‘GothFerrari’ Sentenced to 78 Months in Prison for Role in Massive Cryptocurrency Heist

WASHINGTON - Marlon Ferro, 20, of Santa Ana, California, was sentenced today in U.S. District Court to 78 months in prison in connection with his role in a sprawling social engineering conspiracy that stole well over $250 million in cryptocurrency from victims across the United States, announced U.S. Attorney Jeanine Ferris Pirro.

"Marlon Ferro served as the criminal enterprise's instrument of last resort. When his co-conspirators couldn't deceive victims into handing over access to their cryptocurrency or hack their way into digital accounts, they turned to Ferro to break into homes and steal hardware wallets outright," said U.S. Attorney Pirro. "This scheme blended sophisticated online fraud with old-fashioned burglary to drain victims of millions of dollars in digital assets. Today's sentence sends a clear message: cryptocurrency fraud is not a victimless, consequence-free crime carried out safely behind a screen-it is serious criminal conduct that will lead to federal prison."

Ferro, aka "GothFerrari," pleaded guilty on Oct. 17, 2025, before Judge Colleen Kollar-Kotelly to one count of conspiracy to participate in a racketeer influenced and corrupt organization. In addition to the 78-month prison sentence, Judge Kollar-Kotelly ordered Ferro to serve three years of supervised release and to pay $2.5 million in restitution.

According to court documents, a multi-year federal investigation uncovered a social engineering enterprise that defrauded victims of more than $250 million in cryptocurrency between late 2023 and early 2025. Members of the enterprise - based in California, Connecticut, New York, Florida, and abroad - played specialized roles that included database hacking, target identification, fraudulent phone calls, money laundering, and residential burglary.

Members and associates of the social engineering enterprise used stolen virtual currency to purchase, among other things, nightclub services ranging up to $500,000 per evening, luxury handbags valued in the tens of thousands of dollars which were given away at nightclub parties, luxury watches valued between $100,000 up to over $500,000, luxury clothing valued in the tens of thousands of dollars, rental homes in Los Angeles, the Hamptons, and Miami, private jet rentals for travel, a team of private security guards, and a fleet of exotic cars, ranging in value from $100,000 up to $3,800,000.

The conspiracy's operatives typically targeted individuals believed to hold significant cryptocurrency holdings. Its members manipulated victims into surrendering access to their digital wallets through elaborate fraud schemes. When victims stored their cryptocurrency in hardware wallets, physical devices that cannot be accessed remotely, the enterprise turned to Ferro.

In February 2024, Ferro traveled to Winnsboro, Texas, broke into a victim's home, and stole a hardware wallet containing about 100 bitcoin, at the time valued at more than $5 million. He then laundered the stolen funds through cryptocurrency exchanges.

After relocating to California in early 2024, Ferro connected with enterprise members and ingratiated himself with his co-conspirators, including the leaders of the racketeering conspiracy, offering his residential burglary services for future cryptocurrency thefts.

Surveillance photo of Ferro after he used a brick to break into a victim's home in New Mexico.

In July 2024, Ferro flew to New Mexico, where he surveilled a residence for several days, positioning a cell phone outside the home to monitor the victim's movements. When co-conspirators tracking the victim's location through his iCloud account indicated he had left, Ferro broke into the home by smashing a window with a brick and searched for the target hardware wallet. He was captured on the victim's home surveillance camera.

Ferro was not only the enterprise's burglar, he was also a key money launderer. He used fraudulent identification documents obtained from a foreign national to open a digital payment card account at a geo-blocked platform, allowing enterprise members to spend stolen cryptocurrency at retail locations and nightclubs in Miami and elsewhere. He purchased more than $255,000 in designer clothing on behalf of his co-conspirators using stolen funds.

One of the Hermès Birkin bags Ferro obtained for a co-conspirator's girlfriend.

After a leader of the conspiracy was arrested and jailed in September 2024, Ferro continued to assist him from the outside. He collected hundreds of thousands of dollars in cryptocurrency from other enterprise members, converted it to cash through illicit exchanges, and used the proceeds to pay the conspiracy leader's attorneys. Ferro also arranged the purchase and shipment of Hermès Birkin bags for the co-conspirator's girlfriend.

Ferro was arrested on May 13, 2025, and found to be in possession of two firearms and a fake identification document.

Law enforcement recovered this 9mm black rifle from Ferro.

The Glock 19 9mm pistol that law enforcement recovered from Ferro.

The investigation was conducted by the U.S. Attorney's Office for the District of Columbia, the FBI Washington Field Office, and the Internal Revenue Service - Criminal Investigation, Washington Field Office. Significant investigative and operational support was provided by the FBI's Los Angeles and Miami field offices.

The matter was prosecuted by Assistant U.S. Attorneys Christopher Howland and David Liss. Former Assistant U.S. Attorney Will Hart provided valuable assistance.

24cr417