A 20-year-old California man has been sentenced to six and a half years in federal prison for his role in a sophisticated crypto theft ring that defrauded victims of more than $250 million. Marlon Ferro, known online as “GothFerrari,” was sentenced to 78 months in prison, followed by three years of supervised release, and ordered to pay $2.5 million in restitution. The sentencing, announced Wednesday by the US Attorney’s Office for the District of Columbia, stems from a Racketeer Influenced and Corrupt Organizations (RICO) conspiracy that Ferro pleaded guilty to in October 2025.
The role of ‘last resort’ in a coordinated crypto theft operation
According to court documents, Ferro served as the physical enforcer for a criminal enterprise that operated from late 2023 to early 2025. The group included members across California, Connecticut, New York, Florida, and overseas. Each conspirator had a specific role: hacking databases, identifying high-value targets, making fraudulent phone calls, and laundering stolen funds. When remote hacking or social engineering failed, the group turned to Ferro.
Also read: Bermuda to move key financial services onto Stellar blockchain, premier says
“Marlon Ferro served as the criminal enterprise’s instrument of last resort,” US Attorney Jeanine Ferris Pirro wrote in a statement. She explained that when co-conspirators could not trick victims into handing over their cryptocurrency or hack into their accounts remotely, they sent Ferro to physically break into homes and steal hardware wallets.
In one incident in February 2024, Ferro traveled to Winnsboro, Texas, broke into a home, and stole a hardware wallet containing approximately 100 Bitcoin, valued at over $5 million at the time. Months later, he flew to New Mexico, spent days surveilling a residence, and used a brick to smash his way inside while co-conspirators tracked the victim’s location through their iCloud account. A home surveillance camera captured Ferro in the act, and the footage was later used as evidence.
Luxury spending and money laundering
The stolen funds were used to finance an extravagant lifestyle. Ferro and his co-conspirators spent millions on luxury items, including Hermès Birkin bags, watches priced up to $500,000, private jet charters, and exotic cars worth as much as $3.8 million. Nightclub tabs alone reached $500,000 in a single evening.
Ferro also laundered money using fake identification documents, purchased over $255,000 in designer goods for co-conspirators, and helped a jailed conspiracy leader by converting cryptocurrency to cash to cover legal fees. The investigation was led by the FBI and IRS Criminal Investigation.
Broader context: Crypto theft losses surge
The case comes amid a broader surge in crypto-related theft. According to DefiLlama, April was the worst month for crypto hacks in over a year, with losses totaling $629.7 million. Major exploits, including KelpDAO’s $293 million incident and Drift Protocol’s $280 million hack, accounted for more than 90% of monthly losses. Chainalysis security head Yaniv Nissenboim noted that April’s hack surge reflects a shift toward sophisticated attacks targeting the infrastructure connecting onchain protocols to offchain systems.
Conclusion
Ferro’s sentencing underscores the growing sophistication of crypto theft operations, which now blend digital hacking with physical home invasions. The case highlights the importance of securing hardware wallets and being cautious about sharing personal information online. As crypto values rise, so does the incentive for coordinated criminal enterprises to target individual holders.
FAQs
Q1: What was Marlon Ferro’s role in the crypto theft ring?
Ferro was the physical enforcer, breaking into victims’ homes to steal hardware wallets when remote hacking or social engineering failed. He pleaded guilty to a RICO conspiracy.
Q2: How much was stolen in the conspiracy?
The conspiracy defrauded victims of more than $250 million in cryptocurrency. Ferro was ordered to pay $2.5 million in restitution.
Q3: What should crypto holders do to protect themselves from physical theft?
Store hardware wallets in secure, undisclosed locations, avoid sharing wallet details publicly, use multi-signature wallets, and consider using a safety deposit box. Be cautious about revealing crypto holdings on social media or in public forums.
Be the first to comment