DB-cleanup/merge-output/sources/449_Unidentified.txt

================================================================================================
CASE 449  |  Unidentified  |  February ?, 2024  |  USA
================================================================================================

DATABASE RECORD
  id                  449
  date                February ?, 2024
  original_date       February ?, 2024
  year                2024
  month               2
  quarter             2024-Q1
  victim              Unidentified
  location            Winnsboro, Texas
  country             USA
  scenario            Home Invasion
  description         Marlon Ferro ("GothFerrari"), 20, of Santa Ana, California, traveled to Winnsboro, Texas and broke into a victim's home to steal a hardware wallet containing approximately 100 Bitcoin (~$5M at the time), acting as the "burglar of last resort" for a sprawling social engineering conspiracy that stole over $250 million in cryptocurrency.
  kidnappings         0
  violence_torture    0
  drugs_alcohol       0
  weapons             0
  theft               1
  life_taken          0
  money_wanted        Bitcoin
  coin_type           A hardware wallet containing ~100 Bitcoin, valued at approximately $5,000,000 at time of theft.
  reports             United States Attorney's Office
  notes               He then laundered the stolen funds through cryptocurrency exchanges. 
  has_processed_date  0
  created_at          2026-05-28 15:40:33
  (flag legend: 'kidnappings' is the DETENTION flag — 1 when the victim was held against
   their will at any point, tied, locked in, held at gunpoint or taken away; it is NOT the
   same as the 'Kidnapping' scenario, which means taken away and held. See README, Definitions.)

AI SUMMARY  [generated at bulk import, NOT verified against sources]
  **Victims:** Unnamed individual. Winnsboro, Wood County, Texas. Held significant Bitcoin in a physical hardware wallet.
  
  **Attackers:** Marlon Ferro, aka "GothFerrari," 20, Santa Ana, California. Acting as physical burglar for a multi-state social engineering enterprise based in California, Connecticut, New York, Florida, and abroad. Co-conspirators identified victim through database hacking and target identification.
  
  **Attack Method:** Ferro traveled to Winnsboro, conducted surveillance of residence, broke into the home and stole hardware wallet. No occupants present during burglary. Funds subsequently laundered through crypto exchanges.
  
  **Violence Used:** Breaking and entering. No occupants present. No physical violence against a person.
  
  **Crypto Demanded/Stolen:** ~100 Bitcoin, valued at approximately $5,000,000 at time of theft (February 2024).
  
  **Status:** Ferro arrested May 13, 2025, found with two firearms and fake ID. Pleaded guilty October 17, 2025 to conspiracy to participate in a RICO enterprise. Sentenced May 6, 2026

LINKED SOURCES
  [url]  https://www.justice.gov/usao-dc/pr/gothferrari-sentenced-78-months-prison-role-massive-cryptocurrency-heist
  [url_2]  https://www.bleepingcomputer.com/news/security/crypto-gang-member-gets-65-years-for-role-in-230-million-heist/
  [url_3]  https://beincrypto.com/gothferrari-crypto-theft-78-month-sentence/
  [url_4]  https://www.washingtontimes.com/news/2026/may/7/gothferrari-gets-65-years-role-250m-crypto-theft-conspiracy/

------------------------------------------------------------------------------------------------
FETCHED ARTICLE 1  [AUTO-TRIMMED — UNREVIEWED]
  !! Furniture was cut by a script keyed on this case's record, not by a person.
  !! It may still carry passages about OTHER cases from a round-up article.
  !! The full page extract is kept in staging/ if a cut needs revisiting.
  Source     justice.gov
  URL        https://www.justice.gov/usao-dc/pr/gothferrari-sentenced-78-months-prison-role-massive-cryptocurrency-heist
  Field      url
  Retrieved  2026-09-05T13:21:19+00:00 via Wayback Machine snapshot 20260715175240, deterministic extraction (HTTP None)
  Language   unknown
  Kept       paragraphs headline [0] + 9-32 of 33
  Length     6,564 chars
  Integrity  sha256 54d13d618bb83b617c2127ddf18958d765922c9e4616734ce8685f1f3eea3d6c
  Trimmed    AUTO-TRIMMED, unreviewed: kept paragraphs 9-32 plus headline [0]; dropped 8 leading and 0 trailing paragraphs. Case-term hits on page: 31.
  Note       live URL was THIN on the first pass; text comes from an archived copy dated 2026-07-15
  Archive    http://web.archive.org/web/20260715175240/https://www.justice.gov/usao-dc/pr/gothferrari-sentenced-78-months-prison-role-massive-cryptocurrency-heist
  Caveat     retrieved from a Wayback Machine snapshot, not the live page. The
             snapshot date is in the method line; the live URL was unreadable.
------------------------------------------------------------------------------------------------

