Former FBI agent Patrick Steven Yaroch has pleaded guilty to wire fraud and money laundering after prosecutors said he used cryptocurrency credentials held inside FBI systems to steal approximately $2.47 million. The scheme involved about 100 fraudulent transfers using credentials connected to 35 separate FBI investigations, according to the U.S. Attorney’s Office for the Eastern District of Virginia.
Yaroch, 37, worked in the FBI’s Boston Division from 2017 until early 2025 before joining the Counterintelligence and Espionage Division. Prosecutors said that position gave him access to FBI systems containing cryptocurrency credentials collected during investigations. Beginning no later than December 2024, he used that access to move funds from wallets connected to investigative subjects and adversarial nation-state actors, as well as from at least one wallet the FBI itself had created for an operation.
FBI Credentials Enabled About 100 Transfers
The case differs from a conventional crypto exploit because prosecutors have not identified a smart-contract vulnerability, blockchain failure or external compromise as the source of the theft. The security boundary was privileged access to sensitive wallet credentials already held by a law-enforcement agency. That places the incident closer to an insider-access failure than attacks involving compromised applications or protocol code.
Once Yaroch obtained the assets, prosecutors said he exchanged them into other cryptocurrencies and conducted additional transactions intended to obscure their source and ownership. Between November 25, 2025 and January 13, 2026, he transferred approximately $93,082 into one of his accounts and later used funds to pay credit cards, vehicle payments and other debts. The Justice Department calculated his total illicit proceeds at $2,474,380.66.
The incident highlights a different custody threat from external wallet drains. A recent multichain wallet theft involving more than $4 million showed how unauthorized signing authority can empty assets without revealing the initial compromise mechanism, while a Trust Wallet extension breach exposed recovery phrases through malicious software. Yaroch’s case instead involved legitimate institutional access allegedly being used for an unauthorized purpose.
Theft Compromised FBI Investigations
The consequences extended beyond the monetary loss. According to the agreed statement of facts described by prosecutors, Yaroch’s actions compromised investigations involving criminal organizations and nation-state adversaries, as well as FBI sources and investigative methods. The case therefore involved both asset theft and damage to ongoing law-enforcement and intelligence operations.
The access dimension has parallels with other crypto crimes in which institutional authority or trusted credentials became part of the attack surface. An ex-LAPD officer’s conviction in a Bitcoin robbery similarly demonstrated how trusted access and law-enforcement credentials can alter the security threat model, although that case involved physical coercion rather than access to investigative databases.
Yaroch pleaded guilty during a November 5 hearing in federal court in Alexandria, Virginia. The court’s calendar confirms the plea-agreement hearing before U.S. District Judge Patricia Tolliver Giles. He is scheduled for sentencing on March 4, 2027 and faces a statutory maximum of 20 years in prison, although the eventual sentence will depend on federal sentencing guidelines and other factors considered by the judge.
The case ultimately illustrates that cryptocurrency custody risk does not disappear when sensitive credentials move into institutional hands. Control over a private key or recovery credential remains sufficient to authorize blockchain transactions regardless of whether that access belongs to an individual wallet holder, private custodian or government agency. In Yaroch’s case, the documented failure was not cryptographic: it was the misuse of access that the FBI had legitimately obtained for investigative purposes.