The Crypto GuideStart learning
Menu
Prices: CoinGecko

Security & Scams

Former FBI agent pleads guilty to stealing about $2.47 million in crypto using keys from FBI cases

A former FBI agent admitted using wallet credentials the FBI had collected to steal crypto across 35 investigations. What the plea says and the lessons for holders.

By Beginner5 min readPublished November 6, 20266 sources
On this page
  1. What happened
  2. How it came out
  3. What it means for you
  4. The takeaway

Key takeaways

  • Former FBI agent Patrick Steven Yaroch admitted to wire fraud and money laundering on November 5, 2026, before a federal judge in Alexandria, Virginia, the Justice Department says.
  • Prosecutors say he used FBI systems holding cryptocurrency credentials collected in investigations to make about 100 transfers tied to 35 separate FBI cases, taking about $2,474,380.66. When he was charged in August, the complaint described about $1 million.
  • The lesson for ordinary holders: whoever has a wallet's keys can move the coins, and a confirmed transfer generally can't be undone. Guard your seed phrase, and remember that law enforcement never asks the public for payment in crypto, and the FBI's complaint center doesn't work with law firms or crypto services to recover lost money.

A former FBI agent has admitted using his access to the bureau's own case files to take crypto from wallets the FBI was investigating. The amount in his plea is far larger than when he was first charged in August. Here is what the Justice Department says happened, and the two lessons it holds for anyone who owns crypto.

What happened

On November 5, 2026, the US Attorney's Office for the Eastern District of Virginia announced a guilty plea from Patrick Steven Yaroch, 37, a former FBI agent who lives in Ashburn, Virginia. The charges: wire fraud and money laundering. The plea was accepted by US District Judge Patricia Tolliver Giles.

According to the Justice Department's account of the court documents:

  • His jobs: From 2017 until early 2025, Yaroch was on an FBI Boston squad that investigated an adversarial nation state. He then moved to the bureau's Counterintelligence and Espionage Division (February 2025 to July 31, 2026), where he could reach FBI systems storing crypto wallet credentials gathered in its cases.
  • What he took: starting by December 2024 at the latest, he stole crypto from wallets tied to people the FBI was investigating and to foreign government-linked actors. At least one of the wallets was one the bureau had set up itself for an operation.
  • The scale: about 100 fraudulent transfers using credentials tied to 35 separate FBI investigations, bringing in about $2,474,380.66.
  • Laundering: he swapped the stolen coins into other cryptocurrencies and moved them through more transactions to hide where they came from. Between November 25, 2025 and January 13, 2026, he moved about $93,082 to one of his accounts and used money from his accounts to pay debts such as credit cards and car payments.
  • Plans abroad: prosecutors say he asked ChatGPT for investment tips and for EU countries to move to. When the chatbot suggested a vineyard in Portugal, he gave lawyers there power of attorney to get him a Portuguese tax ID.

The agreed statement of facts says his actions compromised multiple FBI investigations of criminal groups and nation-state adversaries, along with FBI sources and methods. Sentencing is set for March 4, 2027; the maximum penalty is 20 years in prison.

How it came out

Yaroch reported himself. The Justice Department's Inspector General says he told two department employees about it on July 29, 2026. In early August he was charged by criminal complaint with interstate transportation and receipt of stolen property, which are different charges from the wire fraud and money laundering he has now pleaded guilty to. The inspector general's summary of that complaint describes about 10 transfers totaling roughly $1 million. NBC News reported at the time that the FBI said he had been fired.

Decrypt, which reported the plea, notes that the plea's figures are far higher than what he first described. Citing the FBI affidavit, Decrypt also reports that agents found a hardware wallet and a slip of paper with seed phrases at his home, and moved about $925,000 from his accounts into government-controlled wallets.

What it means for you

  • Keys are the money. Yaroch didn't need passwords to anyone's bank. He needed wallet credentials, and with them the coins moved. The same is true for your wallet: anyone who gets your seed phrase or private key can empty it. A confirmed transfer generally can't be undone, and there's no bank to call. Our seed phrase guide covers storing it offline and never typing it into a website or app you didn't open yourself.
  • Insiders are a real risk. This case involved FBI evidence, not customer accounts, but the lesson carries over: anyone who can reach stored keys is a risk, and strong controls limit who can. When you leave crypto with a company, you rely on its internal controls. Our wallets guide explains the trade-offs between custodial accounts and holding your own keys.
  • Expect scammers to use this headline. Fake "FBI agents" and fake recovery services already contact crypto victims. The FBI's Internet Crime Complaint Center says it does not work with law firms or crypto services to recover lost funds, and that it won't reach out to you asking for money or personal details. Its September 2026 warning on impersonation scams says law enforcement will never ask for payment in cryptocurrency, and counts nearly 61,000 government-impersonation complaints from January 2025 to July 2026, with losses of more than $1.6 billion. See our guides to recovery scams and impersonation scams.

The takeaway

A guilty plea means Yaroch has admitted the charges; his sentence is still to come. For everyday holders the case is a reminder of how crypto works: control of the keys is control of the coins, whether the person holding them is a hacker, an insider or you. This is education, not legal or financial advice, and it reflects the Justice Department's statements and reporting as of November 6, 2026.

Frequently asked questions

Were regular people's crypto accounts affected?

According to the Justice Department, the coins he took sat in wallets belonging to people under FBI investigation or to foreign government-linked actors, plus at least one wallet the FBI itself set up for an operation. It does not describe any theft from members of the public who weren't part of an investigation.

What sentence does he face?

The maximum is 20 years in prison, according to the Justice Department. Sentencing is set for March 4, 2027, and a federal judge will decide the actual term.

Why did the amount grow from about $1 million to $2.47 million?

The August criminal complaint described about 10 transfers totaling roughly $1 million. The plea paperwork describes about 100 fraudulent transfers and about $2,474,380.66 in proceeds. Decrypt notes the plea figures are far higher than what Yaroch first described when he self-reported.

Someone says they're from the FBI and can recover my lost crypto. Is that real?

Treat it as a scam. The FBI's Internet Crime Complaint Center says it doesn't team up with law firms, crypto services or any other non-police group to get lost money back, and that it won't reach out to you asking for money or personal details. The FBI also says law enforcement will never ask for payment in cryptocurrency.

Sources

  1. Former FBI agent pleads guilty to Cryptocurrency theft (November 5, 2026) — U.S. Attorney's Office, Eastern District of Virginia
  2. FBI Supervisory Special Agent Arrested Following Theft of Cryptocurrency (August 4, 2026) — DOJ Office of the Inspector General
  3. Former FBI Agent Pleads Guilty to Stealing $2.5M in Crypto From 35 Investigations — Decrypt
  4. Feds charge 'frustrated' FBI agent they say stole nearly $1 million in crypto (August 3, 2026) — NBC News
  5. Scammers Impersonating Law Enforcement and Government Officials in Fraud Schemes — FBI Internet Crime Complaint Center
  6. Internet Crime Complaint Center home page — FBI Internet Crime Complaint Center

Published November 6, 2026 by . Educational content, not financial, legal or tax advice. Spot an error? Request a correction.

About the author

Dave McNaught has worked in IT since 1999 and founded All Business Technologies (ABT) in 2003, a Boston-area firm providing Managed IT, Cybersecurity, Managed AI, Web Design and App Development. He publishes The Crypto Guide.

Full bio