Ex-CIA Officer Admitted He Invented a Fake Secret Program to Steal Gold
Former CIA officer David J. Rush, 49, pleaded guilty to one count of wire fraud for inventing a top-secret government program to steal almost $200 million for himself.
Rush, from Ashburn, Virginia, entered the plea in federal court in Alexandria, Virginia. The case involves about $194 million in attempted fraud, described in later filings as a $195 million scheme. Justice Department
Rush worked since 2010 in a CIA unit that makes hacking tools for spying. He lied about his schooling and military record to get the CIA job. TechCrunch
In 2025, Rush made up a special access program. That is an ultra-secret project that only a short list of cleared people may know about, like a locked room where only a few people hold the key. He claimed it was part of a fake continuity of government plan, the backup plans to keep government working in an emergency.
He used his CIA access to set up the secret program to send government money to himself. Court papers said Rush acted as his own approver, so he could spend large sums without real checks.
Rush then used a second fake, a phony government contract, to trick an unnamed defense contractor into buying large amounts of gold that he kept. He admitted he created a fake secret order for the government to buy 298 gold bars worth about $46 million. Washington Post
Agents found more than $46 million in gold bars at Rush's house when they arrested him. They also found over $2 million in cash, plus cars and watches. He has been in jail since his arrest in May while his lawyers talked with prosecutors about a plea deal. TechCrunch
Prosecutors and Rush's lawyers reported a possible plea deal in a joint filing on Sept. 11 in Alexandria. A federal judge had pushed the deadline to formally charge Rush to Oct. 8 to give both sides time to reach a deal.
Rush will be sentenced in late January 2027. He faces up to 20 years in prison.
The broader context here is about how secrecy works. Keeping knowledge to a small group helps keep out outside spies. It also raises risk from insiders unless no one person controls every step.
In my view, the main failure was not spy skills but basic checks, because one man could create the program, approve the spending, and tell the contractor what to do.
Worth flagging for security teams is the contractor part. The government did not buy the gold itself. A trusted vendor bought it because it believed the secret order was real. That shows why orders need checking outside the secret group.
Looking ahead, simple tools could help without giving away secrets. Records that cannot be changed, a rule that more than one person must approve a new secret program, and automatic matching of orders and payments would let a small oversight group see that a program exists.
