DOJ Charges Ex-FBI Agent Draining $1M From Adversary Nation State's Crypto Wallets
A former FBI Supervisory Special Agent was charged on August 1, 2026, after allegedly using seed phrases discovered in FBI case files to siphon roughly $1 million in cryptocurrency from wallets belonging to an adversary foreign nation state he was investigating—then confessing to a former colleague because the secret was, in his words, "eating him up inside."
According to a criminal complaint filed in the Eastern District of Virginia, Patrick Steven Yaroch, 37, of Ashburn, Virginia, is charged with interstate transportation of stolen goods, securities, and monies (18 U.S.C. § 2314) and receipt of stolen goods (18 U.S.C. § 2315).
The alleged scheme
While working national security investigations targeting an unnamed adversarial nation at the FBI's Boston field office, Yaroch—who held a Top Secret/SCI clearance since 2017—was allegedly exposed to adversarial cryptocurrency accounts around November 2024. Frustrated that the Bureau couldn't or wouldn't act against those accounts, he allegedly researched how crypto wallets work, memorized seed phrases found in FBI holdings, created a personal wallet, and took "matters into his own hands," transferring funds from the adversary's wallets to his own roughly 10–12 times beginning in late 2024 or early 2025.
The self-report
The case unraveled not through detection but confession. On July 29, 2026, Yaroch reached out via Signal to a DOJ National Security Division employee he'd worked with in Boston, broke down in a meeting at FBI Headquarters, and admitted to the transfers. The same afternoon, he filed an online self-report with the FBI's Security Division and told headquarters personnel he'd "screwed up," describing himself as "spinning out of control." He was placed on administrative leave that day and fired two days later.
The search
Executing warrants on July 31, agents found the funds commingled with Yaroch's personal assets. His Kraken account held about $188,570, but agents also spotted a July 23 transfer of roughly $1.02 million to SUI lend, a lending protocol Yaroch said he chose "simply because he liked that the logo was a water droplet," accessed via the Slush wallet app using a 12-word seed phrase. Yaroch consented to a seizure, and agents transferred approximately $925,426 to government-controlled wallets. Agents also seized a handwritten slip of seed phrases Yaroch kept tucked inside his FBI credentials, a Trezor hardware wallet in apparently unopened packaging, and three US passports, including a diplomatic passport.
Red flags beyond the theft
The complaint details ChatGPT conversations in which Yaroch asked how to invest "a million dollars," how to become an EU resident, and about buying a vineyard estate in Portugal—his phone showed booked flights to Portugal for his family in September, and agents found Portuguese power-of-attorney documents authorizing lawyers to obtain a tax ID number for him there. The FBI also flagged at least three unreported foreign trips in 2026 (Germany, Portugal, and Grenada), each a security violation for a clearance holder.
At 6:04 PM on May 28, 2026, YAROCH asked ChatGPT, “If I had a million dollars, how would you suggest investing it/spending it to maximize profit and return.” ChatGPT responded, “At 37, with a young family, a goal of potentially retiring around 40, and a clear interest in eventually building a slower-living vineyard/agricultural lifestyle in places like Cilento or Portugal’s Dão region…”
At 8:35 AM on June 4, 2026, YAROCH asked ChatGPT, “If you had a bucket of money (around $1 million) and you wanted to leave the USA and become a resident or citizen of an EU country, what would you do?” ChatGPT responded, “Given everything you’ve told me – [name of YAROCH’s child], your wife, the desire for a 2-5 hectare estate, interest in age-worthy red wine, and the goal of actually living there rather than just owning a property- I would not start by chasing citizenship…What I would do with $1 million Option 1: Portugal (my top choice for your specific situation).”
The government charged the case as stolen-property offenses rather than espionage. The complaint states Yaroch claimed he never interacted with anyone tied to the adversarial accounts and never spent the funds. This may explain why the DOJ did not charge the case as a wire fraud offense.
Wire fraud (18 U.S.C. § 1343) requires a scheme to defraud—deception at its core, like misrepresentations or false pretenses used to trick someone out of property. According to the allegations in the complaint, Yaroch didn't deceive anyone: he took seed phrases he could lawfully view in FBI holdings and used them to move funds. That's plain theft, not fraud, and courts have consistently held that stealing—even electronically—isn't wire fraud without a deceptive scheme.
The stolen-property statutes charged instead (§§ 2314/2315) only require transporting or receiving stolen property worth $5,000+ in interstate commerce, knowing it was stolen. With Yaroch's repeated confessions and the inherently interstate nature of blockchain transactions, that theory is about as bulletproof as probable cause gets for a complaint sworn out within 48 hours of his self-report.
FAQ
What is former FBI agent Patrick Yaroch accused of?
Using seed phrases found in FBI case files to transfer roughly $1 million in crypto from a foreign adversary's wallets to his own. He's charged with interstate transportation and receipt of stolen property (18 U.S.C. §§ 2314, 2315). These are allegations — he's presumed innocent.
How did the alleged theft work?
While investigating the adversary's crypto activity, he allegedly memorized seed phrases stored in FBI holdings, created a personal wallet, and drained the funds in roughly 10–12 transfers starting in late 2024. Whoever holds a seed phrase controls the wallet — no hacking required.
How was it discovered?
He turned himself in. He confessed to a DOJ contact in July 2026, saying it was "eating him up inside," filed a self-report the same day, and was arrested July 31 after search warrants were executed.
Where was the money held?
Commingled with personal funds in a Kraken account — and days before the arrest, ~$1.02M was moved into Suilend on the Sui blockchain via the Slush wallet app. Agents also seized a still-sealed Trezor and a handwritten slip of seed phrases tucked inside his FBI credentials.
Did the government recover it?
Mostly. With his consent, agents moved ~$925,426 to government-controlled wallets; ~$165,582 in USD stayed on Kraken because fiat can't go to a government crypto wallet.
Why not wire fraud?
Wire fraud requires deception; he didn't trick anyone — he took. The stolen-property statutes only need his own confessions plus the inherently interstate nature of blockchain. An indictment could still add CFAA or money-laundering counts.
What role did ChatGPT play?
His phone contained prompts about investing $1M, becoming an EU resident, and visas — evidence that lined up with booked Portugal flights and Portuguese power-of-attorney documents.
What penalties apply?
Up to 10 years per count, though guideline sentences typically run well below the maximum.