A 20-year-old California man has been sentenced to 78 months in federal prison for his role in a sprawling social engineering conspiracy that stole well over $250 million in cryptocurrency from victims across the United States, the U.S. Attorney’s Office for the District of Columbia announced.
Marlon Ferro, of Santa Ana, also known as “GothFerrari,” was sentenced in U.S. District Court before Judge Colleen Kollar-Kotelly, who also ordered three years of supervised release and $2.5 million in restitution. Ferro pleaded guilty Oct. 17, 2025, to one count of conspiracy to participate in a racketeer influenced and corrupt organization.
Prosecutors said a multi-year investigation uncovered a sprawling criminal enterprise that defrauded victims of more than $250 million in cryptocurrency between late 2023 and early 2025. Members based in California, Connecticut, New York, Florida and abroad filled specialized roles including database hacking, target identification, fraudulent phone calls, money laundering and residential burglary, according to court documents.
The conspiracy’s operatives typically targeted individuals believed to hold significant cryptocurrency holdings and manipulated victims into surrendering access to their digital wallets. When victims stored funds in hardware wallets — physical devices that cannot be accessed remotely — the enterprise turned to Ferro to steal them outright, prosecutors said.
In February 2024, Ferro traveled to Winnsboro, Texas, broke into a victim’s home and stole a hardware wallet containing about 100 bitcoin, then valued at more than $5 million, according to court documents. He then laundered the stolen funds through cryptocurrency exchanges.
In July 2024, Ferro flew to New Mexico, where he surveilled a residence for several days and positioned a cell phone outside the home to monitor the victim’s movements, prosecutors said. When co-conspirators tracking the victim through his iCloud account confirmed he had left, Ferro broke into the home by smashing a window with a brick and searched for the target hardware wallet. He was captured on the home’s surveillance camera.
Beyond burglary, court documents show Ferro also served as a key money launderer, using fraudulent identification documents obtained from a foreign national to open a digital payment card account on a geo-blocked platform that allowed enterprise members to spend stolen cryptocurrency at retail locations and nightclubs. He purchased more than $255,000 in designer clothing on behalf of co-conspirators using stolen funds.
After a conspiracy leader was arrested in September 2024, Ferro continued assisting him from the outside — collecting hundreds of thousands of dollars in cryptocurrency, converting it to cash through illicit exchanges and using the proceeds to pay the jailed leader’s attorneys, prosecutors said.
Ferro was arrested May 13, 2025, and found in possession of two firearms and a fake identification document.
The investigation was conducted by the U.S. Attorney’s Office for the District of Columbia, the FBI Washington Field Office and the Internal Revenue Service Criminal Investigation Washington Field Office. The case was prosecuted by Assistant U.S. Attorneys Christopher Howland and David Liss, with assistance from former Assistant U.S. Attorney Will Hart.
This article was constructed with the assistance of artificial intelligence and published by a member of The Washington Times’ AI News Desk team. The contents of this report are based solely on The Washington Times’ original reporting, wire services, and/or other sources cited within the report. For more information, please read our AI policy or contact Steve Fink, Director of Artificial Intelligence, at sfink@washingtontimes.com
The Washington Times AI Ethics Newsroom Committee can be reached at aispotlight@washingtontimes.com.