ORIGINAL (unknown, verbatim as retrieved)

District of Columbia | ‘GothFerrari’ Sentenced to 78 Months in Prison for Role in Massive Cryptocurrency Heist | United States Department of Justice

WASHINGTON - Marlon Ferro, 20, of Santa Ana, California, was sentenced today in U.S. District Court to 78 months in prison in connection with his role in a sprawling social engineering conspiracy that stole well over $250 million in cryptocurrency from victims across the United States, announced U.S. Attorney Jeanine Ferris Pirro.

“Marlon Ferro served as the criminal enterprise’s instrument of last resort. When his co-conspirators couldn’t deceive victims into handing over access to their cryptocurrency or hack their way into digital accounts, they turned to Ferro to break into homes and steal hardware wallets outright,” said U.S. Attorney Pirro. “This scheme blended sophisticated online fraud with old-fashioned burglary to drain victims of millions of dollars in digital assets. Today’s sentence sends a clear message: cryptocurrency fraud is not a victimless, consequence-free crime carried out safely behind a screen—it is serious criminal conduct that will lead to federal prison.”

Ferro, aka “GothFerrari,” pleaded guilty on Oct. 17, 2025, before Judge Colleen Kollar-Kotelly to one count of conspiracy to participate in a racketeer influenced and corrupt organization. In addition to the 78-month prison sentence, Judge Kollar-Kotelly ordered Ferro to serve three years of supervised release and to pay $2.5 million in restitution.

According to court documents, a multi-year federal investigation uncovered a social engineering enterprise that defrauded victims of more than $250 million in cryptocurrency between late 2023 and early 2025. Members of the enterprise — based in California, Connecticut, New York, Florida, and abroad — played specialized roles that included database hacking, target identification, fraudulent phone calls, money laundering, and residential burglary.

Members and associates of the social engineering enterprise used stolen virtual currency to purchase, among other things, nightclub services ranging up to $500,000 per evening, luxury handbags valued in the tens of thousands of dollars which were given away at nightclub parties, luxury watches valued between $100,000 up to over $500,000, luxury clothing valued in the tens of thousands of dollars, rental homes in Los Angeles, the Hamptons, and Miami, private jet rentals for travel, a team of private security guards, and a fleet of exotic cars, ranging in value from $100,000 up to $3,800,000.

The conspiracy’s operatives typically targeted individuals believed to hold significant cryptocurrency holdings. Its members manipulated victims into surrendering access to their digital wallets through elaborate fraud schemes. When victims stored their cryptocurrency in hardware wallets, physical devices that cannot be accessed remotely, the enterprise turned to Ferro.

In February 2024, Ferro traveled to Winnsboro, Texas, broke into a victim’s home, and stole a hardware wallet containing about 100 bitcoin, at the time valued at more than $5 million. He then laundered the stolen funds through cryptocurrency exchanges.

After relocating to California in early 2024, Ferro connected with enterprise members and ingratiated himself with his co-conspirators, including the leaders of the racketeering conspiracy, offering his residential burglary services for future cryptocurrency thefts.

Surveillance photo of Ferro after he used a brick to break into a victim’s home in New Mexico.

In July 2024, Ferro flew to New Mexico, where he surveilled a residence for several days, positioning a cell phone outside the home to monitor the victim’s movements. When co-conspirators tracking the victim’s location through his iCloud account indicated he had left, Ferro broke into the home by smashing a window with a brick and searched for the target hardware wallet. He was captured on the victim’s home surveillance camera.

