Scottish Prisoner Sentenced to 8 Years Over $2.7 Million Crypto Theft Plot Run From Jail
Key Takeaways
- •Robert Barr was sentenced to eight years in prison for directing an attempted cryptocurrency theft of roughly $2.7 million while incarcerated at HMP Edinburgh.
- •The plot targeted a Midlothian cryptocurrency investor with digital assets valued at up to £2 million and involved forcing him to install AnyDesk remote-access software.
- •Accomplices Sean Favier and Iain Doyle abandoned the April 17, 2024, home invasion after the homeowners spotted them through a video doorbell and refused entry.
- •Investigators uncovered Barr's coordinating role through communications on his phone that included instructions on remote-access software and cryptocurrency transfers.
- •The court sentenced Favier to four years and Doyle to five years, with all three defendants pleading guilty to involvement in serious organized crime.

A Scottish cybercriminal has been sentenced to eight years in prison for directing an attempted cryptocurrency theft worth roughly $2.7 million — an operation he orchestrated from behind bars. Robert Barr instructed accomplices to target a cryptocurrency investor and gain access to his digital assets using remote-control software.
The High Court in Glasgow — Scotland's supreme criminal court — sentenced Barr on November 10, 2026, alongside two accomplices involved in the plot. The case illustrates how organized criminal groups increasingly combine physical intimidation with sophisticated cryptocurrency theft techniques.
Theft Scheme Directed From Inside Prison
Barr masterminded the operation while already serving a sentence at HMP Edinburgh in Scotland. According to investigators, he used unauthorized communications to coordinate criminal activity and supply technical instructions to accomplices outside prison.
The target was a cryptocurrency investor in Midlothian, Scotland, whose digital assets were believed to be worth up to £2 million. Prosecutors established that the plot involved months of preparation, including surveillance, identifying the victim's residence, and planning how to access his cryptocurrency wallets.
Barr directed accomplices to enter the victim's home and force him to install AnyDesk, a legitimate remote-access application. Tools of this kind are standard in IT support, allowing one computer to view and operate another over the internet — capabilities that turn into powerful attack vectors when the software is installed under duress. Once installed, the software would have allowed Barr to control the victim's computer remotely and transfer cryptocurrency into wallets under his control. The court's findings are detailed in the sentencing opinion published by the Judiciary of Scotland.
Video Doorbell Foils Attempted Robbery
The operation reached a critical stage on April 17, 2024, when accomplices Sean Favier and Iain Doyle approached the targeted property at around 11:30 p.m. Both men wore dark clothing and concealed their faces as they attempted to gain entry.
The homeowners spotted the suspicious visitors through their video doorbell system and refused to open the door. The suspects left without entering the property, thwarting the planned cryptocurrency theft.
Investigators later examined Barr's phone and uncovered communications detailing his role in coordinating the operation. The evidence also included instructions concerning remote-access software and the transfer of cryptocurrency.
Court Imposes Prison Sentences
Lord Cubie sentenced Barr to eight years in prison, citing his leadership role and a previous conviction for cryptocurrency-related fraud. Favier received four years, while Doyle was handed a five-year term for their parts in the attempted theft.
All three defendants pleaded guilty to involvement in serious organized crime. The court stressed that the unsuccessful operation involved substantial planning, potential violence, and an attempt to steal significant digital assets.
The case underscores the security challenges facing cryptocurrency investors, particularly those holding substantial assets, and demonstrates how criminals can combine traditional home invasion tactics with digital tools to target crypto wallets. Unlike bank accounts, self-custodied crypto wallets are protected by the devices and private keys that control them, and once a transaction is confirmed on-chain it generally cannot be reversed — a dynamic that helps explain why plots like this pair physical intrusion with attempts to take over a victim's computer.
Source: CryptoMeter io