Ex-FBI agent Patrick Yaroch pleads guilty to $2.47M crypto theft from 35 cases

Patrick Steven Yaroch, 37, of Ashburn, Virginia — a former FBI supervisory agent — pleaded guilty on November 5, 2026 in federal court in Alexandria to wire fraud and money laundering for stealing approximately $2.47 million in cryptocurrency across about 100 unauthorized transfers, using credentials from 35 separate FBI investigations. The U.S. Attorney's Office for the Eastern District of Virginia published the release "Former FBI agent pleads guilty to Cryptocurrency theft" that day; Decrypt carried the summary.

What the plea covers

Yaroch worked in the FBI's Boston Division from 2017 to early 2025, then in the Counterintelligence and Espionage Division. Per the DOJ release and the plea agreement's statement of facts:

• The theft began no later than December 2024.
• About 100 fraudulent transfers siphoned funds from wallets tied to 35 separate FBI investigations.
• The source wallets belonged to investigation subjects, nation-state actors, and at least one wallet the FBI itself had created for an operation.
• The total loss is approximately $2.47 million across multiple cryptocurrencies.
• Stolen funds were swapped into other crypto assets; assets seized at the time of his arrest included USDC, Squid (QUID), and Bitcoin held in a Kraken account, plus a position in Suilend on the Sui blockchain.

The case was investigated by the FBI; the plea agreement, an FBI affidavit, and the statement of facts are part of the EDVA docket.

Sentencing exposure

Yaroch faces a statutory maximum of 20 years in federal prison. Sentencing is scheduled for March 4, 2027. Federal statutory maxima are rarely imposed in full; actual exposure will depend on the Sentencing Guidelines calculation and the plea agreement's cooperation terms, which the DOJ release did not detail.

From complaint to plea

The August 2026 criminal complaint had put the alleged loss at roughly $1 million, with about $925,000 in traced transfers to personal wallets (Cointelegraph summary of the affidavit). The November 5 plea admits a materially higher figure — $2.47M across 100 transfers from 35 cases — consistent with additional transfers being identified by investigators between the complaint and the plea.

What to watch

1. The sentencing memorandum due before the March 4 hearing: it will set out the Guidelines range and any cooperation credit — and typically names the specific investigations and wallet types if they are no longer sensitive.
2. Forfeiture orders: the affidavit referenced ~$925K already forfeited to government-controlled wallets. The plea's statement of facts will drive a further forfeiture order; the delta against $2.47M is the recovery gap.
3. Whether DOJ brings related charges against anyone who helped Yaroch move or cash out the funds: no co-defendants were named.
4. Any FBI post-mortem on internal credential handling. The release says Yaroch used access tied to his FBI role; it does not describe what controls failed.

Context

The case lands in the same week as the Binance theft attributed by the FBI to North Korea's TraderTraitor, where $3.11B sits in attacker-controlled addresses (our coverage). The on-chain traceability that lets investigators mark unlaundered North Korean funds is the same traceability that put Yaroch's transfers in the government's hands — his own credentials, routed through retail exchanges, were never going to defeat blockchain forensics. A federal agent stealing from the custody wallets of his own cases is unprecedented in scale; the previous closest analogue is the 2017 Silk Road case, where DEA agent Carl Force and Secret Service agent Shaun Bridges pleaded guilty to amounts an order of magnitude smaller.