Ex-FBI Agent Charged Over $925,426 Crypto Theft, Moved $1M to Suilend, Kraken
Patrick Yaroch allegedly used seed phrases from FBI cases to drain crypto wallets, then asked ChatGPT how to invest $1M and flee to the EU.

Federal prosecutors have charged a former FBI supervisory special agent with stealing cryptocurrency from wallets tied to bureau investigations, with roughly $925,426 already recovered and the total exposure estimated near $1 million. A criminal complaint filed in the Eastern District of Virginia accuses Patrick Steven Yaroch of using seed phrases obtained through FBI casework to move funds from “adversarial” crypto accounts into wallets he controlled.
Yaroch, who worked at FBI headquarters in the Counterintelligence and Espionage Division after an earlier posting at the Boston Field Office, faces charges of interstate transportation of stolen property and receipt of stolen property. He was employed by the FBI from February 2025 through July 2026, according to the affidavit supporting the complaint.
Where the money went: $188,570.58 on Kraken, ~$1M into Suilend
Once investigators obtained Yaroch’s cell phone, they accessed his Kraken account and found approximately $188,570.58 in value, held mostly in USDC and US dollars. A further review of his transaction history showed he had previously moved roughly $1 million into Suilend, a DeFi lending protocol built on the Sui blockchain.
Asked why he chose that platform, Yaroch reportedly told agents he liked Suilend simply because “the logo was a water droplet” — an offhand detail that underscores how casually the funds were routed once they left the original wallets.
A confession, a walk-back, and a ChatGPT paper trail
The case reportedly surfaced after Yaroch told a Department of Justice employee that the theft was “eating him up inside.” On July 29, he contacted FBI headquarters to arrange a meeting to disclose what he had done; during that interview, the value of his wallet holdings was described as “approximately one million dollars.”
That same day, agents went to his residence to collect property, and Yaroch initially surrendered the seed phrases for the wallets in question — only to withdraw his consent roughly half an hour later, according to the affidavit.
A review of ChatGPT conversations on his phone allegedly showed him asking the chatbot how he might invest or spend “around $1 million” to “maximize profit and return,” and separately how he could leave the United States to become a resident or citizen of a European Union country with that same sum. Prosecutors have not claimed the $925,426 already recovered represents the full amount taken.
Why it matters for crypto holders
The case is a stark reminder that seed phrases — the master keys to any self-custodied wallet — remain the single point of failure in crypto security, even when custody chains run through law enforcement. Funds seized during investigations are typically held in evidence as recovered assets pending forfeiture proceedings, and any unauthorized movement out of those wallets is trackable on-chain, as this case shows.
For traders and builders, the episode also illustrates how quickly stolen funds can be traced once they touch regulated venues like Kraken or on-chain protocols like Suilend, where transaction histories are permanent and, ultimately, discoverable by investigators with access to a suspect’s device.
Read more: Coldcard Exploit Toll Doubles to $70M as Galaxy Counts 1,200 Drained Wallets
Sources
Related articles
FBI Agent Yarmoch Charged: $925,426 Recovered From Alleged $1M Crypto Theft
Ex-FBI counterintelligence agent Patrick Yarmoch allegedly siphoned crypto from probe-linked wallets via Kraken and Suilend accounts.
MoonPay’s PayBox Vault Lets ChatGPT, Claude Users Execute Crypto Trades
MoonPay's new PayBox vault lets AI chatbots trigger crypto swaps and transfers while MPC and TEE tech keep wallet keys out of…
Kraken Launches CFTC-Regulated Perpetual Futures for US Traders via Bitnomial
Kraken routes US perpetual futures through NinjaTrader Clearing and Bitnomial Exchange, both CFTC-regulated, ending years of offshore-only access.