FBI Arrests Contractor’s Son in Alleged $46 Million Cryptocurrency Theft From U.S. Marshals Wallets

Suspect detained in Saint Martin after blockchain investigation linked him to missing federal crypto assets

TL;DR

• Federal authorities arrested John Daghita in Saint Martin over allegations he stole more than $46 million from cryptocurrency wallets tied to the U.S. Marshals Service.
• Investigators say the suspect is the son of a federal contractor whose company secured a 2024 contract tied to the management of seized digital assets.
• Independent blockchain investigator ZachXBT first raised suspicions in January 2026 after tracing transactions linked to government-connected wallets.

We’ve launched the all-new COIN360 Perp DEX, built for traders who move fast!

Trade 130+ assets with up to 100× leverage, enjoy instant order placement and low-slippage swaps, and earn USDC passive yield while climbing the leaderboard. Your trades deserve more than speed — they deserve mastery.

Federal authorities arrested a suspect accused of stealing more than $46 million worth of cryptocurrency from digital wallets associated with the U.S. Marshals Service, according to officials and investigative reports. The suspect, identified as John Daghita, was taken into custody on the Caribbean island of Saint Martin following an international law-enforcement operation coordinated between U.S. investigators and French authorities. Federal officials allege the suspect gained unauthorized access to government-linked crypto wallets that held seized digital assets under federal asset forfeiture programs.

Details of the arrest were shared publicly on March 5, 2026, when FBI Director Kash Patel confirmed the detention through a statement posted on social media. Patel wrote, “Thanks to the International Cooperation Team Serious Crime Unit of the French Gendarmerie National in Saint Martin, and the Groupe d’intervention de la Gendarmerie nationale of Guadeloupe for the outstanding coordination.” The statement credited French law-enforcement partners involved in the operation and referenced the coordinated cross-border effort that led to the suspect’s capture on the Caribbean territory.

Patel also emphasized the agency’s commitment to pursuing suspects connected to crimes involving federal funds and government-controlled assets. “Thanks to the International Cooperation Team Serious Crime Unit of the French Gendarmerie National in Saint Martin, and the Groupe d’intervention de la Gendarmerie nationale of Guadeloupe for the outstanding coordination,” Patel wrote in the announcement, adding separately that the FBI would continue working with international partners “to track down, apprehend, and bring to justice those who attempt to defraud American taxpayers — no matter where they try to hide.”

Investigators allege that Daghita is the son of Dean Daghita, president of Command Services & Support, a Virginia-based technology firm that has worked with federal agencies. Records cited in the investigation show the company secured a contract in 2024 with the U.S. Marshals Service connected to the management of seized digital assets. The firm has also previously provided services to agencies including the Department of Justice and the Department of Defense, according to information cited in reports following the arrest.

Authorities have not confirmed whether John Daghita worked directly for the contractor involved in the federal program, though investigators believe the familial link may have played a role in how the suspect gained access to systems associated with government-controlled cryptocurrency wallets. Prosecutors allege the suspect transferred digital assets from those wallets without authorization, removing more than $46 million from accounts used by the federal agency responsible for safeguarding seized cryptocurrency.

Law-enforcement officials have not disclosed whether any of the stolen funds have been recovered or identified the specific cryptocurrencies involved in the alleged theft. Reports citing investigative sources indicate the digital assets were moved through blockchain transactions connected to addresses believed to be under the suspect’s control.

Evidence recovered during the arrest reportedly included a metal briefcase filled with stacks of U.S. $100 bills along with several digital devices believed to be linked to cryptocurrency storage. Authorities also seized multiple hard drives, thumb drives, a mobile phone and hardware wallets resembling Trezor devices, which investigators believe may contain information connected to the alleged transfers.

The investigation gained momentum after independent blockchain investigator ZachXBT publicly raised concerns about suspicious crypto transactions earlier in January 2026. The analyst traced movements of digital assets connected to wallets linked to seized federal cryptocurrency and reported identifying activity tied to an individual operating under the alias “Lick.”

According to the blockchain analysis cited in reports, a wallet believed to be associated with the suspect at one stage held roughly $23 million in cryptocurrency. The investigator reported tracing approximately $24.9 million back to a government-controlled wallet while reviewing the transaction history tied to the suspected addresses.

Further analysis suggested the broader network of wallets connected to the case showed more than $90 million in cryptocurrency flows moving through related addresses. The investigator also reported that the suspected operator of the wallets sent small blockchain transactions — commonly known as “dust” transfers — to the investigator’s public wallet address during online exchanges conducted through the Telegram messaging platform.

U.S. Marshals Service officials oversee cryptocurrency seized in federal investigations and store assets obtained through criminal forfeiture proceedings linked to cybercrime, fraud and darknet markets. Federal authorities are estimated to hold as much as 328,372 Bitcoin obtained through various seizures across multiple cases.

Separate estimates cited in reports suggest the Marshals Service alone may manage roughly 200,000 BTC in seized holdings, representing about $13.5 billion in value based on current market pricing. Federal authorities have not disclosed the specific wallets affected by the alleged theft or the security infrastructure used to safeguard the assets involved in the case.

This article has been refined and enhanced by ChatGPT.