Prison‑Plot to Steal $2.7 Million in Bitcoin Foiled by a Doorbell - Red Hot Cyber

From inside prison, Barr had planned to gain remote access to the victim's computer using accomplices who would break into the house and force the owner to install AnyDesk. The plan failed when homeowners saw the strangers on their intercom camera and refused to open the door.

Favie, 26, and Doyle, 37, pleaded guilty to participating in organized criminal activity and received four and five years imprisonment respectively. The sentences were handed down on November 10.

The Failed Plan

According to the court, Favie and Doyle entered a couple's house near Edinburgh around 23:30 on April 17, 2024. They were dressed in dark clothing and concealed their faces. The homeowners communicated with them via the intercom without letting them in, causing the perpetrators to leave shortly after.

Preparation and Previous Target

The preparation lasted several months, with participants researching the cryptocurrency owner, collecting photographs, and studying the house's environment. Barr's phone, seized in June 2024, contained messages coordinating the accomplices and technical details of the planned theft.

The victim, a co-founder of a cryptocurrency startup, had previously been targeted in January 2024 when Barr's accomplices stole a cryptocurrency wallet but couldn't access the assets without the PIN and recovery phrase.

Aggravating Factors

Barr was serving a 21-month sentence in Edinburgh prison for fraud when he organized this new scheme using illegal communication means. The prosecution described him as a technically proficient cybercriminal capable of coordinating complex operations.

This case represents a failed "wrench attack"—physical assaults on cryptocurrency owners to force fund transfers. Chainalysis data shows similar attacks resulted in over $30 million stolen in the first half of 2026.