Ferro was not only the enterprise’s burglar, he was also a key money launderer. He used fraudulent identification documents obtained from a foreign national to open a digital payment card account at a geo-blocked platform, allowing enterprise members to spend stolen cryptocurrency at retail locations and nightclubs in Miami and elsewhere. He purchased more than $255,000 in designer clothing on behalf of his co-conspirators using stolen funds.

One of the Hermès Birkin bags Ferro obtained for a co-conspirator's girlfriend.

After a leader of the conspiracy was arrested and jailed in September 2024, Ferro continued to assist him from the outside. He collected hundreds of thousands of dollars in cryptocurrency from other enterprise members, converted it to cash through illicit exchanges, and used the proceeds to pay the conspiracy leader’s attorneys. Ferro also arranged the purchase and shipment of Hermès Birkin bags for the co-conspirator's girlfriend.

Ferro was arrested on May 13, 2025, and found to be in possession of two firearms and a fake identification document.

Law enforcement recovered this 9mm black rifle from Ferro.

The Glock 19 9mm pistol that law enforcement recovered from Ferro.

The investigation was conducted by the U.S. Attorney’s Office for the District of Columbia, the FBI Washington Field Office, and the Internal Revenue Service - Criminal Investigation, Washington Field Office. Significant investigative and operational support was provided by the FBI’s Los Angeles and Miami field offices.

The matter was prosecuted by Assistant U.S. Attorneys Christopher Howland and David Liss. Former Assistant U.S. Attorney Will Hart provided valuable assistance.

Dominican Republic National Pleads Guilty to Participating in $1 Million Unemployment Fraud Scheme

Karin L. Contreras, 45, a Dominican Republic citizen and U.S. lawful permanent resident, pleaded guilty today in U.S. District Court in connection with a scheme to defraud unemployment programs, announced U.S. Attorney Jeanine...

Guilty Plea Unsealed for Former DC Public Schools Administrator Involved in Bribery Scheme

Tracy Hatton, 60, of the District of Columbia, a former administrative officer at McKinley Technology High School, pleaded guilty to bribery in connection with a scheme that caused a loss...

Maryland Resident Pleads Guilty in D.C. Apartment Fraud Using Fake Government Job Offers

Tisha Lee, 38, a former contract employee for the U.S. Government Publishing Office, pleaded guilty yesterday in U.S. District Court in connection with a scheme in which she used her...

------------------------------------------------------------------------------------------------
FETCHED ARTICLE 2
  Source     bleepingcomputer.com
  URL        https://www.bleepingcomputer.com/news/security/crypto-gang-member-gets-65-years-for-role-in-230-million-heist/
  Field      url_2
  Retrieved  2026-08-06T13:38:13+00:00 via raw HTTP retrieval, deterministic extraction (HTTP 200)
  Language   unknown
  Kept       paragraphs headline [0] + 1-14 of 34
  Length     3,156 chars
  Integrity  sha256 65622cbe36e12f7eafef17eae96a585cdbe26dfa6905bff14a343e31d35d10c0
  Trimmed    dropped trailing Picus sponsored-whitepaper promo
  Caveat     retrieved from a live page on the date above. Unlike text copied
             from the spreadsheet, there is no second copy to hash it against.
------------------------------------------------------------------------------------------------

ORIGINAL (unknown, verbatim as retrieved)

Crypto gang member gets 6.5 years for role in $230 million heist

A 20-year-old California man was sentenced to 78 months in prison for serving as a home invader and money launderer in a criminal ring that stole over $250 million in cryptocurrency.

Marlon Ferro (also known online as GothFerrari and Marlo) was arrested on May 13, 2025, carrying two firearms and a fake identification document. He pleaded guilty in October and was also ordered to pay $2.5 million in restitution and serve three years of supervised release.

According to court documents, the criminal ring targeted individuals believed to hold significant cryptocurrency between late 2023 and early 2025.

They used social engineering to trick their victims into giving them access to digital wallets, and when victims stored funds in hardware wallets, the conspiracy shifted to Ferro's expertise in residential burglaries.

"Marlon Ferro served as the criminal enterprise's instrument of last resort. When his co-conspirators couldn't deceive victims into handing over access to their cryptocurrency or hack their way into digital accounts, they turned to Ferro to break into homes and steal hardware wallets outright," said U.S. Attorney Pirro on Wednesday.

