The U.S. Department of Justice announced that 20-year-old Marlon Ferro of Santa Ana has been sentenced to 78 months in prison for his role in a large-scale cryptocurrency theft and social engineering conspiracy that led to losses exceeding $250 million for victims across the United States.
Ferro, who also used the alias “GothFerrari,” pleaded guilty in October 2025 to conspiracy to participate in a racketeering enterprise.
Crypto Burglary Operation
In addition to the 78-month prison term, the court ordered Ferro to serve three years of supervised release and to pay $2.5 million in restitution. Court filings reveal that federal investigators uncovered a multi-year operation active from late 2023 through early 2025 that involved participants in multiple U.S. states and overseas.
Authorities say the group conducted database hacks, fraudulent phone schemes, money laundering, and residential burglaries targeting individuals believed to hold substantial cryptocurrency. Prosecutors allege Ferro was recruited to physically access assets when victims stored cryptocurrency in hardware wallets that could not be reached remotely.
According to the indictment, in February 2024 Ferro traveled to Winnsboro and broke into a home, stealing a hardware wallet containing about 100 BTC, valued at more than $5 million at the time. Law enforcement says he later laundered those funds through cryptocurrency exchanges. In July 2024, Ferro allegedly flew to New Mexico and surveilled a target residence for several days before smashing a window with a brick and entering the home to search for a hardware wallet. Surveillance footage from the victim’s cameras purportedly captured that burglary.
Court documents state Ferro assisted in laundering stolen crypto by using fraudulent identification to open accounts on geo-restricted payment platforms, enabling group members to convert stolen funds into purchases at retail stores and nightclubs. Prosecutors allege Ferro purchased more than $255,000 worth of designer clothing for co‑conspirators and helped a detained leader convert cryptocurrency to cash to cover legal expenses. He is also accused of arranging the purchase and shipment of Hermès Birkin bags for an associate’s girlfriend.
When Ferro was arrested in May 2025, law enforcement officers recovered two firearms and a forged identification document, according to the court record.
Growing Real-World Threats
This prosecution comes amid rising concern about physical coercion linked to cryptocurrency thefts, often referred to as “wrench attacks,” where victims are threatened or forced to surrender access to their digital assets. Earlier in 2025, blockchain security firm CertiK reported a significant increase in crypto thefts involving physical threats.
Responding to such risks, some cryptocurrency platforms have introduced additional user protections. For example, one major exchange recently launched a feature that allows users to lock withdrawals for up to seven days, a measure intended to reduce the threat posed by physical coercion and provide account holders time to respond to suspicious activity.