FBI Agent Uses Mnemonic to Steal Millions in Cryptocurrency

Original | Odaily Planet Daily ( @OdailyChina )

Author | Qin Xiaofeng ( @QinXiaofeng 888 )

Recently, a criminal complaint filed in the U.S. District Court for the Eastern District of Virginia has once again exposed the shameful practices within U.S. law enforcement.

Former FBI Supervisory Special Agent Patrick Steven Yaroch is accused of abusing his position to transfer nearly $1 million in cryptocurrency assets from accounts related to a "hostile nation" (reportedly "Russia") that the FBI was monitoring, to his personal wallet, and investing some of the funds in DeFi platforms for profit.

Perhaps due to inexperience, Yaroch even asked ChatGPT how to handle the million dollars, plan for retirement in Europe, and booked a flight to Portugal. However, these plans ultimately fell through, and Yaroch, feeling "tormented inside," voluntarily confessed to the FBI, bringing this cryptocurrency-related internal corruption case to public attention.

Currently, the FBI has terminated Yaroch's employment and emphasized that "the Bureau holds its employees to the highest ethical standards and will not tolerate such behavior."

This is not the first time federal employees in the U.S. have stolen cryptocurrency through their positions—during the infamous "Silk Road" investigation, several federal agents similarly exploited their authority to seize Bitcoin.

These cases serve as a reminder that the myth of "decentralization" in cryptocurrency assets crumbles in the face of power abuse. What truly needs fixing is not the blockchain code, but the ineffective supervisory mechanisms within the law enforcement system.

I. Senior FBI Agent Uses Mnemonic to Transfer Assets

37-year-old Yaroch has worked at the FBI Boston Field Office since 2017, focusing on national security investigations, particularly intelligence and counterintelligence operations against "hostile nations."

According to a sworn affidavit submitted by federal agents, Yaroch came into contact with cryptocurrency accounts used by individuals associated with a "hostile nation" during his investigations.

The theft began in late 2024 or early 2025, while Yaroch was still at the Boston office. He accessed the FBI's internal systems to obtain the mnemonic phrase for the target cryptocurrency accounts. Instead of directly downloading or copying files, Yaroch chose to memorize the words, then created a personal cryptocurrency wallet to gradually transfer the funds.

He admitted to making approximately 10 to 12 transfers; the funds ultimately accumulated in a personal wallet under his control, totaling nearly $1 million.

Interestingly, he did not immediately cash out or transfer all the funds abroad but mixed the stolen cryptocurrency with his personal funds. Some of the funds were stored in a Kraken exchange account, while others were connected to the DeFi protocol Suilend through a Slush wallet to earn interest. He later explained that one reason for choosing Suilend was that he "liked its droplet-shaped logo."

In fact, as a Supervisory Special Agent at the FBI, Yaroch held Top Secret and Sensitive Compartmented Information (SCI) clearance, with an administrative level of GS-14 (out of 15), earning an annual salary between $180,000 and $230,000. A mere million dollars did not seem like a significant amount to him.

Thus, the FBI initially suspected that Yaroch had been compromised. However, he later explained to investigators that he had not directly interacted with any foreign entities or individuals related to the accounts, and there was currently no evidence of such.

Yaroch explained that he gradually became frustrated with the FBI's "inability or unwillingness to act against the use of these accounts." In his view, these assets were being used to support hostile activities, while the FBI could only remain at the intelligence-gathering level without implementing seizures or blockades. This sense of frustration became the catalyst for his decision to "take matters into his own hands."

II. ChatGPT Becomes a "Financial Immigration Advisor"

On the surface, Yaroch's actions might seem driven by "idealism" and a sense of patriotism. However, the truth is quite the opposite, as revealed by ChatGPT conversation records extracted from his phone.

On May 28, 2026, he asked how to invest or spend $1 million; on June 4, he further inquired about the feasibility of "leaving the U.S. for a European country with $1 million." Based on his age (37), young family, desire to retire around 40, and preference for a slow-paced vineyard or agricultural lifestyle, ChatGPT recommended areas like Cilento in Italy or the Douro region in Portugal, particularly praising Portugal as the top choice.

Meanwhile, Yaroch also booked a flight from Washington to Lisbon/Porto from September 3 to 11, 2026, with his wife and children. He signed a power of attorney for a Portuguese lawyer (on June 15, 2026) regarding tax identification numbers, customs, and financial matters, and personally went to the tax office to obtain a password—this is a typical preliminary step for purchasing real estate or long-term residency. Additionally, he made several overseas trips in 2026 that he did not report to the FBI, including trips to Germany and Portugal in May and to Grenada from late June to early July.

These actions were viewed by prosecutors as potential signs of fleeing or asset transfer. Yaroch himself stated that all of this was "eating away at him," and he wanted to "come clean." On July 29, 2026, he voluntarily reported to the Department of Justice and the FBI, surrendering the mnemonic phrase notes and Trezor hardware wallet. On July 31, the FBI immediately fired him and executed an arrest.