"This scheme blended sophisticated online fraud with old-fashioned burglary to drain victims of millions of dollars in digital assets."

In February 2024, Ferro traveled to Winnsboro, Texas, broke into a victim's home, stole a hardware wallet containing approximately 100 Bitcoins (then valued at more than $5 million), and laundered the funds through cryptocurrency exchanges.

In July, the same year, Ferro flew to New Mexico, monitored a victim's home for several days using a cell phone, and broke in by smashing a window with a brick after accomplices tracking the victim's location through his iCloud account confirmed they had left the residence.

​He also opened a fraudulent digital payment card account using fake identification to enable his accomplices to spend stolen funds at nightclubs and retail locations, and to buy more than $255,000 in designer clothing on their behalf.

Additionally, after one of the criminal ring's leaders was jailed in September 2024, Ferro continued laundering cryptocurrency to fund the leader's legal defense.

Last month, 22-year-old Evan Tangeman of Newport Beach, California, was also sentenced to 70 months in prison for laundering funds stolen in the same massive cryptocurrency heist.

In all, fourteen suspects were charged in September 2024 and May 2025 with a RICO conspiracy involving over 4,100 Bitcoin (worth more than $230 million at the time) and laundering the stolen funds through mixing services and crypto exchanges.

They used the stolen cryptocurrency to finance lavish lifestyles, including private security guards, nightclub outings ranging up to $500,000 per evening, international travel, high-end watches, and designer handbags for their girlfriends.

The criminal group also rented homes in the Hamptons, Los Angeles, and Miami for $40,000 to $80,000 per month, as well as private jets and a fleet of at least 28 cars valued from $100,000 to $3.8 million.

------------------------------------------------------------------------------------------------
FETCHED ARTICLE 3
  Source     beincrypto.com
  URL        https://beincrypto.com/gothferrari-crypto-theft-78-month-sentence/
  Field      url_3
  Retrieved  2026-08-06T13:38:14+00:00 via raw HTTP retrieval, deterministic extraction (HTTP 200)
  Language   unknown
  Kept       paragraphs headline [0] + 5-16 of 28
  Length     2,241 chars
  Integrity  sha256 5b073197fba4f9bc31c654f73f2c11e4158a77ed6b7f891383f0ec280b8afd94
  Trimmed    trimmed on read-through
  Caveat     retrieved from a live page on the date above. Unlike text copied
             from the spreadsheet, there is no second copy to hash it against.
------------------------------------------------------------------------------------------------

ORIGINAL (unknown, verbatim as retrieved)

Crypto Burglar Known as ‘GothFerrari’ Draws 78-Month Prison Term

A US judge has sentenced a California man known as GothFerrari to 78 months in prison for his role in a crypto social engineering ring that turned to home burglaries when victims could not be deceived online.

Marlon Ferro, 20, of Santa Ana, also faces $2.5 million in restitution and three years of supervised release.

Inside the $250 Million Crypto Theft Ring

A multi-year federal investigation revealed that the enterprise drained more than $250 million in cryptocurrency from victims between late 2023 and early 2025. Its members operated out of California, Connecticut, New York, Florida, and overseas.

The crew specialized in roles that included database hacking, target identification, fraudulent phone calls, and money laundering. When social engineering failed, the ring sent Ferro to physically steal hardware wallets from victims’ homes.

“Marlon Ferro served as the criminal enterprise’s instrument of last resort… they turned to Ferro to break into homes and steal hardware wallets outright,” US Attorney Pirro said.

Brick-Through-Window Crypto Burglaries and Designer Spending

According to the press release, in February 2024, Ferro broke into a home in Winnsboro, Texas, and stole a hardware wallet. The device held roughly 100 Bitcoin (BTC), then valued at more than $5 million.

That July, Ferro went to New Mexico and surveilled a residence with a hidden cell phone. He smashed a window with a brick when co-conspirators tracking the victim’s iCloud account signaled the home was empty.

Beyond burglaries, Ferro laundered funds for the ring. Using fake identification from a foreign national, he opened a geo-blocked payment card account. The setup funneled over $255,000 in designer clothing to co-conspirators.

