Blab Crypto
US Justice Department Faces Gap in Seizing Crypto After Convicted Exchange Owner Moves Funds While In Prison
On July 9, the U.S. Department of Justice (DOJ) revealed that Rossen Iossifov, the former owner of the Bulgarian‑based crypto exchange RG Coins, moved roughly $290,000 worth of cryptocurrency in January 2024 after a court ordered the assets forfeited to the United States. The transfer occurred while Iossifov was already serving a nine‑year sentence for racketeering and money‑laundering conspiracies.
Iossifov was convicted in 2021 of conspiracy to commit racketeering and money‑laundering under the RICO Act. He received a 121‑month sentence that was reduced to 111 months in May 2024, and he was ordered to pay $2.64 million in restitution to victims of an online auction fraud scheme that involved at least 900 Americans. The new indictment, filed in July 2024, charges him with removal of property to prevent seizure and conspiracy to commit money‑laundering, carrying a potential maximum of 25 years if convicted.
According to the DOJ, after the forfeiture order was issued, Iossifov allegedly routed the cryptocurrency through multiple exchanges and illicit mixing services. The transfers were completed before the government could secure the private keys or move the assets into an agency‑controlled wallet. The DOJ’s statement notes that the crypto moved to unknown wallets while the defendant remained in prison.
The case illustrates a practical gap that can exist between a court’s forfeiture order and the technical control of digital assets. A forfeiture order can freeze an account, but control of the funds does not transfer until every usable key or credential is removed from the defendant’s reach. The DOJ’s Asset Forfeiture Policy Manual, cited in the release, specifies that once an agency obtains authority to seize cryptocurrency, it should immediately transfer the assets to an agency‑controlled, unhosted wallet. The assets should then be kept in cold storage until they are moved to a wallet controlled by the U.S. Marshals Service or its contractor.
The DOJ’s release does not identify where Iossifov’s crypto was held, who had the keys, or how the transfers were executed from prison. The chain of custody that stopped short of agency control remains unresolved. The policy manual emphasizes that exclusive control begins only when no other usable key or account credential can authorize a transaction.
The incident raises questions about the effectiveness of current procedures for securing seized cryptocurrency. The DOJ’s policy recommendations call for rapid transfer of seized crypto into wallets that the agency controls to prevent transfers before private keys are secured. The Iossifov case suggests that, in practice, such measures may not have been implemented in a timely manner.
The broader implications of the case touch on several areas of crypto regulation and enforcement. First, it highlights the technical challenges law enforcement faces when dealing with decentralized assets that can be moved across multiple exchanges and mixers. Second, it underscores the need for clear protocols that bridge the gap between legal orders and technical custody. Finally, it points to the importance of maintaining custody of private keys to ensure that forfeited assets cannot be moved before they are formally transferred to the state.
At present, the DOJ has not announced any changes to its asset‑forfeiture procedures beyond the policy recommendations outlined in the manual. The case remains a reminder that the legal framework for crypto forfeiture must be matched by operational practices that secure assets immediately after a court order. The unresolved questions about the chain of custody and the exact mechanisms used to move the funds from prison will likely inform future policy adjustments.
In summary, the Rossen Iossifov case demonstrates a disconnect between forfeiture orders and the practical control of cryptocurrency. While the DOJ has acknowledged the gap and outlined policy recommendations, the specific details of how the funds were moved before agency control remain unclear. The incident may prompt a review of procedures to ensure that seized crypto is transferred to agency‑controlled wallets as soon as possible to prevent further unauthorized movements.
Iossifov was convicted in 2021 of conspiracy to commit racketeering and money‑laundering under the RICO Act. He received a 121‑month sentence that was reduced to 111 months in May 2024, and he was ordered to pay $2.64 million in restitution to victims of an online auction fraud scheme that involved at least 900 Americans. The new indictment, filed in July 2024, charges him with removal of property to prevent seizure and conspiracy to commit money‑laundering, carrying a potential maximum of 25 years if convicted.
According to the DOJ, after the forfeiture order was issued, Iossifov allegedly routed the cryptocurrency through multiple exchanges and illicit mixing services. The transfers were completed before the government could secure the private keys or move the assets into an agency‑controlled wallet. The DOJ’s statement notes that the crypto moved to unknown wallets while the defendant remained in prison.
The case illustrates a practical gap that can exist between a court’s forfeiture order and the technical control of digital assets. A forfeiture order can freeze an account, but control of the funds does not transfer until every usable key or credential is removed from the defendant’s reach. The DOJ’s Asset Forfeiture Policy Manual, cited in the release, specifies that once an agency obtains authority to seize cryptocurrency, it should immediately transfer the assets to an agency‑controlled, unhosted wallet. The assets should then be kept in cold storage until they are moved to a wallet controlled by the U.S. Marshals Service or its contractor.
The DOJ’s release does not identify where Iossifov’s crypto was held, who had the keys, or how the transfers were executed from prison. The chain of custody that stopped short of agency control remains unresolved. The policy manual emphasizes that exclusive control begins only when no other usable key or account credential can authorize a transaction.
The incident raises questions about the effectiveness of current procedures for securing seized cryptocurrency. The DOJ’s policy recommendations call for rapid transfer of seized crypto into wallets that the agency controls to prevent transfers before private keys are secured. The Iossifov case suggests that, in practice, such measures may not have been implemented in a timely manner.
The broader implications of the case touch on several areas of crypto regulation and enforcement. First, it highlights the technical challenges law enforcement faces when dealing with decentralized assets that can be moved across multiple exchanges and mixers. Second, it underscores the need for clear protocols that bridge the gap between legal orders and technical custody. Finally, it points to the importance of maintaining custody of private keys to ensure that forfeited assets cannot be moved before they are formally transferred to the state.
At present, the DOJ has not announced any changes to its asset‑forfeiture procedures beyond the policy recommendations outlined in the manual. The case remains a reminder that the legal framework for crypto forfeiture must be matched by operational practices that secure assets immediately after a court order. The unresolved questions about the chain of custody and the exact mechanisms used to move the funds from prison will likely inform future policy adjustments.
In summary, the Rossen Iossifov case demonstrates a disconnect between forfeiture orders and the practical control of cryptocurrency. While the DOJ has acknowledged the gap and outlined policy recommendations, the specific details of how the funds were moved before agency control remain unclear. The incident may prompt a review of procedures to ensure that seized crypto is transferred to agency‑controlled wallets as soon as possible to prevent further unauthorized movements.