On the day of his arrest, he told agents, "I know I might not be able to go, but I hope my wife and kids can still go to Portugal as planned."

Currently, Yaroch faces charges of interstate transportation of stolen goods and receiving stolen goods, with the case still pending in the Eastern District of Virginia.

III. Is the FBI Also Playing Under the Table?

This case is not complicated, but it raises many questions and leaves many cryptocurrency holders feeling uneasy.

First, the FBI has excessive authority; anyone deemed a "hostile foreign national" will be placed on a surveillance list. Even decentralized cryptocurrency assets can be "stolen" by the FBI through various informants or technical means. It is important to note that these assets are self-custodied by users, not stored on exchanges, making them equally vulnerable to the FBI's grasp, with no security to speak of.

Interestingly, last year, the U.S. Department of Justice sued Cambodian Prince Group founder and chairman Chen Zhi, seizing 127,000 BTC (valued at approximately $15 billion at the time), which had previously been stored in a non-custodial wallet controlled by Chen Zhi, with the private keys held by him, but were also obtained by the U.S. government through various means.

Secondly, there is a lack of effective oversight within U.S. federal agencies. Even sensitive data like mnemonic phrases, as evidence in case investigations, are stored in the FBI's office systems and case files for agents to access. Anyone who has seen the mnemonic phrase, if clever enough, could easily fly to a country without an extradition treaty and log into the wallet at a local internet café to withdraw funds.

Moreover, the most bizarre aspect of this case is that the FBI, as a top-tier investigative agency, was completely "unaware" of the internal data theft.

When Yaroch transferred the $1 million out of his wallet, the FBI's blockchain monitoring team likely detected the large transfer, but the FBI analysts may have instinctively assumed it was a hostile entity laundering money or consolidating funds internally to evade sanctions. They might have even updated intelligence maps to track the movements of the new addresses.

Throughout this process, did no one suspect that the money was being embezzled by an insider? Or did everyone know but chose not to address it? Before the Yaroch case was disclosed, how many similar incidents of internal theft occurred, remains unknown. Perhaps this is the way "Smith agents" make a living.

Finally, it is somewhat ironic that if Yaroch had not confessed, the FBI would likely never have caught him. After all, all the transactions occurred on-chain, without being tied to his real name.

IV. Common Occurrence: Federal Law Enforcement Officers Abusing Power

The "Yaroch case" is not an isolated incident. Looking back over the past decade, there have been numerous cases of U.S. federal law enforcement officers exploiting their positions to engage with cryptocurrency, each drawing significant attention.

The most famous case occurred in 2015, related to the Silk Road investigation. At that time, DEA Special Agent Carl Mark Force IV and Secret Service Special Agent Shaun W. Bridges were both accused of stealing Bitcoin during the investigation.

Force, as an undercover agent, communicated with Silk Road founder Ross Ulbricht using a false identity, receiving and concealing cryptocurrency obtained during the investigation, transferring it to personal accounts; he also used his authority to freeze assets in an exchange account, transferring approximately $300,000 to his own account, totaling over $700,000 in stolen cryptocurrency. Force ultimately pleaded guilty and was sentenced to 6.5 years in prison.

Bridges, after gaining control over Bitcoin related to Silk Road, transferred over 20,000 Bitcoin (valued at $800,000 at the time) to the Mt. Gox exchange and then to his personal investment account, attempting to cover his tracks through complex transactions. Bridges was ultimately sentenced to 71 months for money laundering and obstruction of justice, and in 2017, he received an additional 24 months for another case involving the theft of approximately 1,600 Bitcoin from a government wallet, along with a large forfeiture of Bitcoin.

These cases occurred during the early days of Bitcoin when cryptocurrency regulation and tracking technology were far less mature than today. Law enforcement officers, after gaining private keys or control over accounts, are easily tempted to reach for the funds. Similar to the Yaroch case, the motivations often mix greed, dissatisfaction with case progress, and various forms of luck.

Conclusion

For the entire U.S. federal law enforcement agency, the occurrence of the Yaroch case once again emphasizes that the anonymity and irreversibility of cryptocurrency assets pose a severe challenge to law enforcement itself. Even under top-level authority and tight internal monitoring systems, human risks still exist.

The weaknesses of human nature are often more difficult to guard against than any technical vulnerabilities. This nearly million-dollar cryptocurrency theft case may become an important catalyst for future reforms in federal agencies' digital asset management.

This content is provided for general informational purposes only and doesn't constitute financial, investment, legal, or tax advice. Any events, rewards, online promotions, or related information mentioned herein should not be considered a recommendation, solicitation, or invitation to purchase, sell, trade, or otherwise deal in any crypto assets. Crypto assets are highly volatile and may result in loss. The availability of WEEX services, products, and related events may vary by region. You are responsible for ensuring that your participation is in accordance with applicable local laws and regulations.