Marlon Ferro Sentenced to 78 Months in $250M Crypto Theft Network Case

• Marlon Ferro, aka ‘GothFerrari,’ was sentenced to 78 months for his role in a $250M crypto theft network.
• The group used social engineering, laundering, and home burglaries to steal crypto.
• Ferro acted as a physical access operator and pleaded guilty to RICO conspiracy.

Marlon Ferro, a 20-year-old from Santa Ana, California, has been sentenced to 78 months in federal prison for his role in a criminal network that stole more than $250 million in cryptocurrency.

Known online as “GothFerrari,” Ferro was tied to a multi-state social engineering operation that mixed digital fraud, money laundering, and home break-ins. The case showed how the group moved beyond online scams when victims protected their assets with hardware wallets.

According to court records, Ferro became the crew’s physical-access operator, entering homes to steal devices that could not be hacked remotely. He pleaded guilty on October 17, 2025, to conspiracy to participate in a racketeer-influenced and corrupt organization.

From Online Deception to Home Break-Ins

Federal investigators said the enterprise operated from late 2023 to early 2025 and involved members in California, Connecticut, New York, Florida, and abroad. Each person had a defined role, including database hacking, victim selection, fraudulent phone calls, laundering, and residential burglary.

The group targeted people believed to hold large cryptocurrency balances. In many cases, members attempted to trick victims into surrendering access to digital wallets. When those efforts failed, or when funds were stored on offline hardware devices, Ferro was used to reach the wallets physically.

One major burglary took place in February 2024 in Winnsboro, Texas. Ferro traveled to the victim’s home, broke in, and stole a hardware wallet containing about 100 bitcoin. At the time, the stolen bitcoin was worth more than $5 million.

Prosecutors said he later helped launder the funds through cryptocurrency exchanges. After moving to California in early 2024, Ferro deepened his ties with the network. Court documents said he offered burglary services to other members, including senior figures in the racketeering conspiracy.

In July 2024, he flew to New Mexico and watched another target’s home for several days. He placed a phone outside the property to monitor activity. After co-conspirators tracked the victim through an iCloud account and acknowledged he had left, Ferro smashed a window with a brick and entered the home. Surveillance cameras captured the break-in.

Stolen Crypto Funded Luxury Spending

Investigators said the crypto heist funded a lavish spending spree. Members used stolen assets to pay for nightclub services costing up to $500,000 per night, private jets, luxury homes, designer clothing, exotic cars, and watches worth as much as $500,000.

Ferro also played a laundering role. He used fake identification documents to open a digital payment card account on a geo-blocked platform. That account allowed the group to spend stolen crypto at retail stores and nightclubs.

Court records said he bought more than $255,000 in designer clothing for co-conspirators using stolen funds. He also arranged Hermès Birkin bag purchases for a conspiracy leader’s girlfriend.

Even after one leader was jailed in September 2024, Ferro continued assisting the group. He collected hundreds of thousands of dollars in cryptocurrency, converted it to cash through illicit exchanges, and used the money to pay legal fees.

However, Ferro was later arrested on May 13, 2025. Authorities said he was found with two firearms and a fake identification document. Along with the 6.5-year prison sentence, the court ordered three years of supervised release and $2.5 million in restitution.

Related: Ripple Shares DPRK Threat Intel With Crypto ISAC to Fight Crypto Infiltration