Stolen money also bankrolled extravagant spending. Court papers cite nightclub tabs of up to $500,000 per night and Hermès Birkin bags. Private jets and exotic cars valued up to $3.8 million were also part of the haul.

Authorities arrested Ferro in May 2025 with two firearms in his possession. He pleaded guilty in October 2025 to one count of conspiracy to participate in a racketeering-influenced and corrupt organization

------------------------------------------------------------------------------------------------
FETCHED ARTICLE 4
  Source     washingtontimes.com
  URL        https://www.washingtontimes.com/news/2026/may/7/gothferrari-gets-65-years-role-250m-crypto-theft-conspiracy/
  Field      url_4
  Retrieved  2026-08-06T13:38:14+00:00 via raw HTTP retrieval, deterministic extraction (HTTP 200)
  Language   unknown
  Kept       paragraphs headline [0] + 8-17 of 22
  Length     3,414 chars
  Integrity  sha256 27dbe7c2ff68d19449d4d71735db95fbe0f9ac528583c0130de529960654b9fa
  Trimmed    trimmed on read-through
  Caveat     retrieved from a live page on the date above. Unlike text copied
             from the spreadsheet, there is no second copy to hash it against.
------------------------------------------------------------------------------------------------

ORIGINAL (unknown, verbatim as retrieved)

California man gets more than 6 years for role in $250M crypto theft conspiracy

A 20-year-old California man has been sentenced to 78 months in federal prison for his role in a sprawling social engineering conspiracy that stole well over $250 million in cryptocurrency from victims across the United States, the U.S. Attorney’s Office for the District of Columbia announced.

Marlon Ferro, of Santa Ana, also known as “GothFerrari,” was sentenced in U.S. District Court before Judge Colleen Kollar-Kotelly, who also ordered three years of supervised release and $2.5 million in restitution. Ferro pleaded guilty Oct. 17, 2025, to one count of conspiracy to participate in a racketeer influenced and corrupt organization.

Prosecutors said a multi-year investigation uncovered a sprawling criminal enterprise that defrauded victims of more than $250 million in cryptocurrency between late 2023 and early 2025. Members based in California, Connecticut, New York, Florida and abroad filled specialized roles including database hacking, target identification, fraudulent phone calls, money laundering and residential burglary, according to court documents.

The conspiracy’s operatives typically targeted individuals believed to hold significant cryptocurrency holdings and manipulated victims into surrendering access to their digital wallets. When victims stored funds in hardware wallets — physical devices that cannot be accessed remotely — the enterprise turned to Ferro to steal them outright, prosecutors said.

In February 2024, Ferro traveled to Winnsboro, Texas, broke into a victim’s home and stole a hardware wallet containing about 100 bitcoin, then valued at more than $5 million, according to court documents. He then laundered the stolen funds through cryptocurrency exchanges.

In July 2024, Ferro flew to New Mexico, where he surveilled a residence for several days and positioned a cell phone outside the home to monitor the victim’s movements, prosecutors said. When co-conspirators tracking the victim through his iCloud account confirmed he had left, Ferro broke into the home by smashing a window with a brick and searched for the target hardware wallet. He was captured on the home’s surveillance camera.

Beyond burglary, court documents show Ferro also served as a key money launderer, using fraudulent identification documents obtained from a foreign national to open a digital payment card account on a geo-blocked platform that allowed enterprise members to spend stolen cryptocurrency at retail locations and nightclubs. He purchased more than $255,000 in designer clothing on behalf of co-conspirators using stolen funds.

After a conspiracy leader was arrested in September 2024, Ferro continued assisting him from the outside — collecting hundreds of thousands of dollars in cryptocurrency, converting it to cash through illicit exchanges and using the proceeds to pay the jailed leader’s attorneys, prosecutors said.

Ferro was arrested May 13, 2025, and found in possession of two firearms and a fake identification document.

The investigation was conducted by the U.S. Attorney’s Office for the District of Columbia, the FBI Washington Field Office and the Internal Revenue Service Criminal Investigation Washington Field Office. The case was prosecuted by Assistant U.S. Attorneys Christopher Howland and David Liss, with assistance from former Assistant U.S. Attorney Will Hart.

================================================================================================
generated from attacks-export-Gart-website.json + reported_K&R  |  case 449
================================================================================================