Scottish prisoner who ran $2.7M crypto theft plot from cell gets eight years

What happened

A man who directed an attempt to steal roughly £2 million ($2.7 million) in cryptocurrency while locked up in a Scottish prison has been sentenced to eight years, according to a statement published by Scotland's Judicial Office. Robert Barr, 29, was sentenced by Lord Cubie at the High Court in Glasgow on 10 November 2026. Sean Favier, 26, and Iain Doyle, 37, were sentenced alongside him. All three had pleaded guilty to involvement in serious organised crime.

The court's account describes a scheme that paired technical access with a physical intrusion. Favier and Doyle were to get inside a couple's home in Midlothian, near Edinburgh, and push the male occupant into installing AnyDesk, a legitimate remote-access program. Once that connection existed, Barr, at the time serving a 21-month sentence at HMP Edinburgh for fraud, would control the computer and move the couple's cryptocurrency into wallets he controlled.

The two men reached the property at around 11:30 p.m. on 17 April 2024, dressed in dark clothing with their faces concealed. The couple spotted them on a doorbell camera and declined to let them in; one of the men looked into the lens, apparently asking whether a camera was there, before the pair walked away, the BBC reported. Lord Cubie said the plan was thwarted only because the victims had the good sense not to admit unknown, masked men late at night.

Favier received four years and Doyle five. Barr's sentence runs from 25 August 2025, the date his earlier term expired. The court heard the group had spent months preparing, identifying a cryptocurrency holder, gathering pictures of the house and carrying out reconnaissance. Investigators later reconstructed those steps from Barr's phone, which was seized in June 2024. A burglary at the same property in January 2024 had produced a hardware wallet, but those behind it could not reach the funds without its PIN.

Why it matters

The case illustrates how cryptocurrency theft can move from compromised software into physical coercion. Had the men gained entry, the court indicated the plan would likely have become a so-called wrench attack, in which force or the threat of it is used to make a holder hand over funds. Chainalysis data cited in reporting on the case puts losses from such attacks above $30 million in the first half of 2026, a pace that would make the year a record.

Britain has recorded several comparable prosecutions. Three teenagers were jailed earlier this year over a $4.3 million cryptocurrency robbery carried out at knifepoint, and three men were sentenced last month over a failed home invasion targeting crypto. In September, Crimestoppers offered up to £10,000 for information about an attack on a couple in which police believe a fourth man gave instructions to three attackers over a video call.

The sentencing also underscores that imprisonment did not stop Barr from organising serious crime. The judge treated both his prior cryptocurrency fraud conviction and his use of illicit means of communication from custody as materially aggravating factors.

What the data shows

The figures set out in the sentencing material and reporting include: an intended theft of up to £2 million, equivalent to about $2.7 million; sentences of eight years for Barr, five for Doyle and four for Favier; a previous 21-month term being served at HMP Edinburgh; an initial break-in in January 2024; the failed doorstep attempt on 17 April 2024; and a phone seized in June 2024. Chainalysis figures put wrench-attack losses above $30 million across the first six months of 2026, while the Crimestoppers reward in a separate case reached £10,000.

Background

Barr had an earlier conviction for cryptocurrency fraud, and prosecutors described him as a sophisticated cybercriminal capable of orchestrating criminality rarely encountered in mainstream investigations. Messages recovered from his phone set out reconnaissance and surveillance and, in the judge's assessment, plainly contemplated threats or violence; one message discussed getting the occupant onto his computer quickly to download the remote-access tool.

At sentencing, Barr's suggestion that he had been easily led was rejected, with the court pointing to his leadership role and technical ability. Doyle's account that he had only meant to deliver a telephone was also dismissed, given his awareness that violence was possible, while Favier's involvement was treated as comparatively peripheral. Lord Cubie described the offence as pre-planned and serious, involving intrusion into a home, a real potential for violence and, had it succeeded, material support for organised crime.

What to watch

Lord Cubie will consider whether to impose a serious crime prevention order on Barr on 17 November. Barr also remains in custody while potential extradition is weighed, the judge noted. Beyond this case, the attention from regulators and police on physical attacks against cryptocurrency holders appears likely to continue, given the reported rise in incidents and the string of UK prosecutions during the year.

Questions readers ask