An FBI counterintelligence agent is accused of taking $1m in crypto from the wallets he was watching
Prosecutors say a supervisory special agent used bureau intelligence to obtain passphrases for foreign adversaries' wallets. He has been charged, not convicted, and the case rests on an affidavit.

A supervisory special agent in the FBI's counterintelligence and espionage division has been charged with moving roughly a million dollars in cryptocurrency out of wallets belonging to foreign adversaries and into accounts of his own.
The accused is Patrick Yaroch. According to the arrest affidavit, filed on 1 August, he used intelligence he could reach through bureau systems to obtain the passphrases that controlled those wallets, then made about a dozen transfers beginning in late 2024 or early 2025. The FBI dismissed him on 31 July.
Every one of those specifics comes from a charging document. An affidavit is a prosecutor's account of what they believe they can prove; it is not a finding, and Yaroch has not been convicted of anything. That distinction is the whole story at this stage, and it is the first thing that tends to disappear when a case like this is summarised.
The alleged motive, as described in the affidavit, is not simple enrichment. Investigators say Yaroch had grown frustrated that the bureau was either unwilling or unable to disrupt the cryptocurrency holdings of an unnamed adversarial state. That framing — an agent who concluded the institution would not act and decided to act himself — is what separates this from an ordinary embezzlement case, if it holds up.
The scheme is said to have come apart through a confession rather than through detection. Reporting indicates he told a Justice Department colleague in late July, describing it as something he needed to get off his chest. Investigators searched his residence and recovered a sum reported at $925,426.07 from wallets and accounts.
He faces two charges: interstate transportation of stolen goods, securities and money, and receipt of stolen goods, securities and money. Notably, neither is an espionage or classified-information offence, which is worth registering given the division he worked in. The charges as filed treat this as theft.
Two things follow that are more consequential than the money. The first is a counterintelligence question the bureau will have to answer internally: if the affidavit is accurate, an agent reached operational intelligence about adversary financial infrastructure and used it privately, over a period of months, without a control catching it. The second is evidentiary. Assets seized from a suspect are not the same as assets returned, and cryptocurrency taken from foreign adversarial wallets does not have an obvious party to return it to.
What is not known at this point is substantial: whether he has entered a plea, who represents him, which district is handling the prosecution, and whether the FBI will say anything about how the access went unnoticed. Open News will update this page as the case moves and as documents beyond the affidavit become available.
Key takeaways
See full context →An FBI counterintelligence agent is charged with moving about $1m in crypto from foreign adversaries' wallets to his own.
The details come from an arrest affidavit and are allegations, not findings. No conviction exists.
No plea, counsel or prosecuting district has been reported, and the FBI has not explained the access.
Source map
Explore all sources →✓What we know
- Patrick Yaroch, a supervisory special agent in the counterintelligence and espionage division, has been charged.
- The arrest affidavit is dated 1 August 2026; the FBI dismissed him on 31 July 2026.
- The charges are interstate transportation of stolen goods and receipt of stolen goods — not espionage offences.
- Reporting places the sum recovered from wallets and accounts at $925,426.07.
- The affidavit describes about a dozen transfers beginning in late 2024 or early 2025.
?What remains unclear
See full context- Nothing here is established fact: these are allegations in a charging document and no conviction exists.
- No plea, defence counsel or prosecuting district has been reported.
- How the alleged access to intelligence systems went undetected for months has not been explained.
- What becomes of funds taken from foreign adversarial wallets is unresolved.
Every factual claim, and what supports it
Each statement in this article is listed with how it is classified and which of the sources below establish it. A verified fact is corroborated by two or more independent sources; a reported claim rests on fewer, or on a single party’s account.
An FBI supervisory special agent has been charged over the alleged theft of about $1m in cryptocurrency.
Reported by three independent outlets.The accused is named as Patrick Yaroch, of the counterintelligence and espionage division.
Name and division from the affidavit as reported.The affidavit alleges he used bureau intelligence to obtain wallet passphrases.
An allegation in a charging document, not a finding.About a dozen transfers are alleged, beginning in late 2024 or early 2025.
Affidavit allegation reported by The Block.The FBI dismissed him on 31 July 2026 and the affidavit was filed on 1 August 2026.
Dates recorded in The Block's account.The charges are interstate transportation of stolen goods and receipt of stolen goods.
Charge list reported consistently.A sum reported at $925,426.07 was recovered from wallets and accounts.
Figure appears in sector and national reporting; not independently confirmed here.The alleged motive was frustration that the bureau would not disrupt an adversarial state's holdings.
Characterisation of the affidavit; motive is contested by nature.He has not been convicted and no plea has been reported.
No source reports a plea or conviction.If accurate, the account implies an internal control failure over months.
An inference from the alleged timeline; the FBI has made no such statement.
How the story developed
- The affidavit alleges the first transfers begin.
- Reporting says he disclosed the scheme to a Justice Department colleague.
- The FBI dismisses him.
- The arrest affidavit is filed.
- The charge is reported; a search recovers funds.
Why this framing matters
Coverage of a charge routinely reads as coverage of a crime. Everything specific in this account originates in an arrest affidavit, which is one side's case, and Open News labels it that way throughout rather than in a closing caveat. The charges filed are theft offences rather than espionage offences, which is a detail worth holding onto given the division involved.
5 sources reviewed
Every source used in this summary, grouped by its role in the reporting chain.
- 1The BlockIndependent · 2026-08-03Independent
- 2CNNIndependent · 2026-08-03Independent
- 3Washington ExaminerIndependent · 2026-08-03Independent
- 4Denver GazetteIndependent · 2026-08-03Independent
- 5Crypto BriefingClaim source · 2026-08-03Claim source
How we verified this story
Assembled from five outlets. The Block's account of the affidavit was retrieved and read directly and carries the names, dates and charge detail. CNN and the Denver Gazette blocked automated retrieval and are cited by headline and link only; no claim rests on either alone. Neither the affidavit nor any court docket was obtained directly, so nothing here is sourced to a primary document, and the article says so. Every factual assertion about conduct is attributed to the charging document rather than stated as established.
Updates and corrections
Preview page created.
Source context and unresolved questions updated.
Join the discussion
Help build a clearer picture. Add context, challenge a claim or share a source.


