‘GothFerrari’ Receives 78-Month Sentence for $250M Crypto Heist Role

A federal judge sentences 20-year-old Marlon Ferro to 78 months in prison for his participation in a massive cryptocurrency theft operation. Ferro, known online as “GothFerrari,” served as a key operative in a criminal enterprise that defrauded victims of more than $250 million. U.S. District Judge Colleen Kollar-Kotelly also mandated three years of supervised release and $2.5 million in restitution.

Execution of the Criminal Enterprise

Ferro pleaded guilty in October 2025 to one count of conspiracy to participate in a racketeer influenced and corrupt organization (RICO). Court records identified the defendant as the “instrument of last resort” for the group. The enterprise turned to Ferro for physical burglaries to secure hardware wallets when digital social engineering tactics or database hacks failed to yield results.

The defendant traveled to Winnsboro, Texas, in February 2024 to execute a residential break-in. He stole a hardware wallet containing approximately 100 Bitcoin, an asset valued at more than $5 million at the time of the theft. Ferro subsequently laundered the proceeds through various cryptocurrency exchanges.

Escalation of Tactics

Relocation to California signaled a deepening involvement in the conspiracy’s leadership structure. Ferro provided burglary services for high-value targets while managing the laundering of stolen capital. The defendant utilized fraudulent identification documents to open exchange accounts, purchased luxury assets, and arranged private jet travel for co-conspirators.

In July 2024, Ferro flew to New Mexico to target a private residence. Surveillance records confirmed that the defendant monitored the home for several days before entering through a broken window. Law enforcement agents recovered two firearms and fake identification documents during the May 13, 2025, arrest.

Prosecution and Sentencing

U.S. Attorney Jeanine Ferris Pirro characterized the organization as a hybrid criminal network. The defendant blended sophisticated online fraud with physical entry to drain assets from victims.

“Marlon Ferro served as the criminal enterprise’s instrument of last resort,” Pirro stated. “When his co-conspirators could not deceive victims into handing over access to their cryptocurrency or hack their way into digital accounts, they turned to Ferro to break into homes and steal hardware wallets outright.”

The broader investigation revealed a network with members based in multiple U.S. states and overseas. Specialized roles within the group included database hacking, target identification, and money laundering. Prosecutors confirmed the total number of convicted defendants reached 25. The FBI Cleveland Division, the U.S. Postal Inspection Service, and the U.S. Border Patrol Sandusky Bay Intelligence Unit managed the operation.

Chain Street’s Take

The Ferro conviction bridges the gap between sophisticated cyber fraud and old-school physical crime. The defendant functioned not as a master hacker, but as the operative who arrived with a brick when digital tricks failed. The group’s ability to switch between social engineering, hacking, and burglary proves how professional these criminal networks became.

The 78-month sentence and $2.5 million restitution deliver a deterrent message. Cryptocurrency theft no longer constitutes an abstract or victimless crime. When hardware wallets become the primary target, real-world consequences follow. Physical security remains as critical as digital wallet protection. Even the most secure seed phrases possess no value if an adversary remains willing to break a window to steal the device. The sentencing of Ferro constitutes only one piece of a larger investigation, as federal agents continue to pursue co-conspirators awaiting trial.