Bitcoin

when

Ferro

Dubai

Crypto theft rings are increasingly moving beyond online scams into real-world violence, according to U.S. prosecutors and investigators.
Federal authorities say organized groups are now combining hacking, social engineering, burglary and physical intimidation to target <a href="https://www.thestreet.com/crypto/explained/what-is-crypto-cryptocurrency-explained" rel="noopener noreferrer nofollow">cryptocurrency </a>holders.
The warning comes as a California man known online as “GothFerrari” was sentenced to federal prison for his role in a sprawling crypto theft network tied to more than $250 million in stolen digital assets.
<a href="https://www.thestreet.com/crypto/explained/explained-what-is-a-hot-wallet" rel="noopener noreferrer nofollow">Related: Explained: What is a hot wallet?</a>
<h2 id="doj-sentences-gothferrari-in-crypto-theft-case">DOJ sentences ‘GothFerrari’ in crypto theft case</h2>
On May 6, Marlon Ferro, 20, <a href="https://www.justice.gov/usao-dc/pr/gothferrari-sentenced-78-months-prison-role-massive-cryptocurrency-heist" rel="noopener noreferrer nofollow">was sentenced</a> to 78 months in prison after pleading guilty to participating in a racketeering conspiracy tied to a nationwide crypto theft operation, according to the U.S. Department of Justice.
Federal prosecutors said Ferro acted as the organization’s “instrument of last resort” when hackers and social engineers could not remotely access victims’ crypto holdings.
Instead, the group allegedly turned to physical burglaries targeting hardware wallets, offline storage devices that cannot be hacked remotely.
In February 2024, Ferro allegedly broke into a Texas home and stole a hardware wallet containing roughly 100 Bitcoin.&nbsp;
Authorities said stolen funds financed lavish spending sprees that included $500,000 nightclub tabs, private jets, exotic cars, luxury watches, Birkin bags and rental mansions in Miami, Los Angeles and the Hamptons.
<figure>
 <figcaption>One of the Hermès Birkin bags Ferro obtained for a co-conspirator's girlfriend - Source: <a href="https://www.justice.gov/usao-dc/pr/gothferrari-sentenced-78-months-prison-role-massive-cryptocurrency-heist" rel="noopener noreferrer nofollow">DOJ&nbsp;</a>
 </figcaption>
</figure>
<blockquote>
 “Cryptocurrency fraud is not a victimless, consequence-free crime carried out safely behind a screen,” U.S. Attorney Jeanine Ferris Pirro said. 
</blockquote>
<h2 id="the-network-stretched-far-beyond-one-burglar">The network stretched far beyond one burglar</h2>
Prosecutors say Ferro was only one member of a much larger criminal organization.
A December 2025 indictment <a href="https://www.justice.gov/usao-dc/pr/guilty-plea-and-superseding-indictment-announced-social-engineering-scheme-stole-263" rel="noopener noreferrer nofollow">described </a>a multi-state RICO conspiracy that allegedly evolved from friendships formed through online gaming platforms. The network included hackers, callers, database thieves, money launderers and residential burglars.
The indictment also detailed a separate theft involving more than 4,100 Bitcoin, worth $263 million at the time, stolen from a victim in Washington, DC.
<h3 id="trending-on-thestreet-roundtable">Trending on TheStreet Roundtable:</h3>
<ul>
 <li><a href="https://www.thestreet.com/crypto/markets/another-crypto-company-dumps-bitcoin-amid-price-crash" rel="noopener noreferrer nofollow">Another crypto company dumps Bitcoin amid price crash</a></li>
 <li><a href="https://www.thestreet.com/crypto/markets/microstrategy-director-sells-company-shares-ahead-of-earnings" rel="noopener noreferrer nofollow">MicroStrategy director sells company shares ahead of earnings</a></li>
 <li><a href="https://www.thestreet.com/crypto/markets/analyst-predicts-35-upside-for-dorseys-block-ahead-of-earnings" rel="noopener noreferrer nofollow">Analyst predicts 35% upside for Dorsey's Block ahead of earnings</a></li>
</ul>
Investigators said the group relied on stolen databases, iCloud tracking, fake identities and luxury rental homes to support operations.&nbsp;
Authorities also linked the case to FBI raids, Dubai arrests and attempts to destroy digital evidence after arrests were made.
<h2 id="violent-crypto-attacks-are-spreading">Violent crypto attacks are spreading</h2>
The rise in physical crypto-related crimes is becoming a broader concern for law enforcement and investors alike.
A January Bloomberg Businessweek investigation <a href="https://www.bloomberg.com/features/2026-crypto-thieves-kidnappers/" rel="noopener noreferrer nofollow">reported </a>that crypto robberies are increasingly shifting from traditional hacks toward kidnappings, home invasions and so-called “wrench attacks,” where victims are physically forced to hand over wallet credentials.
The report cited more than 215 documented <a href="https://www.thestreet.com/economy/crypto-wrench-attacks-surge-as-thieves-use-violence-to-steal-digital-assets" rel="noopener noreferrer nofollow">physical crypto attacks</a> globally since 2020, with 2025 totals nearly doubling the prior year.
Victims are no longer limited to crypto executives or influencers. Bloomberg reported that retirees, families and ordinary investors are increasingly being targeted as crypto ownership becomes more mainstream.
Law enforcement agencies have increasingly warned that hardware wallets,&nbsp;long promoted as one of the safest ways to store crypto, may also make holders direct targets for organized criminal groups seeking access to digital assets.
<a href="https://www.thestreet.com/crypto/markets/wall-street-backs-trading-giant-after-valuation-doubles" rel="noopener noreferrer nofollow">Related: Wall Street backs trading giant after valuation doubles</a>

Crypto thief sentenced to federal prison after lavish spending spree

Table of Contents

TheStreet Roundtable

Other articles published on May 7, 2026

Join our free newsletter for daily crypto updates!