FBI Director Kash Patel Signals Ongoing Pursuit of Crypto Crime Suspects
FBI Director Kash Patel has issued a stark warning that the search for individuals involved in cryptocurrency-related crimes is far from concluded. This statement follows the recent apprehension of John Daghita, a 25-year-old accused of orchestrating a massive digital asset theft exceeding $46 million from wallets managed by the US Marshals Service.
Joint International Operation Leads to Arrest in Caribbean
The arrest was executed as a collaborative effort between the French Gendarmerie Nationale and the FBI, culminating in Daghita's capture on March 4, 2026, on the island of Saint Martin in the Caribbean. Daghita, who also goes by the alias "Lick," is the son of a contractor for the US Marshals Service, adding a layer of complexity to the investigation.
In a detailed post on the social media platform X, Director Patel elaborated on the operation. He wrote, "Last night, John Daghita – a U.S. government contractor who allegedly stole more than $46 million in cryptocurrency from the U.S Marshals Service – was arrested on the island of Saint Martin by the French Gendarmerie’s premier elite tactical unit in a joint operation with the @FBI."
Patel extended gratitude to the International Cooperation Team of the Serious Crime Unit of the French Gendarmerie National in Saint Martin and the Groupe d’intervention de la Gendarmerie nationale of Guadeloupe for their exceptional coordination.
Patel's Commitment to Global Justice Efforts
Emphasizing the FBI's unwavering dedication, Patel asserted, "FBI will continue working 24/7 with our international partners to track down, apprehend, and bring to justice those who attempt to defraud American taxpayers, no matter where they try to hide." This declaration underscores a proactive, round-the-clock approach to combating financial crimes across borders.
Investigation Triggered by Telegram Dispute and On-Chain Analysis
The investigation, which spanned several months, was initiated in January 2026 after a dispute erupted in a private Telegram group between Daghita and another alleged cybercriminal. During this altercation, Daghita reportedly displayed his cryptocurrency wallets on screen and transferred substantial sums between them to flaunt his holdings.
A pseudonymous on-chain investigator known as ZachXBT analyzed the recording and meticulously traced the wallet activity. By following the transaction trails, ZachXBT linked the funds to cryptocurrency that had been previously seized by the US government. After alerting US law enforcement, the investigator published his findings on January 23, 2026, bringing the case into the public domain.
Potential Familial Connections and Taunting Behavior
Investigators also examined a potential connection through Daghita's father, Dean Daghita, who serves as president of Command Services & Support, a Virginia-based technology company. This firm secured a contract in October 2024 to assist the US Marshals Service in managing and disposing of seized digital assets. It remains uncertain how John Daghita accessed the wallets or whether this access was facilitated through his father's company.
Following the publication of ZachXBT's investigation, Daghita reportedly continued to engage on Telegram, sending small amounts of the allegedly stolen funds to the investigator's public wallet address. This tactic is often employed to taunt or implicate others in such schemes.
Arrest Details and Seized Evidence
Authorities ultimately arrested Daghita in Saint Martin. At the time of his arrest, the FBI reported that he was in possession of a briefcase containing cash, along with several hard drives and hardware security keys, which are crucial for accessing cryptocurrency wallets.
This case highlights the evolving challenges in digital asset security and the critical role of international cooperation in addressing sophisticated financial crimes. As the FBI continues its vigilant efforts, this arrest serves as a significant milestone in the ongoing battle against cryptocurrency fraud.
