Power corrupts, but sometimes boredom and operational frustration do the heavy lifting. Patrick Steven Yaroch spent years working as a supervisory special agent in the counterintelligence and espionage division of the FBI. By all accounts, he had a stable career inside federal law enforcement. Then he decided to steal roughly one million dollars in cryptocurrency from an adversarial nation's digital accounts and planned his exit strategy using a consumer chatbot.
It sounds like a bad fiction pitch. It is actually the core of a federal criminal complaint filed in the U.S. District Court for the Eastern District of Virginia. The case exposes massive vulnerabilities in how federal agencies handle digital assets, alongside the bizarre ways modern white-collar criminals document their own downfall.
The Setup and the Heist
Yaroch joined the bureau in 2017. By late 2024 or early 2025, while assigned to the FBI field office in Boston, his mindset shifted. According to court documents, he grew deeply dissatisfied because he felt the federal government was dragging its feet when it came to disrupting specific foreign cryptocurrency accounts.
Instead of waiting for official greenlights, he took matters into his own hands.
Using his top-secret security clearance, Yaroch accessed restricted government databases. He memorized sensitive passphrases tied to adversarial accounts, bypassing normal internal controls. Over a series of transactions, he executed roughly ten to twelve separate transfers, shifting approximately $1 million into his personal digital wallet.
This wasn't a complex malware attack or a sophisticated phishing ring. This was an insider taking advantage of high-level clearance to quietly redirect foreign state funds into his own pocket.
ChatGPT and the Portugal Dream
The most surreal aspect of the investigation isn't the theft itself. It's what Yaroch did after acquiring the funds.
Federal investigators combed through his digital footprints and found a detailed chat history with OpenAI's ChatGPT. Yaroch treated the artificial intelligence tool like a private wealth manager. He asked the model how to maximize profit and returns on a million-dollar portfolio to support an early retirement.
The chatbot obliged, tailoring advice for a 37-year-old wanting to retire by age 40 and build a slow-living vineyard lifestyle. ChatGPT specifically suggested regions like Cilento or Portugal's Dão region.
Yaroch didn't just talk to a computer. He took action based on its output.
Investigators uncovered booked round-trip plane tickets to Portugal for September, along with a power-of-attorney document authorizing local Portuguese lawyers to handle tax and customs matters. He researched European job listings and neglected to report multiple international trips to Portugal, Germany, and Grenada, violating internal bureau travel policies.
The Internal Collapse
Criminal masterminds usually get caught by making a technical error on-chain. Yaroch got caught because his conscience gave out.
On a Tuesday, Yaroch reached out to an anonymous Justice Department employee over the encrypted messaging app Signal. They met in person the following day. During that conversation, Yaroch confessed that his actions were eating him up inside.
Federal agents interrogated him through the week. When they raided his home in Ashburn, Virginia, they recovered his Portuguese legal documents, electronics, and multiple passports. Yaroch allegedly admitted to agents that he completely messed up, noting he never actually interacted with the foreign account holders and hadn't spent any of the stolen digital currency.
The FBI fired and arrested him on the spot, slapping him with charges of interstate transportation of stolen goods, securities, and monies, alongside the receipt of stolen goods.
A Broader Trend of Intelligence Breaches
Yaroch's arrest is part of an embarrassing wave of security failures plaguing the U.S. intelligence community. Just months prior, authorities arrested CIA official David Rush, accusing him of siphoning over $40 million and converting the proceeds into gold bars and luxury watches.
When individuals with top-secret clearances decide to go rogue, the traditional guardrails often fail. Insider threats rely on trust, and when that trust breaks down, the resulting damage shakes public confidence in federal oversight.
If you work in security, compliance, or digital asset management, this case serves as a blunt reminder. Technical firewalls mean nothing if the human holding the keys decides to walk out the front door. Monitor access logs, enforce strict multi-person authorization controls for sensitive asset movements, and never assume high clearance guarantees absolute loyalty.
