2025, where he was assigned to an investigative squad focused on an adversarial nation-state.
In February 2025, he moved to the FBI's Counterintelligence and Espionage Division.
That position gave him access to internal FBI systems containing cryptocurrency credentials collected during investigations.
These credentials became central to the fraud scheme.
Beginning no later than December 2024, Yaroch allegedly used his position to obtain access to cryptocurrency wallets connected to investigations that included cases involving criminal subjects and foreign adversaries.
Instead of using the information for authorised investigative purposes, he made unauthorized transfers into cryptocurrency wallets under his control.
The DOJ said the scheme involved approximately 100 fraudulent transactions using credentials associated with 35 different FBI investigations.
The total fraudulent proceeds reached approximately $2,474,380.66.
The case is particularly serious because the compromised wallets were not all associated with one investigation or one individual. They were connected to multiple separate matters being handled by the federal agency.
$2.47 Million in Crypto Was Moved Through Around 100 Transactions
The investigation revealed a pattern involving cryptocurrency transfers and subsequent financial movements.
After obtaining the funds, Yaroch exchanged the stolen cryptocurrency for different digital assets and moved the money through additional transactions.
According to prosecutors, these movements were intended to make it more difficult to identify the source, nature and ownership of the funds.
The DOJ also described how some of the proceeds were used for personal financial obligations.
Between November 25, 2025, and January 13, 2026, Yaroch transferred approximately $93,082 into one of his accounts. He then moved the money between other accounts and used it to make payments on credit cards, car expenses and other loans.
This was not simply an attempt to move cryptocurrency between wallets. Prosecutors described a broader scheme involving the conversion and laundering of funds.
The Washington Post also reported that at least 10 financial-crime victims were among those whose funds were taken.
The ChatGPT Connection: A Vineyard in Portugal and Plans for a New Life
Perhaps the most unusual detail in the entire case involves Yaroch's plans after the cryptocurrency theft.
Rather than simply spending the proceeds, prosecutors say he explored the possibility of relocating to Europe and establishing a different life abroad.
Court documents state that Yaroch asked ChatGPT how to maximise profits from investments and where he could live in the European Union.
Following ChatGPT's suggestion of purchasing a vineyard in Portugal, he began taking practical steps toward establishing a financial and legal presence there.
On June 15, 2026, Yaroch provided power of attorney to lawyers in Portugal.
The lawyers were authorised to represent him before the Portuguese Tax and Customs Authority, register him and obtain a Portuguese tax identification number, as well as collect access credentials for his financial portal.
He subsequently arranged travel to Portugal for September 2026.
The detail adds an unexpected dimension to the case: an investigation involving stolen cryptocurrency, compromised FBI credentials and money laundering also uncovered plans for a possible new life in Europe.
It is important to distinguish this detail from the theft itself. There is no indication that ChatGPT helped him steal cryptocurrency or conceal the transactions. The DOJ describes its involvement in his later investment and relocation enquiries.
The Damage Went Beyond the Stolen Cryptocurrency
While the financial amount is substantial, prosecutors have highlighted another consequence that could prove even more serious.
Yaroch's conduct compromised multiple FBI investigations involving criminal groups and nation-state adversaries.
According to the agreed statement of facts, the activity also affected intelligence sources and methods used in foreign intelligence collection and criminal investigations.
This creates a much broader problem than recovering stolen digital assets.
Investigations involving foreign adversaries can depend on confidential information, sensitive operational procedures and carefully protected sources.
When an employee with authorised access misuses that information, the damage can extend to ongoing investigations and national security operations.
The DOJ said Yaroch's actions deprived FBI employees of their ability to perform functions intended to protect public safety and national security.
Authorities have not publicly identified all the affected investigations or disclosed the full extent of the operational damage.
How Much Cryptocurrency Did Authorities Recover?
The recovery of digital assets is another important part of the investigation.
Earlier investigative records described cryptocurrency held in accounts and wallets controlled by Yaroch, including funds associated with Kraken and the Suilend lending protocol.
According to reporting based on the FBI affidavit, agents transferred approximately $925,000 from certain accounts to government-controlled wallets during the investigation.
