A federal court in Washington, D.C., sentenced Marlon Ferro, 20, of Santa Ana, California, to 78 months in prison. Ferro, known online as “GothFerrari,” played a central role in a nationwide cryptocurrency theft conspiracy. The criminal ring stole over $250 million in digital assets from victims across the United States.
Marlon Ferro, 20, of Santa Ana, California, was sentenced today in U.S. District Court to 78 months in prison in connection with his role in a sprawling social engineering conspiracy that stole well over $250 million in cryptocurrency from victims across the United States.
Read… pic.twitter.com/NYeRZF9GVl
— U.S. Attorney DC (@USAO_DC) May 6, 2026
Judge Colleen Kollar-Kotelly handed down the sentence this week. In addition to prison time, Ferro must serve three years of supervised release and pay $2.5 million in restitution to victims.
The $250 Million Crypto Theft Conspiracy Explained
The criminal enterprise operated between late 2023 and early 2025. It targeted individuals known to hold large amounts of cryptocurrency. Members used a combination of online fraud and physical break-ins to steal digital assets.
The group divided responsibilities across its members. Roles included database hacking, target research, fraudulent phone calls, and money laundering. The ring operated across California, Connecticut, New York, Florida, and several overseas locations.
In total, the conspiracy involved more than 4,100 Bitcoin. At the time of the thefts, that amount exceeded $230 million. Fourteen suspects faced charges in September 2024 and May 2025 under a RICO conspiracy indictment.
Social Engineering and SIM-Swapping Tactics Used to Target Victims
The group primarily used social engineering to access victims’ crypto wallets. Members posed as trusted contacts or service providers to trick victims into surrendering account credentials. SIM-swapping attacks also allowed the group to bypass two-factor authentication.
When online tactics failed, the ring escalated to physical action. This is where Ferro became essential to the operation. Prosecutors described him as the group’s go-to resource when digital methods did not work.
U.S. Attorney Jeanine Ferris Pirro stated: “Marlon Ferro served as the criminal enterprise’s instrument of last resort.”
Ferro’s Role: Home Invasions and Hardware Wallet Theft
Ferro carried out multiple burglaries targeting cryptocurrency holders. In February 2024, he traveled to Winnsboro, Texas. He broke into a home and stole a hardware wallet holding approximately 100 Bitcoin, worth over $5 million at the time.
Later in July 2024, Ferro flew to New Mexico on another mission. He monitored a victim’s home for several days before breaking in. He used iCloud tracking data to confirm the victim had left the property before entering.
These physical break-ins reflected a calculated shift in the group’s strategy. When victims stored funds offline in hardware wallets, online theft became impossible. Ferro filled that gap through residential burglary.
Money Laundering Operation Funded Lavish Lifestyles
After stealing the funds, the group moved quickly to launder the proceeds. Ferro used cryptocurrency exchanges to convert stolen Bitcoin into cash. He also created fraudulent digital payment accounts using stolen foreign identification documents.
The laundered funds financed an extravagant lifestyle for the group’s members. Spending included nightclub outings costing up to $500,000 per evening. The group also paid for private jets, luxury watches, designer handbags, and exotic cars, at least 28 vehicles in total.
Members rented high-end homes in the Hamptons, Los Angeles, and Miami. Monthly rent on these properties ranged from $40,000 to $80,000. Private security guards and international travel added to the group’s expenditures.
Ferro Continued Criminal Activity After Leader’s Arrest
In September 2024, authorities arrested one of the ring’s key leaders. Most members stepped back following the arrest. Ferro, however, continued operating.
He laundered hundreds of thousands of dollars in cryptocurrency after the leader’s jailing. He then converted those funds into cash to pay the leader’s legal fees. This conduct demonstrated a deliberate effort to protect the criminal network even as law enforcement closed in.
Ferro’s arrest came on May 13, 2025. Officers apprehended him carrying two firearms and a fake identification document. He pleaded guilty in October 2025 to one count of RICO conspiracy.
Second Suspect Sentenced in the Same Crypto Crime Ring
Ferro is not the only member to face sentencing. Evan Tangeman, 22, of Newport Beach, California, received a 70-month prison sentence last month. Tangeman laundered funds stolen in the same cryptocurrency scheme.
His case confirms that prosecutors are pursuing all members of the ring. The DOJ has made clear that multiple individuals face consequences for their roles. The investigation spanned several years and crossed state lines.
Both sentences reflect the federal government’s position on organized cryptocurrency crime. The DOJ is treating these cases with the same seriousness as traditional organized crime.
Federal Authorities Issue Strong Warning to Crypto Criminals
The DOJ used the sentencing to send a firm message to the broader crypto community. U.S. Attorney Pirro stated: “Today’s sentence sends a clear message: cryptocurrency fraud is not a victimless, consequence-free crime carried out safely behind a screen; it is serious criminal conduct that will lead to federal prison.”
The FBI’s most recent data supports the urgency of that message. Crypto-related fraud losses reached a record $11.3 billion last year. That figure represents more than half of the $20.9 billion in total internet crime losses the FBI tracked in the same period.
Authorities also announced last month that a global FBI-led task force arrested 276 suspects. The operation disrupted nine scam centers tied to crypto fraud schemes worldwide.
What This Case Means for Crypto Security
This case highlights a growing threat to cryptocurrency holders. Criminal networks now combine advanced digital tactics with real-world violence and burglary. Hardware wallets, once considered highly secure, proved vulnerable to physical theft.
Investigators used iCloud data, financial records, and cross-border cooperation to build the case. The multi-year investigation shows the resources federal agencies commit to crypto crime. It also shows that laundering through exchanges does not guarantee anonymity.
For crypto holders, the case is a reminder that security extends beyond the digital space. Physical storage of assets carries its own risks. Law enforcement agencies continue to adapt their methods to track and prosecute crypto-related crime at scale.
Also Read: KyberSwap Hacker Sends 1,000 ETH to Tornado Cash Amid Active DOJ Investigation
FAQS
Q1. Who is Marlon Ferro?
A1. Marlon Ferro is a 20-year-old California resident who was convicted of participating in a $250 million cryptocurrency theft conspiracy. He was known online as “GothFerrari.”
Q2. How long was Marlon Ferro sentenced to prison?
A2. A federal court sentenced Ferro to 78 months in prison, followed by three years of supervised release.
Q3. How did the crypto theft ring operate?
A3. The group used social engineering, SIM-swapping attacks, hacking, and physical burglaries to steal cryptocurrency from victims across the United States.
Q4. What role did Ferro play in the operation?
A4. Ferro carried out home invasions and stole hardware wallets containing large amounts of Bitcoin when online attacks failed.
Q5. How much cryptocurrency was stolen in the scheme?
A5. Prosecutors said the ring stole more than 4,100 Bitcoin, valued at over $230 million during the theft period.
Q6. What happened to the stolen crypto funds?
A6. The group laundered the funds through cryptocurrency exchanges and fraudulent accounts before spending the money on luxury homes, cars, private jets, and nightlife.
Q7. What charges did Ferro plead guilty to?
A7. Ferro pleaded guilty in October 2025 to one count of RICO conspiracy connected to the crypto theft operation.
Q8. Why is this case important for crypto users?
A8. The case highlights the risks of both digital and physical attacks targeting cryptocurrency holders, including theft of hardware wallets and personal data.
Sources
https://www.theblock.co/post/400337/california-man-78-months-crypto-theft
https://cryip.co/gothferrari-sentenced-in-250m-crypto-crime-ring-and-hardware-wallet-theft-case/
