Wednesday, 14 Oct, 2026

DOJ Charges Two California Men in Multimillion-Dollar NFT “Rug Pull” Scheme

The United States Department of Justice (DOJ) has formally indicted two California men on charges of conspiracy and wire fraud, alleging that the duo orchestrated a sophisticated, years-long scheme to defraud investors through a series of fraudulent non-fungible token (NFT) and cryptocurrency projects. The case serves as a stark reminder of the regulatory scrutiny now facing the digital asset sector as law enforcement agencies sharpen their focus on the "Wild West" era of NFT launches.

Gabriel Hay, 23, of Beverly Hills, and Gavin Mayo, 23, of Thousand Oaks, were taken into custody following an investigation led by Homeland Security Investigations (HSI). Prosecutors allege that the pair operated a systematic "rug pull" operation, deceiving thousands of investors by promising revolutionary digital assets, only to abandon the projects once they had siphoned off millions in capital.

The Anatomy of the Alleged Fraud: A Three-Year Campaign

According to the federal indictment, the fraudulent activity spanned from May 2021 to May 2024. During this period, Hay and Mayo allegedly launched or promoted a series of digital assets, including the "Vault of Gems" NFT collection, alongside other projects such as Faceless, Sinful Souls, Clout Coin, Dirty Dogs, Uncovered, MoonPortal, Squiggles, and Roost Coin.

The Mechanics of a Rug Pull

A "rug pull" is a malicious maneuver in the decentralized finance (DeFi) and NFT space where developers build hype around a project, attract significant investment, and then abruptly abandon the venture. In the case of Hay and Mayo, the DOJ asserts that the pair utilized a variety of deceptive tactics to inflate the perceived value of their assets. Once they reached their desired financial threshold, they allegedly liquidated their holdings, causing the value of the assets to crater—effectively leaving investors with worthless digital tokens.

The "Vault of Gems" Deception

Central to the prosecution’s case is the promotion of "Vault of Gems." The duo reportedly marketed the collection as the "first NFT project to be pegged to a hard asset." This claim was a critical psychological hook, intended to provide investors with a false sense of security that their digital collectibles were backed by tangible, real-world value. Once the initial minting phase concluded and millions of dollars in cryptocurrency were collected, the defendants allegedly shuttered the project and ceased communications with the community, leaving the "hard asset" claim entirely unfulfilled.

Chronology of the Alleged Criminal Enterprise

The trajectory of the defendants’ activities illustrates a calculated escalation in their illicit operations.

  • Mid-2021: The initiation of the scheme, coinciding with the height of the NFT market mania. The defendants began testing the waters with early projects, refining their ability to manufacture hype through social media influence.
  • 2022–2023: A period of rapid expansion. The duo allegedly launched multiple projects simultaneously. During this time, they purportedly refined their methods of obscuring their identities, utilizing burner accounts and instructing subordinates to lie about the developers’ true affiliations to avoid attribution.
  • May 2024: The culmination of the federal investigation. By this point, the DOJ had gathered sufficient evidence to link the various disparate projects back to the same central orchestrators.
  • Post-Indictment: Following the reveal of their identities by a third-party developer, the defendants are also accused of initiating a campaign of harassment and stalking. This escalation from digital fraud to physical threats against whistleblowers has drawn particular ire from federal investigators.

Supporting Data and Investigative Findings

The DOJ’s press release and accompanying court documents provide a blueprint for how the pair managed to avoid detection for so long. Central to their strategy was the use of intermediaries and complex wallet structures. By frequently changing the identities of the project leads and creating fake personas, Hay and Mayo attempted to insulate themselves from the inevitable fallout of the rug pulls.

However, the sheer volume of projects eventually provided a trail for HSI agents to follow. The investigation suggests that the defendants didn’t just stumble into these scams; they actively recruited individuals to facilitate their lies, maintaining a sophisticated layer of obfuscation that is rarely seen in small-scale retail crypto fraud.

The Stalking Charges: A Malicious Aftermath

Perhaps the most alarming detail in the indictment is the inclusion of stalking charges. The defendants allegedly targeted a developer who had publicly identified them as the masterminds behind one of their fraudulent schemes. This attempt to silence critics through harassment signifies a shift from mere financial crime to criminal intimidation, a factor that will likely weigh heavily during the sentencing phase should the defendants be convicted.

Official Responses and Federal Stance

The Department of Justice and its law enforcement partners have made it clear that they view these non-violent financial crimes as significant threats to public safety and economic stability.

Katrina W. Berger, Executive Associate Director of Homeland Security Investigations (HSI), issued a sharp rebuke of the defendants’ actions: "For three years, Hay and Mayo allegedly lied to their investors in order to defraud them out of millions of dollars. Such technological fraud schemes cost investors millions of dollars every year."

Berger continued, addressing the common misconception that digital fraud is victimless: "Just because such crimes aren’t violent does not mean they are victimless. HSI will continue to investigate, disrupt, and dismantle such cryptocurrency fraud networks."

This sentiment reflects a broader push by U.S. federal agencies to normalize the prosecution of crypto-related crimes. By labeling these actions as "technological fraud," the DOJ is signaling that the digital medium of the theft does not grant the perpetrator immunity from traditional federal statutes.

Implications for the NFT and Crypto Market

The indictment of Hay and Mayo comes at a pivotal time for the digital asset industry. As the market matures, the "Wild West" era is being systematically dismantled by regulatory action.

1. Increased Due Diligence

Investors are being forced to shift away from "hype-driven" investing toward a model of rigorous due diligence. The revelation that projects can be easily falsified, and that even "hard asset" claims can be fraudulent, serves as a sobering lesson for the retail community.

2. Regulatory Enforcement as a Deterrent

The threat of up to 25 years in prison is a significant deterrent for prospective bad actors. Historically, crypto fraud was often perceived as a "low-risk, high-reward" endeavor due to the difficulty of tracing assets across international borders and anonymous wallets. The success of the HSI in linking these individuals to their crimes suggests that forensic blockchain analysis is becoming increasingly effective.

3. Protection of the Ecosystem

By targeting the individuals behind these rug pulls, the DOJ is attempting to clean up the ecosystem for legitimate innovators. The NFT space has long suffered from a negative reputation due to the prevalence of scams; by removing fraudulent actors, regulators hope to restore enough trust in the market to allow for sustainable growth.

Looking Ahead: The Path to Trial

Gabriel Hay and Gavin Mayo face a series of severe charges, including conspiracy to commit wire fraud and stalking. If convicted on all counts, the duo faces a maximum sentence of 25 years in federal prison.

The case will likely serve as a precedent for future NFT fraud litigation. Prosecutors are expected to use the defendants’ own communications and the trail of failed projects to demonstrate a clear pattern of intent. As the legal proceedings move forward, the broader crypto community will be watching closely to see if the DOJ’s aggressive stance against these individuals marks a permanent shift in how digital asset crimes are adjudicated in the United States.

For now, the indictment serves as a stark reminder to all market participants: the anonymity provided by blockchain technology is not a shield against federal investigation, and the reach of the law extends far beyond the screen. Investors are reminded that digital assets carry significant risks, and the burden of verifying the legitimacy of a project rests, ultimately, with the individual participant.


Disclaimer: This article is for informational purposes only and does not constitute financial or legal advice. Cryptocurrency investments involve high levels of risk, and individuals should conduct their own thorough research before committing capital to any digital asset project.