A supervisory FBI counterintelligence agent has been charged with a crypto theft worth close to $1 million, pulled from wallets tied to a nation the United States considers adversarial, according to a federal affidavit reported by The New York Times on Aug. 3, 2026.
Patrick Yaroch used passphrases obtained during an active investigation to move the funds across a dozen transfers starting in late 2024, then turned to ChatGPT to plan a new life in Europe. He was fired and arrested the day agents searched his Virginia home, and now faces federal charges for interstate transportation and receipt of stolen goods.
| Date | What happened |
|---|---|
| November 2024 | While investigating an adversarial nation for the FBI, Yaroch comes across that nation’s cryptocurrency accounts |
| Late 2024 or early 2025 | He starts moving funds from those wallets to his own, about 10 to 12 times in all, using passphrases he found in FBI systems and memorized |
| February 2025 | He moves from the FBI Boston Division to FBI Headquarters as a Supervisory Special Agent in the Counterintelligence and Espionage Division |
| 23 July 2026 | He moves about $1.02 million into a Suilend account, opened through the Slush wallet app, to earn interest |
| 29 July 2026 | FBI Headquarters places him on administrative leave |
| 31 July 2026 | Agents search his home; with his consent they move about $925,426 in crypto to government wallets. The FBI fires him and agents arrest him that afternoon |
| 1 August 2026 | Criminal complaint: interstate transportation and receipt of stolen goods, securities and money (18 U.S.C. 2314 and 2315) |
| 4 August 2026 | Prosecutors ask the court to keep him in custody as a flight risk; each charge carries up to 10 years in prison, and they estimate a guideline range of at least 41 to 51 months |
The Passphrases Yaroch Pulled From FBI Systems
Yaroch worked counterintelligence out of the FBI’s Boston division, tracking cryptocurrency wallets linked to the adversarial nation, The New York Times reported. Frustrated that the bureau would not let him disrupt the wallets, he used his top-secret clearance to memorize the passphrases and made 10 to 12 transfers into a personal wallet between late 2024 and early 2025, moving close to $1 million he told agents he never spent.
A search of his phone turned up months of ChatGPT conversations about investing the money and relocating to Portugal, Greece or Turkey, echoing how Decrypt has tracked chatbots surfacing in other crypto cases this year.
Yaroch had booked a round-trip flight to Portugal for September and signed power-of-attorney paperwork for two Portuguese lawyers before confessing to a Justice Department employee on July 28, saying the theft was “eating him up inside.”
What This Case Exposes About Seized Crypto Custody
U.S. agencies now custody billions in seized digital assets, and unlike a frozen bank account, a single passphrase can be enough to move everything out, a custody gap that keeps turning up across our main news feed as agencies expand their crypto holdings.
The Precedent Prosecutors May Point To
Yaroch is not the first person tied to U.S. crypto custody to face this kind of charge. In March 2026, CoinDesk reported that the son of a contractor managing seized crypto for the U.S. Marshals was arrested in France over an alleged $46 million theft from government wallets, prompting a review of seizure-key access.
Yaroch tapped a version of the same weakness: legitimate access turned to unauthorized ends. Kraken disclosed in April 2026 that support staff had misused internal credentials to view client data in a similar insider-access breakdown.
What This Means for You
If a federal agent can drain a monitored wallet with nothing more than a passphrase, the safety of crypto held by a third party comes down to that party’s internal controls, not the blockchain itself.
Assets on an exchange or in a custodial wallet are only as safe as the key management behind them. Cases like this are part of why many new holders eventually move toward self-custody, where fewer people ever touch the keys. Bitcoin educator Andreas Antonopoulos is known for the phrase “not your keys, not your coins.”
This article is for informational purposes only and does not constitute financial advice. Do your own research before making any investment decisions.
