A new case revealed in the United States is once again bringing to the fore a disturbing reality for the cryptocurrency market: as digital technologies evolve, forms of cybercrime become more complex and dangerous. A 20-year-old from California, Marlon Ferro, has been sentenced to 78 months in prison for his participation in a criminal organization that allegedly stole more than $250 million in crypto.
The case is not about a conventional digital fraud. It is about an unprecedented hybrid model of criminal activity that combined social engineering, personal account hacking, physical home burglaries, and money laundering through crypto exchanges.
Ferro's role in the criminal chain
Ferro, known online by the aliases GothFerrari and Marlo, was arrested in May 2025 for possession of two firearms and fake identification documents. Along with the prison sentence, the court ordered him to pay $2.5 million in restitutionand will remain on probation for three years after his release.
See also: Fake Claude website distributes new “Beagle” malware
According to US authorities, Ferro was the organization's "ultimate operational tool." When cyberattacks failed and victims refused to surrender access to their digital wallets, he took action himself.
His mission was simple but extremely dangerous: physically break into homes and steal hardware wallets, which often contained millions in Bitcoin and other digital assets.
From phishing to home burglaries
The gang primarily targeted investors believed to hold large amounts of crypto. They initially used social engineering, phishing, and cloud account hacking techniques to gain access to wallets.
When this was not possible, they switched to more aggressive tactics.
A typical case is February 2024, when Ferro traveled to Texas and broke into a residence in Winnsboro, removing a hardware wallet containing approximately 100 Bitcoins, worth over $5 million at the time.
A few months later, he carried out another operation in New Mexico. His team monitored the victim by accessing his iCloud account, confirming when he was away from home. Ferro broke a window with a brick and entered, following a plan that more closely resembles organized physical crime than a traditional cyberattack.
See also: Global data breach hits Queensland schools via QLearn
Money laundering through digital channels
The organization's activities did not stop at theft. The stolen funds were channeled through crypto mixers, exchanges, and fake payment, so as to lose all trace of them.
Ferro allegedly created fraudulent digital card accounts using fake identities, allowing gang members to make purchases without a direct connection to the stolen assets.
More designer clothing worth over $255,000 was purchased through these accounts , while the money was also used to fund legal expenses for one of the group's leaders.
🔒 Protect your privacy with Proton VPN
Swiss VPN from the creators of Proton Mail — strict no-logs policy, strong encryption, and built-in NetShield that blocks ads, trackers, & malware.
- ✔ No-logs, based in Switzerland (except 14-Eyes)
- ✔ NetShield: blocks ads, trackers & malicious domains
- ✔ Covers all devices — free version available
The link is an affiliate link — SecNews may receive a commission at no additional cost to you. It does not affect the independence of our article writing.
A crypto lifestyle built on fraud
The investigation revealed an extremely lavish lifestyle. Gang members allegedly spent up to $500,000 on a single night out, while maintaining a fleet of 28 luxury vehicles, private jets and luxury homes in the Hamptons, Los Angeles and Miami.
See also: Phishing campaign targets ManageWP users via Google Ads
The rents for the homes ranged from $40,000 to $80,000 per month, while the display of wealth included collectible watches, designer accessories, and international travel.
This picture highlights a new form of crime: crypto-fueled luxury crime, where the anonymity of blockchain transactions acts as a lever to finance excessive consumption.
The message to the crypto industry
This specific case highlights that cryptocurrency security is no longer limited to digital protection.
Investors are urged to review the physical security of their hardware wallets , avoid disclosing crypto assets, and implement multi-layered protection strategies.
With 14 defendants in total and more than 4,100 Bitcoin at the center of the investigation, the case is a stark reminder that technology can offer financial freedom, but without adequate protection it can become a playground for a new, highly organized digital crime.
Source: www.bleepingcomputer.com
