Robert Barr, 29, has been sentenced to eight years in prison after being found guilty of orchestrating a £2 million cryptocurrency theft operation while serving time at HMP Edinburgh. Barr, already incarcerated for smuggling phones and fraud, directed the operation using an illicit mobile device from his cell.
Coordinated crypto theft from behind bars
Barr led a group that included Sean Favier, 26, and Iain Doyle, 37. All three pleaded guilty to their roles in a serious organized crime case, with Favier and Doyle receiving four and five-year sentences respectively. The sentencing took place at the High Court in Glasgow and was detailed by Scotland’s Judicial Office.
The prosecution identified Barr as the mastermind, highlighting his ability to orchestrate sophisticated criminal activity from within the prison system. Presiding judge Lord Cubie described Barr’s scheme as combining advanced computer techniques with traditional housebreaking methods.
Prosecutors described a case in which Barr was able “to orchestrate a level of criminality rarely seen within mainstream investigations”, as the judge remarked the plan “married 21st century computer sophistication with old fashioned housebreaking.”
The scheme became possible due to Barr’s access to a contraband phone, even while serving a 21-month term for prior offenses involving smuggled mobile devices.
Attempted use of AnyDesk for remote crypto theft
Investigators determined that Barr instructed Favier and Doyle to break into the home of a crypto startup cofounder. Barr’s plan involved pressuring the residents to install AnyDesk, a remote desktop application, which would have granted him control over the victim’s computer from prison.
By using AnyDesk, Barr intended to transfer cryptocurrency from the victim’s digital wallets to accounts under his control. The failed plan demonstrated a sophisticated use of both social engineering and remote access technology.
Mini dictionary: AnyDesk is a remote desktop software that allows users to access and control computers from a distance, facilitating technical support or file management but also posing potential security risks if used maliciously.
Failed break-in attempts detail
The group attempted to enter the victims’ residence twice in 2024. The most recent incident occurred in April, when two men in dark clothing tried to persuade the couple inside to open the door around 11:30 pm. After interacting through a video doorbell and realizing they were being recorded, the suspects concealed their faces and left without gaining entry.
Earlier in January, the same address had been targeted, resulting in the theft of a hardware wallet. However, the perpetrators could not access the funds, as they lacked the necessary PIN.
| Incident | Date | Outcome |
|---|---|---|
| Attempted break-in | April 17, 2024 | No entry, no theft |
| Property raid | January 2024 | Hardware wallet stolen, funds inaccessible |
Investigation and growing trend of attacks
Authorities seized Barr’s unauthorized mobile device on June 25, 2024. Forensic analysis of the phone revealed evidence of his direct involvement, including instructions to Favier and Doyle on carrying out crypto-related thefts.
Evidence obtained from Barr’s seized mobile phone included detailed instructions for his accomplices, confirming his central role in the orchestrated crypto theft attempts.
The UK has recently experienced a surge in physical attacks targeting cryptocurrency holders. In August, a London jury convicted five men for kidnapping and torturing two cryptocurrency investors over a 52-hour period. Another case in October saw a crypto trader lose $800,000 in a violent home-invasion robbery.
