Scottish Court Jails Robert Barr Eight Years for Prison-Cell Crypto Plot

Scotland's High Court of Justiciary has sentenced Robert Barr, 29, to eight years in prison for directing an attempted theft of up to £2 million ($2.7 million) in cryptocurrency from his prison cell, according to a sentencing statement published by the Judicial Office on Tuesday.

Lord Cubie handed down the sentence at the High Court in Glasgow. Barr pleaded guilty alongside Sean Favier, 26, and Iain Doyle, 37, to involvement in serious organised crime. Favier received four years; Doyle received five.

"This was a crime which married 21st century computer sophistication with old fashioned housebreaking in an audacious attempt to steal cryptocurrency worth up to £2 million pounds," Lord Cubie said in court.

How the Plot Worked

The operational design was simple and, had it succeeded, effective. Favier and Doyle were to enter the victims' home in Midlothian, near Edinburgh, and compel the male resident to download AnyDesk, a legitimate remote-access program, onto his computer. That would have given Barr — who at the time was serving a 21-month fraud sentence at HMP Edinburgh — remote control of the machine from within prison, allowing him to transfer the victim's cryptocurrency to wallets he controlled.

The attempt collapsed at 11:30 p.m. on April 17, 2024, when the couple spotted the two men on their doorbell camera and refused to open the door. One of the men looked directly into the lens and asked whether a camera was in front of him before the pair left, the BBC reported. Lord Cubie credited the failure entirely to the victims, who "had the sense not to open their front door" to unknown men with their faces covered.

Months of Reconnaissance

The attempt followed months of preparation. Investigators established that Barr had identified the victim as a crypto holder, gathered images of the house and conducted reconnaissance. The case was reconstructed from Barr's phone, seized in June 2024. Messages on the device, the judge said, "plainly contemplated threats and/or violence."

The victim was a co-founder of a crypto startup who did not advertise his holdings publicly, though he followed mostly crypto-related accounts on social media, according to the BBC. Barr's associates had already burgled the same house in January 2024 and stolen a crypto wallet — but could not access the funds without its PIN.

Prosecutors described Barr as a "sophisticated cybercriminal" able to "orchestrate a level of criminality rarely seen within mainstream investigations." He had a prior conviction for crypto fraud and organised the new offence while incarcerated "using plainly illicit means of being in contact or online," Lord Cubie said, calling those materially aggravating factors.

What Does This Change for Practitioners?

For custodians, exchanges and security teams, the case confirms the operational pattern behind so-called wrench attacks: physical coercion paired with remote-access tooling that converts a hostage session into a wallet drain. AnyDesk and similar programs are the pivot point. Controls that flag or block remote-access software installation, geofenced withdrawal delays and hardened signing procedures are the practical mitigations, and this prosecution shows why attackers now treat them as the primary obstacle rather than the blockchain itself.

The pattern is escalating. Chainalysis reports more than $30 million stolen in such attacks in the first half of 2026, putting the year on pace for a record. The UK has seen a cluster of recent cases: three teenagers were jailed earlier this year for stealing $4.3 million in crypto at knifepoint; three men were sentenced last month over a failed home invasion targeting crypto; and in September, Crimestoppers offered up to £10,000 for information on an attack in which, police believe, a fourth man relayed instructions to three attackers over a video call.

Lord Cubie will consider a serious crime prevention order against Barr on November 17. Barr also remains in custody awaiting potential extradition proceedings.