FBI agent Patrick Yaroch charged with stealing $925,000 in crypto from wallets he was investigating

Federal prosecutors have charged FBI supervisory special agent Patrick Steven Yaroch with using his security clearance to steal nearly $1 million in cryptocurrency from wallets belonging to foreign nationals under FBI investigation, according to court documents filed in the U.S. District Court for the Eastern District of Virginia. Agents recovered approximately $925,426.07 at his arrest, and he has since been fired.

The allegations have sent shockwaves through federal law enforcement, not only because of the amount involved but because the suspect was part of the very agency responsible for investigating financial crimes involving digital assets. The case underscores how insider abuse remains one of the most difficult forms of crypto theft to detect, even as blockchain monitoring tools continue to improve.

How prosecutors day the alleged crypto theft was carried out

Federal prosecutors allege Yaroch leveraged his security clearance to access confidential investigative files containing sensitive information, including wallet passphrases connected to cryptocurrency holdings belonging to nationals from a country regarded by the FBI as a foreign adversary.

Investigators claim he used that privileged information to transfer cryptocurrency through approximately 10 to 12 separate transactions beginning in late 2024. Rather than relying on sophisticated hacking techniques, prosecutors say the alleged scheme depended on trusted internal access.

Authorities recovered approximately $925,426.07 in cryptocurrency during Yaroch’s arrest, according to the criminal affidavit.

The Justice Department has charged Yaroch with interstate transportation of stolen property and receipt of stolen goods. If convicted, he could face decades behind bars.

The FBI terminated Yaroch’s employment immediately after the criminal complaint became public.

The case adds to a growing list of insider misconduct investigations involving government personnel. Earlier this year, prosecutors charged the son of a government contractor with allegedly stealing $46 million connected to the U.S. Marshals Service, while a former CIA officer also faced scrutiny over an alleged concealed $40 million gold-related scheme.

ChatGPT searches and Portugal trip allegedly revealed escape planning

Investigators say digital forensic evidence extended beyond cryptocurrency transactions.

According to court documents, authorities recovered chatbot conversation logs showing Yaroch had researched how to invest a sudden financial windfall and later explored European residency requirements through an artificial intelligence assistant.

Prosecutors also allege that Yaroch booked travel to Portugal and obtained power-of-attorney documentation through a Portuguese law firm before his arrest, suggesting preparations for a possible relocation.

Interestingly, investigators did not initially uncover the alleged crypto theft through blockchain analytics. Instead, the investigation accelerated after Yaroch reportedly disclosed details of his actions to a colleague at the U.S. Department of Justice using the encrypted messaging platform Signal on July 28. That conversation ultimately led investigators to confront him.

During a subsequent FBI interview, prosecutors say Yaroch admitted to the offense.

According to the affidavit, he described the alleged crime as “eating him up inside.”

The affidavit states that his confession became a central piece of evidence supporting the government’s case.

Insider threats become a growing challenge for digital asset investigators

The allegations arrive during an exceptionally active year for cryptocurrency-related enforcement actions across the United States.

In April, the U.S. Department of Justice announced the recovery of approximately $700 million connected to Southeast Asian investment scam networks. More recently, federal prosecutors unveiled an indictment alleging that cryptocurrency laundering services had been used to facilitate fentanyl trafficking.

Security experts have repeatedly warned that trusted insiders often pose risks that technology alone cannot eliminate.

As blockchain intelligence company TRM Labs noted in its 2026 mid-year report, the cryptocurrency industry suffered approximately $972 million in losses across 207 incidents during the first half of the year. While most cases involved external attackers, insider-enabled crypto theft represents a different category of risk because authorized access can bypass many conventional security controls.

“Insider threats remain among the most difficult risks to detect because individuals already possess legitimate access to sensitive systems,” cybersecurity professionals have consistently warned across both government and private-sector security assessments.

The Yaroch case is likely to renew discussions about limiting privileged access to sensitive cryptocurrency evidence held during federal investigations.

Case raises fresh questions about FBI oversight

The prosecution has placed renewed attention on how federal agencies manage access to seized or monitored digital assets.

While blockchain technology creates permanent transaction records, investigators say that preventing crypto theft by trusted insiders requires robust internal controls, multi-party authorization procedures, continuous auditing, and strict separation of duties.

The FBI has not publicly commented on whether the case will lead to changes in how agents are granted access to cryptocurrency wallet credentials used during investigations.

Meanwhile, FBI Director Kash Patel, who oversees the bureau during the ongoing investigation, now faces renewed scrutiny as one of the agency’s own senior officials stands accused of exploiting the very investigative powers entrusted to him.

Legal proceedings against Yaroch are expected to continue in federal court in Virginia.

As cryptocurrency becomes increasingly integrated into criminal investigations worldwide, the alleged crypto theft serves as a reminder that some of the greatest security vulnerabilities may originate from individuals already inside trusted institutions. The outcome of the case could shape future policies governing digital evidence handling across U.S. law enforcement agencies and influence how authorities safeguard seized crypto assets against insider abuse.