Indiana Man Gets 20-Year Sentence for Cybercrime Involving $37 Million Cryptocurrency Theft

In a significant development in the fight against cybercrime, 22-year-old Evan Frederick Light, from Lebanon, Indiana, has been sentenced to 20 years in federal prison for his role in a $37 million cryptocurrency theft. The sentencing took place on February 6, 2025, before U.S. Chief Judge Roberto A. Lange.

The charges against Light were severe: conspiracy to commit wire fraud and conspiracy to launder monetary instruments. In addition to his 20-year sentence, Light was ordered to pay a $200 special assessment and will have to make restitution for the stolen cryptocurrency. While a hearing will be held later to determine the exact restitution amount, it is expected that Light will be required to pay at least $37 million, the total sum he stole from nearly 600 victims.

Following his prison sentence, Light will serve three years of supervised release. His crime, which started in February 2022, involved a sophisticated cyber-intrusion that targeted a Sioux Falls, South Dakota-based investment holdings company. He, along with others, used stolen personal identifiable information (PII) to access the company’s computer systems and steal millions in cryptocurrency from customers.

The Cyber-Intrusion That Shook the Nation

The cybercrime spree began in February 2022, when Light participated in an elaborate scheme to steal cryptocurrency from a South Dakota investment company. By accessing sensitive PII of the company’s clients, Light and his accomplices were able to break into the company’s secure servers. They then stole over $37 million in cryptocurrency from nearly 600 victims, which included hardworking Americans’ retirement savings.

Using the stolen PII, Light gained unauthorized access to the investment company’s computer servers. Once inside, he exfiltrated the private data of hundreds of other clients, which allowed him to take control of cryptocurrency assets held with the company. The stolen cryptocurrency was then routed through several locations around the world, including gambling websites and mixing services, as Light and his partners attempted to obscure their identities and the illicit funds.

The crime not only involved technical expertise but also a deliberate effort to launder the stolen funds and conceal the criminals’ trail. Mixing services are often used in cybercrimes to mask the origins of illegal transactions, making it more difficult for law enforcement agencies to trace the stolen funds back to the culprits.

Light’s Crime and Its Devastating Consequences

This crime had far-reaching consequences, particularly for the victims who lost their retirement savings. The stolen cryptocurrency represented hard-earned money, often invested by people who had worked for years to secure their future. The victims of this theft are now left with the financial and emotional distress caused by Light’s actions.

U.S. Attorney Alison J. Ramsdell remarked, “From his mother’s basement in Indiana, Evan Light set out to steal millions of dollars in cryptocurrency, thereby destroying the retirement savings of hardworking, honest Americans.” Ramsdell emphasized that the 20-year sentence handed down to Light serves as a reminder of the seriousness of cybercrime and the impact it has on people’s lives.

The stolen funds were not only routed through various mixing services but were also funneled into other avenues, including gambling websites. This attempt to hide the trail was made in the hope of avoiding detection. However, despite these efforts, investigators were able to piece together the crime and track down the perpetrators.

The FBI’s Role in the Investigation

The FBI was instrumental in bringing Light to justice. The agency’s Minneapolis office led the investigation into the cybercrime, working tirelessly to trace the stolen cryptocurrency and unravel the complex web of deceit that Light and his accomplices had constructed. FBI Special Agent in Charge Alvin M. Winston Sr. emphasized, “Cybercrime is not a victimless offense — its impact is felt by hardworking Americans who suffer financial and emotional harm.”

The case highlights the vulnerability of individuals who invest in digital assets like cryptocurrency. While cryptocurrency has grown in popularity as a form of investment, it remains a target for cybercriminals looking to exploit weaknesses in the digital space. This case serves as a reminder to be cautious and protect sensitive information, especially when dealing with virtual currencies.

The Legal Process and Outcome

Light’s case was brought to trial after an indictment in May 2023. He pleaded guilty to the charges in September 2024. The legal proceedings showcased the determination of law enforcement and prosecutors in tackling cybercrime. Assistant U.S. Attorney Jeremy R. Jehangiri, who prosecuted the case, emphasized the importance of holding cybercriminals accountable for their actions.

At the sentencing, Light was remanded to the custody of the U.S. Marshals Service. He will serve his 20-year sentence in a federal prison, and after his term, he will be placed on supervised release for three years. During the release period, he will be subject to monitoring and oversight to ensure that he does not engage in any further illegal activities.

Impact of the Crime on the Cryptocurrency Industry

The theft of $37 million in cryptocurrency raises important questions about the security of digital assets. Cryptocurrencies like Bitcoin and Ethereum have been touted for their security features, but incidents like this demonstrate that they are not immune to theft. Investors are urged to be cautious and take necessary precautions, such as using secure wallets and multi-factor authentication, to protect their digital assets.

The crime also highlights the growing concern about the security of online financial transactions and the increasing sophistication of cybercriminals. The use of mixing services and gambling websites to launder stolen funds is a tactic that has been seen in numerous high-profile cybercrimes. These techniques make it difficult for law enforcement to trace and recover stolen money, which adds to the complexity of the investigation and prosecution process.

Looking Ahead: The Continued Fight Against Cybercrime

Evan Light’s sentencing marks a significant victory for law enforcement in the fight against cybercrime. However, it also underscores the ongoing challenges posed by digital criminals who use sophisticated techniques to exploit vulnerabilities in online systems. As the digital world continues to evolve, so too will the methods employed by cybercriminals.

Authorities are stepping up efforts to combat cybercrime, but it is important for individuals and businesses to remain vigilant and proactive in securing their digital information. The rise in cybercrimes targeting cryptocurrency is a trend that is expected to continue as virtual currencies grow in popularity.

Conclusion

Evan Frederick Light’s 20-year sentence is a strong message to those who believe they can commit cybercrimes without consequences. His actions destroyed the financial security of hundreds of victims, and his conviction sends a clear signal that cybercriminals will be held accountable for their actions. The case serves as a reminder of the importance of safeguarding personal information and protecting assets in the digital age.

As law enforcement agencies continue to adapt to the changing landscape of cybercrime, it is crucial that individuals and organizations take proactive steps to protect themselves from digital theft. With ongoing efforts from authorities, the hope is that incidents like this will become less frequent and that criminals who target innocent people online will face justice.

Disclaimer – Our editorial team has thoroughly fact-checked this article to ensure its accuracy and eliminate any potential misinformation. We are dedicated to upholding the highest standards of integrity in our content.

About The Author