An FBI counterintelligence agent is accused of taking $1m in crypto from the wallets he was watching

Prosecutors say a supervisory special agent used bureau intelligence to obtain passphrases for foreign adversaries' wallets. He has been charged, not convicted, and the case rests on an affidavit.

Pre-launch editorial previewDemonstration content · Human reviewer identity pending · Advertising disabled
Verified○ Context added5 Sources
+1
An empty government office corridor at night under fluorescent light
AI-generated illustration — not a photograph of the events describedAn empty government office corridor at night under fluorescent light AI-generated illustration · Open News

A supervisory special agent in the FBI's counterintelligence and espionage division has been charged with moving roughly a million dollars in cryptocurrency out of wallets belonging to foreign adversaries and into accounts of his own.

The accused is Patrick Yaroch. According to the arrest affidavit, filed on 1 August, he used intelligence he could reach through bureau systems to obtain the passphrases that controlled those wallets, then made about a dozen transfers beginning in late 2024 or early 2025. The FBI dismissed him on 31 July.

Every one of those specifics comes from a charging document. An affidavit is a prosecutor's account of what they believe they can prove; it is not a finding, and Yaroch has not been convicted of anything. That distinction is the whole story at this stage, and it is the first thing that tends to disappear when a case like this is summarised.

The alleged motive, as described in the affidavit, is not simple enrichment. Investigators say Yaroch had grown frustrated that the bureau was either unwilling or unable to disrupt the cryptocurrency holdings of an unnamed adversarial state. That framing — an agent who concluded the institution would not act and decided to act himself — is what separates this from an ordinary embezzlement case, if it holds up.

The scheme is said to have come apart through a confession rather than through detection. Reporting indicates he told a Justice Department colleague in late July, describing it as something he needed to get off his chest. Investigators searched his residence and recovered a sum reported at $925,426.07 from wallets and accounts.

He faces two charges: interstate transportation of stolen goods, securities and money, and receipt of stolen goods, securities and money. Notably, neither is an espionage or classified-information offence, which is worth registering given the division he worked in. The charges as filed treat this as theft.

Two things follow that are more consequential than the money. The first is a counterintelligence question the bureau will have to answer internally: if the affidavit is accurate, an agent reached operational intelligence about adversary financial infrastructure and used it privately, over a period of months, without a control catching it. The second is evidentiary. Assets seized from a suspect are not the same as assets returned, and cryptocurrency taken from foreign adversarial wallets does not have an obvious party to return it to.

What is not known at this point is substantial: whether he has entered a plea, who represents him, which district is handling the prosecution, and whether the FBI will say anything about how the access went unnoticed. Open News will update this page as the case moves and as documents beyond the affidavit become available.

Key takeaways

See full context
THE CORE

An FBI counterintelligence agent is charged with moving about $1m in crypto from foreign adversaries' wallets to his own.

FACTS CHECKED

The details come from an arrest affidavit and are allegations, not findings. No conviction exists.

?
WHAT'S NEXT

No plea, counsel or prosecuting district has been reported, and the FBI has not explained the access.

Source map

Explore all sources
Independent4
Claim source1

What we know

  • Patrick Yaroch, a supervisory special agent in the counterintelligence and espionage division, has been charged.
  • The arrest affidavit is dated 1 August 2026; the FBI dismissed him on 31 July 2026.
  • The charges are interstate transportation of stolen goods and receipt of stolen goods — not espionage offences.
  • Reporting places the sum recovered from wallets and accounts at $925,426.07.
  • The affidavit describes about a dozen transfers beginning in late 2024 or early 2025.

?What remains unclear

See full context
  • Nothing here is established fact: these are allegations in a charging document and no conviction exists.
  • No plea, defence counsel or prosecuting district has been reported.
  • How the alleged access to intelligence systems went undetected for months has not been explained.
  • What becomes of funds taken from foreign adversarial wallets is unresolved.
CLAIM LEDGER

Every factual claim, and what supports it

Each statement in this article is listed with how it is classified and which of the sources below establish it. A verified fact is corroborated by two or more independent sources; a reported claim rests on fewer, or on a single party’s account.

  1. An FBI supervisory special agent has been charged over the alleged theft of about $1m in cryptocurrency.

    verified factverifiedThe BlockCNNWashington Examiner
    Reported by three independent outlets.
  2. The accused is named as Patrick Yaroch, of the counterintelligence and espionage division.

    reported claimverifiedThe BlockDenver Gazette
    Name and division from the affidavit as reported.
  3. The affidavit alleges he used bureau intelligence to obtain wallet passphrases.

    reported claimunclearThe BlockDenver Gazette
    An allegation in a charging document, not a finding.
  4. About a dozen transfers are alleged, beginning in late 2024 or early 2025.

    reported claimunclearThe Block
    Affidavit allegation reported by The Block.
  5. The FBI dismissed him on 31 July 2026 and the affidavit was filed on 1 August 2026.

    reported claimverifiedThe Block
    Dates recorded in The Block's account.
  6. The charges are interstate transportation of stolen goods and receipt of stolen goods.

    verified factverifiedThe BlockWashington Examiner
    Charge list reported consistently.
  7. A sum reported at $925,426.07 was recovered from wallets and accounts.

    reported claimunclearCrypto BriefingCNN
    Figure appears in sector and national reporting; not independently confirmed here.
  8. The alleged motive was frustration that the bureau would not disrupt an adversarial state's holdings.

    reported claimunclearDenver GazetteCrypto Briefing
    Characterisation of the affidavit; motive is contested by nature.
  9. He has not been convicted and no plea has been reported.

    verified factverifiedThe BlockWashington Examiner
    No source reports a plea or conviction.
  10. If accurate, the account implies an internal control failure over months.

    An inference from the alleged timeline; the FBI has made no such statement.
TIMELINE

How the story developed

  1. The affidavit alleges the first transfers begin.
  2. Reporting says he disclosed the scheme to a Justice Department colleague.
  3. The FBI dismisses him.
  4. The arrest affidavit is filed.
  5. The charge is reported; a search recovers funds.
EDITORIAL CONTEXT

Why this framing matters

Coverage of a charge routinely reads as coverage of a crime. Everything specific in this account originates in an arrest affidavit, which is one side's case, and Open News labels it that way throughout rather than in a closing caveat. The charges filed are theft offences rather than espionage offences, which is a detail worth holding onto given the division involved.

▢ Discuss 64
SOURCE MAP

5 sources reviewed

Every source used in this summary, grouped by its role in the reporting chain.

  1. 1The BlockIndependent · 2026-08-03Independent
  2. 2CNNIndependent · 2026-08-03Independent
  3. 3Washington ExaminerIndependent · 2026-08-03Independent
  4. 4Denver GazetteIndependent · 2026-08-03Independent
  5. 5Crypto BriefingClaim source · 2026-08-03Claim source

Sources are listed for transparency. Open News summarizes and links; it does not copy full source articles.

How we verified this story

Assembled from five outlets. The Block's account of the affidavit was retrieved and read directly and carries the names, dates and charge detail. CNN and the Denver Gazette blocked automated retrieval and are cited by headline and link only; no claim rests on either alone. Neither the affidavit nor any court docket was obtained directly, so nothing here is sourced to a primary document, and the article says so. Every factual assertion about conduct is attributed to the charging document rather than stated as established.

REVISION HISTORY

Updates and corrections

  1. Preview page created.

  2. Source context and unresolved questions updated.

Join the discussion

Help build a clearer picture. Add context, challenge a claim or share a source.