A former FBI supervisory agent is facing accusations of pilfering approximately $1 million in cryptocurrency, merging it with his personal assets, and seeking advice from ChatGPT on how to invest the funds and relocate to Europe.
Summary
- Patrick Yaroch is said to have executed around a dozen cryptocurrency transfers starting in late 2024 or early 2025.
- Investigators found that he consulted ChatGPT to evaluate investing $1 million and relocating to Portugal.
- Yaroch allegedly booked a flight to Portugal on September 3, right before his arrest.
- The FBI dismissed Yaroch from his position on July 31, just a day prior to the affidavit’s submission.
FBI agent reportedly transferred crypto using discovered keys
Federal officials arrested Yaroch last Friday amid claims he misappropriated cryptocurrency from wallets described in court documents as “adversarial cryptocurrency accounts.”
An affidavit filed on August 1 revealed that Yaroch uncovered private keys that enabled him to access these digital wallets. He allegedly used these keys to transfer assets to himself through about a dozen transactions starting in late 2024 or early 2025.
Yaroch allegedly informed investigators of his frustration regarding his inability to block individuals tied to an “adversarial nation” from accessing cryptocurrency. However, prosecutors argue that he utilized the assets for his personal benefit rather than following authorized seizure or forfeiture protocols.
The estimated theft totals approximately $1 million, as stated in the affidavit. The court documents did not detail the specific digital assets involved or disclose the wallets from which they were purportedly taken.
Later, Yaroch confessed to a Department of Justice employee that he had made “some very poor decisions relating to cryptocurrency wallets.” In another interview, he acknowledged to federal agents that he had committed a significant mistake.
ChatGPT inquiries revolved around $1 million and Portugal
Investigators noted that Yaroch mixed the disputed cryptocurrency with his personal assets and employed ChatGPT to consider his spending options.
His questions reportedly revolved around how to spend or invest $1 million and whether he should leave the United States for a nation in Europe. The affidavit included a ChatGPT response suggesting Portugal based on information Yaroch provided, including details about his family, preferred property size, and interest in wine.
“Based on what you’ve shared — [name of Yaroch’s child], your wife, the desire for a 2-5 hectare estate, your interest in age-worthy red wine, and the intention of residing there rather than just owning property — I wouldn’t begin by pursuing citizenship,” the chatbot responded, as noted in the affidavit.
The response ultimately identified Portugal as the most suitable option for Yaroch’s circumstances. Authorities also discovered he had a ticket to Portugal scheduled for departure on September 3, along with a return flight.
The court filing does not indicate whether ChatGPT was aware that the funds were allegedly stolen, nor does it confirm if Yaroch acted on the chatbot’s financial advice.
Former agent served in FBI counterintelligence
Yaroch had previously served as a supervisory special agent in the FBI’s Counterintelligence and Espionage Division, and he had also worked at the agency’s Boston field office.
This prior role could be significant in the case, potentially shedding light on how he accessed the wallet keys and assets mentioned in the affidavit. However, the filing does not publicly clarify how the FBI acquired the wallets or the investigation they were linked to.
The FBI terminated Yaroch’s employment on July 31. He subsequently faced charges related to interstate transportation of stolen goods, as well as possession of stolen goods, securities, and money.
These allegations remain unproven, and Yaroch has yet to be convicted.
Crypto custody issues under heightened scrutiny
This case emerges amid increased concerns over cryptocurrency security breaches, prompting questions about access controls and wallet credential management.
Coldcard recently attracted attention due to a five-year seed-generation vulnerability associated with suspected attacks involving over 1,800 BTC across more than 5,200 potential victim addresses. Galaxy Research cautioned that these figures are based on on-chain estimates and do not guarantee a single attacker was responsible for each loss.
In another incident, Ostium reported that an attacker compromised its off-chain infrastructure and manipulated BTC-USD price reports, resulting in a loss of 23.75 million USDC from its liquidity vault. The protocol stated that its smart contracts and governance multisigs remain secure.
Yaroch’s case is particularly noteworthy as it involves alleged insider theft by a law enforcement employee, contrasting with external technical exploits. Nonetheless, it underscores how access to wallet keys can bypass other safeguards when custody measures fail.
