The Rise and Fall of a Cryptocurrency Criminal Ring
In a shocking turn of events, a 20-year-old California man, Marlon Ferro, has been sentenced to 78 months in prison for his involvement in a criminal ring that orchestrated home invasions and money laundering, ultimately stealing over $250 million in cryptocurrency.
Marlon Ferro, also known as GothFerrari and Marlo in the online world, was apprehended on May 13, 2025, while carrying two firearms and a counterfeit identification document. Following his guilty plea in October, he was ordered to serve three years of supervised release and pay $2.5 million in restitution.
Court documents reveal that the criminal ring focused on individuals believed to possess significant amounts of cryptocurrency between late 2023 and early 2025. Through social engineering tactics, they coerced victims into granting access to their digital wallets. When victims opted for hardware wallets for storing their funds, the group turned to Ferro’s expertise in residential burglaries.
U.S. Attorney Pirro emphasized, “Marlon Ferro played a crucial role as the last resort for the criminal enterprise. When other tactics failed, they relied on Ferro to break into homes and steal hardware wallets, blending sophisticated online fraud with traditional burglary methods to drain victims of millions in digital assets.”
One notable incident occurred in February 2024 when Ferro journeyed to Winnsboro, Texas, broke into a victim’s residence, and made off with a hardware wallet containing around 100 Bitcoins, valued at over $5 million at the time. Subsequently, he laundered the stolen funds through cryptocurrency exchanges.
In another daring move in July of the same year, Ferro traveled to New Mexico, surveilled a victim’s home for several days using a cell phone, and forcibly entered the premises by breaking a window with a brick. This break-in was facilitated by accomplices who tracked the victim’s location via his iCloud account.
Ferro, after breaking into the New Mexico victim’s home using a brick (DOJ)
Ferro further engaged in fraudulent activities by establishing a digital payment card account using false identification. This account enabled his associates to spend stolen funds at nightclubs and retail outlets, as well as purchase designer clothing worth over $255,000 on their behalf.
Even after one of the leaders of the criminal ring was incarcerated in September 2024, Ferro continued to launder cryptocurrency to support the leader’s legal defense.
Joining Ferro in his criminal endeavors was 22-year-old Evan Tangeman from Newport Beach, California, who was sentenced to 70 months in prison for his involvement in laundering funds from the same extensive cryptocurrency heist.
In a sweeping legal action, fourteen suspects were charged in September 2024 and May 2025 with a RICO conspiracy involving over 4,100 Bitcoin, valued at more than $230 million at the time. The group laundered the stolen funds through mixing services and crypto exchanges.
The ill-gotten gains were utilized to finance extravagant lifestyles, including private security services, exorbitant nightclub escapades costing up to $500,000 per night, international travel, luxury watches, and designer handbags for their partners.
The criminal syndicate also rented opulent residences in the Hamptons, Los Angeles, and Miami, along with private jets and a collection of at least 28 high-value cars ranging from $100,000 to $3.8 million.
An AI exploit chain comprising four zero-days bypassed both renderer and OS sandboxes, heralding a wave of impending exploits. Discover how autonomous, context-rich validation at the Autonomous Validation Summit (May 12 & 14) identifies vulnerabilities, confirms control efficacy, and closes the remediation loop.