UK Court Orders Ex-NCA Officer to Repay $2.4M in Stolen Bitcoin (BTC)

£1.81M Confiscation Order

A UK court on Wednesday ordered a former National Crime Agency officer to repay about $2.4 million over Bitcoin (BTC) he stole from a seized wallet nine years ago, a sum that towers over the coins' value when they were taken. The CPS announcement confirms the confiscation order against Paul Chowles, 44, of Bristol, set at £1,810,678.93 under the Proceeds of Crime Act 2002 and made public on Wednesday, 30 September. A confiscation order of this kind treats property obtained through criminal conduct as recoverable, and a recipient who does not pay can face further time in custody. When Chowles moved 50 BTC out of the wallet in 2017, the entire haul was worth roughly £60,000, or $77,000. Thirty of the 50 coins have been recovered from him, and the order values those 30 at current levels, about $80,000 apiece, with the gap between the two figures attributed to the Bitcoin (BTC) price rise since 2017. Chowles sat on the NCA team investigating Silk Road 2.0, the dark web marketplace Thomas White launched weeks after the FBI shut down the original Silk Road in 2013. He led the analysis and extraction of cryptocurrency from devices seized in that case, then diverted 50 BTC out of a confiscated wallet and took steps to hide where it went. The coins belonged to White and were already in law-enforcement custody when they disappeared, a detail that sharpened the accountability case for prosecutors. “Paul Chowles exploited a position of trust for personal gain, stealing assets that had already been recovered through law enforcement action,” CPS specialist prosecutor Luke Clements said in the announcement, adding that the agency would “pursue offenders' assets relentlessly.” A separate compensation order covers the victim in the case. The division behind the order has recovered more than £530 million through confiscations over the past five years, returning over £102 million of it to victims.

From Seized Wallet to Bitcoin Fog

The theft itself unfolded over two days in May 2017, when Chowles moved the 50 BTC out of White's own reserve wallet. He split the sum into smaller amounts, pushed it through Bitcoin Fog, a mixing service built to sever the link between sending and receiving addresses, and then cashed out using debit cards from Cryptopay and Wirex. The cash-out stage ran to 279 transactions and totaled £144,580. For years the theft was pinned on White, the marketplace operator whose wallet had been drained from the inside. He denied any involvement throughout, and by late 2021 investigators had written the missing coins off as untraceable. The break came in 2022, when a search of Chowles' home in Bristol turned up devices holding the private keys to the stolen funds. Merseyside Police then traced the money back through the mixer, working with the blockchain analytics firm Chainalysis. The clustering work that followed turned an anonymous-looking chain of hops into an attribution solid enough for a guilty plea to theft, transferring criminal property and concealing criminal property. Chowles received five years and six months at Liverpool Crown Court in July 2025, and the NCA dismissed him on 11 July 2025. What the tracing record shows is that mixing bought Chowles time but not permanence: every hop he made stayed on the public ledger, and the 2022 device search gave investigators the starting point they needed. From there, the path through Bitcoin Fog to the cash-out cards could be rebuilt and tied to him transaction by transaction, closing a gap that had swallowed the investigation for four years. Cases of this shape have become a fixture of recent Bitcoin coverage in the UK, as enforcement teams revisit cold trails with better analytics tooling.

Price Appreciation as the Multiplier

The thread running through both halves of this case is time. COINOTAG's reading of the confiscation order is that Bitcoin's climb through successive all-time highs since 2017 re-priced a theft committed at $77,000 into a $2.4 million liability, while the permanent public ledger did the rest, letting investigators rebuild a trail the state had declared dead in 2021. The operative document is the order itself, secured by the Crown Prosecution Service under the Proceeds of Crime Act 2002, and its numbers speak plainly: £1,810,678.93 owed, 30 of 50 coins recovered, 20 still outstanding. The same UK enforcement arc now reaches market structure, where the FCA's crypto authorization gateway sets a 28 February 2027 deadline for firms to become authorized.