Skip to main content
AVOID.NET

Marlon Ferro (GothFerrari)

avoid.net/marlon-ferro-gothferrari→2/100·93% conf.
[AI-DRAFTED · AWAITING FACT-CHECK]

Provisional: this score is the AI investigator's judgment, not yet calculated by our published formula. Treat it as indicative. How scoring works →

anchored·52RzBi…JniA

Summary

Marlon Ferro, 20, of Santa Ana, California, known online as 'GothFerrari,' was sentenced on May 6, 2026 to 78 months in federal prison for his role as a physical burglar in a multi-state cryptocurrency theft enterprise that stole over $263 million between October 2023 and March 2025. Ferro pleaded guilty on October 17, 2025 to one count of conspiracy to participate in a racketeer influenced and corrupt organization (RICO) and was ordered to pay $2.5 million in restitution and serve three years of supervised release.

Connected Entities

5 entities · 60 linked investigations
Organizations
□Evan Tangeman2□Marlon Ferro (GothFerrari)□ZachXBT82□Malone Lam
Tokens
Relationships
  • ZachXBT→mentioned with→Malone Lam(80%)
  • ZachXBT→mentioned with→Bitcoin(65%)
  • Malone Lam→mentioned with→ZachXBT(70%)
  • Malone Lam→mentioned with→Bitcoin(70%)
  • Malone Lam→mentioned with→Marlon Ferro (GothFerrari)(80%)
  • Malone Lam→mentioned with→Evan Tangeman(80%)
  • Marlon Ferro (GothFerrari)→mentioned with→Evan Tangeman(80%)
  • Marlon Ferro (GothFerrari)→mentioned with→ZachXBT(65%)
  • Marlon Ferro (GothFerrari)→mentioned with→Malone Lam(85%)
  • Marlon Ferro (GothFerrari)→mentioned with→Bitcoin(70%)
  • + 2 more
Have evidence about Marlon Ferro (GothFerrari)?

Timeline(9 events)

October 2023

The Social Engineering Enterprise (SEE) begins operations, recruiting members through online gaming platforms including Minecraft and Discord.

DOJ USAO-DC press release

February 2024

Ferro travels to Winnsboro, Texas and burglarizes a victim's home, stealing a hardware wallet containing approximately 100 Bitcoin (valued at over $5 million at the time).

DOJ USAO-DC press release / CryptoTimes

July 2024

Ferro travels to New Mexico, surveils a victim's home for several days, then breaks in and burglarizes the property while ringleader Malone Lam remotely tracks the victim's location. Ferro is captured on home surveillance footage.

TRM Labs / DOJ USAO-DC

18 August 2024

The enterprise's largest single theft: ringleader Malone Lam and co-conspirator Jeandiel Serrano execute a social engineering attack on a Genesis bankruptcy creditor in Washington, D.C., stealing over 4,100 Bitcoin (approximately $230 million at the time).

CoinDesk / DOJ USAO-DC

18 September 2024

On-chain investigator ZachXBT publicly identifies Malone Lam and Jeandiel Serrano. Lam and Serrano are arrested. A federal indictment is unsealed in U.S. District Court for the District of Columbia.

CoinDesk

May 2025

A superseding indictment charges 12 additional defendants, including Marlon Ferro, in connection with the RICO conspiracy. A second set of indictments brings the total number of charged defendants to 14.

DOJ USAO-DC

13 May 2025

Marlon Ferro is arrested. He is found in possession of two firearms and a fraudulent identification document.

CryptoTimes / Coin Edition

17 October 2025

Ferro pleads guilty to one count of conspiracy to participate in a racketeer influenced and corrupt organization (RICO).

DOJ USAO-DC press release

6 May 2026

Ferro is sentenced by Judge Colleen Kollar-Kotelly in U.S. District Court for the District of Columbia to 78 months in federal prison, 3 years of supervised release, and $2.5 million in restitution.

DOJ USAO-DC press release
Provenance & Audit Trail

Decision Log

  • #1publishRecorded on Solana ✓6/3/2026, 11:04:18 PM
    slot 424122505 · hash Dc8bfMg52qiimq3LkVXkGde9uW1eGSCGeaRC7AaxGHVm

This investigation is cryptographically anchored to the Solana blockchain (1 decision). 12 of 12 cited source URLs have an Internet Archive snapshot.

model: claude-sonnet-4-6

generated: 6/3/2026, 11:04:09 PM

last updated: 6/3/2026, 11:04:09 PM

4 views

avoid.net — verified advice for a post-truth world