However, this recovery figure should not be confused with the total amount involved in the case.
The DOJ's guilty-plea announcement puts the fraudulent proceeds at approximately $2.47 million.
The full accounting of the stolen funds, recovered assets and any remaining financial losses is a separate matter.
The case also raises questions about how law enforcement agencies store cryptocurrency credentials and restrict employee access to sensitive digital evidence.
What Charges Did the Former FBI Agent Admit To?
Yaroch pleaded guilty to two federal offences:
- Wire fraud: Relating to the fraudulent use of electronic communications and transfers to obtain cryptocurrency.
- Money laundering: Relating to financial transactions intended to conceal the source, nature and ownership of the proceeds.
The guilty plea was accepted by US District Judge Patricia Tolliver Giles in the Eastern District of Virginia.
The prosecution was announced by the US Attorney's Office for the Eastern District of Virginia, with assistance from the FBI and the Department of Justice's Office of the Inspector General.
Yaroch faces a maximum potential penalty of 20 years in prison.
However, that is the statutory maximum, not a sentence that has already been imposed. The final punishment will be determined by the federal court after considering the US Sentencing Guidelines and other relevant statutory factors.
When Will Patrick Steven Yaroch Be Sentenced?
The next major development in the case is scheduled for March 4, 2027.
That is when Yaroch is expected to return to court for sentencing.
The judge will consider the seriousness of the offences, the financial losses, the impact on the affected investigations and other relevant circumstances.
Further court proceedings may also provide additional information about the compromised investigations and the recovery of cryptocurrency.
For now, the guilty plea establishes that Yaroch admitted responsibility for wire fraud and money laundering connected to the cryptocurrency theft scheme.
Why This Case Matters for the Global Cryptocurrency Industry
The Yaroch case exposes a security problem that goes beyond traditional crypto hacks.
Most cryptocurrency theft headlines involve external attackers exploiting software vulnerabilities, phishing victims or compromising private keys.
This case involved something different: an individual who already had legitimate access to sensitive cryptocurrency credentials through his government position.
It demonstrates that even sophisticated investigative institutions face risks when access controls, internal oversight and sensitive digital asset management are abused.
For cryptocurrency companies, exchanges and government agencies, the incident highlights the importance of:
- Strict access controls for private keys and wallet credentials.
- Independent monitoring of sensitive wallet activity.
- Separation of duties between employees handling digital assets.
- Detailed transaction records and audit trails.
- Strong internal oversight of seized and investigative cryptocurrency.
As digital assets become increasingly important in financial crime investigations, protecting the assets and credentials collected by authorities is becoming an important operational security issue.
The case also serves as a reminder that blockchain transparency does not automatically prevent theft. Wallet credentials can still be misused, and cryptocurrency transactions can be difficult to reverse once completed.
Final Takeaway
Patrick Steven Yaroch's case is an extraordinary example of how cryptocurrency-related financial crime can emerge from inside the institutions responsible for investigating it.
A former FBI agent admitted to using access connected to 35 investigations to carry out approximately 100 fraudulent transfers worth nearly $2.47 million.
The alleged financial scheme also compromised criminal investigations and sensitive intelligence operations. His subsequent plans to relocate to Portugal, including exploring a vineyard purchase after consulting ChatGPT, added another unusual dimension to the case.
With sentencing scheduled for March 4, 2027, the next stage will determine the punishment for a scheme that damaged more than just cryptocurrency wallets.
The bigger question for the crypto industry is no longer only how to stop outside hackers. It is also how institutions can protect digital assets from people who already have authorised access.
Sources
- US Department of Justice — Former FBI Agent Pleads Guilty to Cryptocurrency Theft
- The Washington Post — Ex-FBI Agent Stole Over $2 Million
- Decrypt — Former FBI Agent Pleads Guilty to Stealing $2.5M in Crypto
About CoinAINews
CoinAINews Editorial Team covers cryptocurrency security, blockchain investigations, digital asset markets, financial crime and international regulatory developments.
Disclaimer: This article is for informational purposes only and does not constitute legal or investment advice.
