Man sentenced to 6.5 years for stealing 100 BTC in home invasion tied to $250 million crypto theft ring

A 20-year-old man who admitted to physically stealing approximately 100 Bitcoin during a home invasion in Texas has been sentenced to six and a half years in federal prison. The sentence, handed down on May 6, 2025, in Washington, D.C., is part of a broader crackdown on a sophisticated social engineering ring that stole over $250 million in cryptocurrency from victims across the United States.

Inside the criminal operation

Marlon Ferro, who operated online under the alias “GothFerrari,” pleaded guilty to Racketeer Influenced and Corrupt Organizations (RICO) conspiracy charges in October 2024. According to court documents, the organization operated from late 2023 to early 2025, with operational bases in California, New York, and Florida. The group used a combination of database hacking, impersonation phone calls, money laundering, and targeted home invasions to access and steal cryptocurrency from victims.

Ferro’s specific role was to physically obtain cold wallets—offline cryptocurrency storage devices that cannot be accessed remotely. In February 2024, he broke into a victim’s home in Texas and stole approximately 100 Bitcoin, valued at over $5 million at the time. The stolen funds were later used to purchase more than $255,000 in luxury goods, including high-end clothing and jewelry.

Funds used to pay legal fees for ringleader

In a revealing detail about the group’s internal structure, Ferro also converted some of the stolen cryptocurrency into cash to cover legal fees for the ringleader, who had been arrested in September 2024. This indicates a coordinated effort to protect the operation’s leadership even as members faced prosecution.

In addition to the prison sentence, the court ordered three years of supervised release and $2.5 million in restitution. The case underscores the growing sophistication of crypto theft rings that combine digital hacking skills with physical violence or intimidation.

Why this case matters for crypto users

This case highlights a critical vulnerability for cryptocurrency holders: cold wallets, while secure against remote hacking, remain susceptible to physical theft. The sentencing serves as a warning that law enforcement is increasingly capable of dismantling complex criminal networks that operate across state lines and use both digital and physical methods to steal assets.

The RICO charges also signal that prosecutors are willing to apply organized crime statutes to crypto theft rings, potentially leading to longer sentences and more aggressive investigations.

Conclusion

The sentencing of Marlon Ferro marks a significant step in holding accountable those who use home invasions to steal cryptocurrency. As the value of digital assets continues to attract organized criminal attention, this case reinforces the need for holders to adopt multi-layered security strategies that include both digital protections and physical safeguards for their assets.

FAQs

Q1: What is a cold wallet?
A cold wallet is a physical device or offline storage method used to hold cryptocurrency private keys, making it inaccessible via the internet and thus more secure from remote hacking.

Q2: Why was Ferro charged under RICO laws?
RICO laws allow prosecutors to target entire criminal organizations rather than just individual crimes. Ferro’s involvement in a coordinated group that used multiple methods—including hacking, impersonation, and home invasion—qualified as a pattern of racketeering activity.

Q3: What should crypto holders do to protect against physical theft?
Store cold wallets in secure, hidden locations such as safes or bank deposit boxes. Avoid publicly disclosing crypto holdings or wallet locations. Consider using multi-signature wallets or splitting keys across multiple secure locations.