Former NCA Officer Ordered to Repay £1.8 Million in Stolen Bitcoin After Confiscation Ruling

A former investigator with the National Crime Agency has been ordered by a court to hand back £1.8 million worth of Bitcoin that he stole from a criminal investigation he was assigned to work on, in a case that prosecutors say demonstrates their determination to strip offenders of illicit profits regardless of how those assets are hidden.

Paul Chowles, aged 44 and a resident of Bristol, was previously handed a prison sentence of five and a half years at Liverpool Crown Court after admitting to charges of theft and money laundering. His crimes involved diverting a portion of the cryptocurrency that had been seized from a convicted drug trafficker during an NCA operation targeting illegal sales on dark web marketplaces.

The Crown Prosecution Service has now secured a confiscation order matching the value of the 30 Bitcoin that investigators managed to recover from Chowles. When those coins were originally taken, they were worth approximately £36,000. Thanks to the dramatic surge in Bitcoin's market value over the intervening years, that same quantity of cryptocurrency is now valued at more than £1.8 million — a fifty-fold increase that underscores the complexities of policing digital assets.

The case dates back to Chowles's involvement in an NCA investigation into individuals using the dark web to trade in illegal goods. As a member of the team handling the case, his responsibilities included analysing and extracting cryptocurrency from digital devices that had been seized during the probe. This work gave him direct access to the Bitcoin holdings that had been confiscated from suspects.

The investigation in question ultimately led to the conviction and imprisonment of Thomas White, who received a 64-month jail term in 2019. White was found to have been selling illegal goods to criminal networks through Silk Road 2.0, a dark website that operated as a marketplace for illicit transactions. At the time of his case, authorities had seized 97 Bitcoin from White.

However, questions arose when it emerged that 50 Bitcoin had been withdrawn from the digital wallet connected to the seizure. The NCA initially operated under the assumption that White had somehow managed to gain access to the wallet despite being in custody, but White consistently denied having anything to do with the missing cryptocurrency. The truth, as investigators would later discover, was that Chowles had exploited his position to take the Bitcoin from the confiscated wallet in 2017.

To conceal his tracks, Chowles carried out a series of cryptocurrency transactions designed to obscure the origin of the funds. His attempts at covering his movements ultimately proved unsuccessful. An investigation into the stolen Bitcoin was launched by Merseyside Police, leading to Chowles's arrest in May 2022. Authorities subsequently recovered 30 Bitcoin from him, though this represented only a portion of the 50 that had originally gone missing from the seized wallet.

Luke Clements, who works within the CPS proceeds of crime division, spoke about the gravity of Chowles's actions, noting that the former NCA officer had abused a position of trust for his own personal benefit. Clements emphasised that confiscation orders serve as a powerful mechanism for ensuring that crime does not pay, and he stated that the ruling should serve as a clear warning to anyone who believes they can profit from criminal conduct.

The CPS representative added that the order sends a message that authorities will pursue offenders' assets relentlessly and will seek to recover criminal proceeds wherever they may be concealed. This determination reflects the growing sophistication of law enforcement agencies in dealing with cryptocurrency-related offences, where the pseudonymous nature of transactions can make tracing funds particularly challenging.

The case highlights several important trends in modern law enforcement. The first is the increasing prevalence of cryptocurrency in criminal investigations, both as a tool for committing offences and as an asset that authorities must learn to seize and manage. The second is the inherent volatility of digital currencies, which can transform a relatively modest theft into a multi-million-pound liability over time — or, conversely, see assets lose value before they can be recovered.

The fact that Chowles was himself an NCA officer entrusted with handling seized cryptocurrency makes the case particularly striking. It represents a breach of the very trust that enables law enforcement to conduct complex investigations into organised crime and dark web marketplaces. Cases of this nature can damage public confidence in the agencies responsible for tackling serious criminality.

The confiscation order means that Chowles must now repay a sum equivalent to the current market value of the stolen Bitcoin, rather than the amount they were worth at the time of the theft. This principle, which applies across proceeds of crime legislation, ensures that offenders cannot benefit from the appreciation of assets they acquired illegally. It also reflects the courts' approach to ensuring that crime is not financially rewarding.

Chowles had previously been jailed in 2025 for his offences, with the sentencing at Liverpool Crown Court following his guilty pleas to both theft and money laundering charges. The confiscation proceedings represent a separate legal process designed to recover the financial benefits of criminal conduct, and they can take place after a criminal conviction has been secured.

Bitcoin, the world's first and most well-known cryptocurrency, has experienced significant price fluctuations since its creation. The increase in value from roughly £1,200 per coin at the time of the theft to more than £60,000 per coin at current valuations illustrates how the passage of time can dramatically alter the financial stakes in cases involving digital assets. For law enforcement agencies, this volatility presents both opportunities and challenges when seeking to recover criminal proceeds.

The case also demonstrates the effectiveness of collaboration between different police forces and prosecuting authorities. Merseyside Police led the investigation into the stolen Bitcoin, while the CPS proceeds of crime division pursued the confiscation order. The NCA, despite employing Chowles, cooperated with the inquiry into his conduct. Such multi-agency cooperation is essential in complex financial crime cases that cross jurisdictional and technological boundaries.

Thomas White, the original target of the NCA investigation, was sentenced to 64 months in prison in 2019 for his activities on Silk Road 2.0. That marketplace, which operated on the dark web, allowed users to buy and sell illegal goods while attempting to remain anonymous. The seizure of 97 Bitcoin from White formed part of the evidence against him, and it was from this seized cryptocurrency that Chowles ultimately stole.

The outcome of the confiscation hearing means that Chowles will not be permitted to retain any financial benefit from his crimes. The £1.8 million order reflects the current value of the 30 Bitcoin recovered from him, and it serves as a reminder that the justice system has mechanisms in place to pursue the proceeds of crime long after the original offence has taken place.