The person tasked with investigating crypto crimes became the crypto criminal. Patrick Steven Yaroch, a supervisory special agent in the FBI’s counterintelligence division, was arrested in late July after allegedly stealing approximately $1 million in digital assets from accounts he was supposed to be monitoring.

Yaroch, who held top secret clearance and worked on national security matters, reportedly executed 10 to 12 unauthorized transfers starting in late 2024, using passphrases he obtained through FBI systems to move funds from accounts linked to an adversarial nation, identified in some reports as Russia, into his personal wallets.

The confession and the collapse

Yaroch turned himself in around July 28, confessing to colleagues that the situation was “eating him up inside.” According to court filings, he justified his actions by expressing frustration with what he perceived as the FBI’s insufficient measures against the adversarial accounts he had been investigating.

Authorities found that Yaroch had made previously unreported travel to Portugal and had used AI tools to explore options for relocating abroad with roughly $1 million.

During a search of his home in Ashburn, Virginia, federal authorities recovered over $925,426 from his crypto wallets and accounts. He was subsequently suspended, fired, and taken into custody. Federal charges include interstate transportation of stolen goods and receipt of stolen goods.

Why this matters beyond one bad actor

When the FBI, DEA, or any federal agency seizes cryptocurrency during an investigation, those assets get stored in government-controlled wallets. The security of that system depends heavily on access controls, specifically on trusting the people who hold the keys. Yaroch had top secret clearance, which is supposed to represent the highest level of institutional trust the US government extends to an individual.

That trust was apparently sufficient to give him access to passphrases stored in FBI systems, which he then used to drain funds over a period spanning more than a year. Ten to twelve transactions, stretching from late 2024 through mid-2026, apparently without triggering any automated alerts or internal reviews.

What this means for investors and the broader market

The recovered $925,426 suggests authorities clawed back the vast majority of the stolen funds, which at least indicates the blockchain’s transparency worked as designed. Every transaction left a trail. Yaroch may have had the passphrases, but he couldn’t outrun the ledger.