A 20-year-old California man, Marlon Ferro “GothFerrari,” was sentenced to 78 months (~6.5 years) in federal prison for his role in a $250M crypto ring theft. Ferro, who was sentenced for breaking into homes to steal hardware wallets, was also ordered to pay $2.5 million in restitution.
Court documents suggest that the syndicate stole more than $250 million in crypto between 2023 and early 2025. Members of the crime ring allegedly led by Singaporean Malone Lam were based in California, Connecticut, New York, Florida, and abroad.
Meanwhile, Ferro was supposedly tasked with buying luxury handbags worth tens of thousands of dollars for Lam’s girlfriend after the boss was arrested and detained.
Syndicate destroys the illusion of technological safety
The vulnerability of digital assets often starts in the physical world, destroying the illusion of technological safety. In Ferro’s case, the syndicate’s ability to compromise iCloud accounts allowed them to track victims’ GPS locations in real time. That turned a digital heist into a physical threat, where Ferro acted as the “proverbial muscle” to seize hardware wallets when remote manipulation failed.
Technically, the group did not need to crack private keys if they could trick the owners into handing them over through a fake support call or a spoofed security alert.
The Ferro case unveils the grim reality of security in the crypto space: it is only as strong as the users’ individual footprints. Even “cold storage” (hardware wallets) could not protect assets once Ferro physically entered a victim’s home. The attackers often identified targets through their online presence, turning a display of digital wealth into a physical target.
“Marlon Ferro served as the criminal enterprise’s instrument of last resort. When his co-conspirators couldn’t deceive victims into handing over access to their cryptocurrency or hack their way into digital accounts, they turned to Ferro to break into homes and steal hardware wallets outright.”
-Jeanine Pirro, U.S. Attorney for the District of Columbia
On the other hand, U.S. prosecutors noted the “cartoonish” nature of the syndicate’s spending on Rolls Royces, Birkin bags, and $500,000 nightclub tabs–all funded by the psychological undoing of their victims. It serves as a reminder that for these predators, crypto is not a difficult mathematical puzzle; it is just a high-stakes game of con artistry.
The bottom line is that human nature cannot be patched. Even the most secure wallet in the world is only one “human error” away from being emptied as long as users can be tracked, tricked, or intimidated.
FBI leads investigation conducted by U.S. Attorney’s Office
The U.S. Attorney’s Office for the District of Columbia, the FBI Washington Field Office, and the Internal Revenue Service – Criminal Investigation, Washington Field Office conducted the investigation.
The FBI’s Miami and Los Angeles field offices provided significant investigative and operational support. Law enforcement recovered a Glock 19 (9mm) pistol from Ferro.
U.S. Attorney Pirro also stresses that this scheme combined online fraud with old-fashioned burglary to drain victims of millions of dollars in digital assets. Ferro’s case sends a clear message that crypto fraud is not a victimless, consequence-free crime carried out safely behind a screen. Rather, it is serious criminal conduct that will lead to federal prison.
Meanwhile, the matter was prosecuted by the Assistant U.S. Attorneys Christopher Howland and David Liss. Former Assistant U.S. Attorney Will Hart provided valuable assistance. GothFerrari pleaded guilty on October 17, 2025, before Judge Colleen Kollar-Kotelly.
On the other hand, Evan Tangeman was sentenced in April 2026 to 70 months in federal prison for his role in laundering approximately $263 million for a crypto theft ring. Tangeman pleaded guilty to laundering at least $3.5 million for the multi-state criminal enterprise.
If you want a calmer entry point into DeFi crypto without the usual hype, start with this free video.
