Key Takeaways
- A 22-year-old Singaporean national, Malone Lam, admitted guilt to federal racketeering charges for masterminding a $245 million cryptocurrency theft operation
- Criminals employed sophisticated social engineering tactics and physical home invasions to access victims’ Bitcoin holdings
- Proceeds funded an extravagant lifestyle including 28 luxury vehicles, nightclub visits costing $500,000 each, and premium real estate rentals
- The criminal enterprise operated between October 2023 and May 2025, ultimately involving 14 accused individuals
- The mastermind could receive up to two decades in federal prison; a sentencing hearing remains unscheduled
On September 9, 2026, Malone Lam, a 22-year-old resident of Singapore, entered a guilty plea to federal racketeering conspiracy charges in connection with what authorities describe as one of America’s most significant cryptocurrency heists.
The elaborate criminal operation successfully stole over $245 million worth of Bitcoin from numerous victims throughout the United States. Federal prosecutors identified Lam as the primary organizer who recruited accomplices, selected targets, and directed the conspiracy’s activities.
During proceedings before US District Judge Colleen Kollar-Kotelly, Lam acknowledged his role in the scheme. He now faces potential imprisonment of up to 20 years, though court officials have not yet established a date for sentencing.
The Mechanics Behind the Massive Heist
Investigators discovered that the criminal organization recruited members through online gaming communities. Participants originated from multiple US states including California, Connecticut, New York, and Florida, as well as international locations.
The operation relied heavily on sophisticated social engineering techniques designed to manipulate victims into revealing sensitive account information. Additionally, the group conducted physical break-ins at residences to obtain hardware wallets and extract private cryptographic keys.
A particularly significant incident occurred in August 2024 when thieves successfully obtained more than 4,100 Bitcoin from a Washington, D.C. victim. The perpetrators impersonated customer service representatives from Google and cryptocurrency exchange Gemini, persuading the target to disable two-factor authentication protections and share their computer screen, which revealed their private keys.
To conceal the origin of stolen assets, the organization utilized cryptocurrency mixing services, multiple exchange platforms, intermediary wallet addresses, and virtual private network technology.
Evolution from Initial Arrests to Expanded RICO Investigation
Federal authorities initially arrested Lam alongside alleged accomplice Jeandiel Serrano in September 2024 on a two-person indictment. However, by May 2025, the investigation had grown substantially, with prosecutors adding 12 more defendants and increasing the total alleged theft amount to over $263 million.
Additional charges incorporated a separate $14 million theft from July 2024 and another incident involving a physical residence break-in targeting a hardware wallet.
Federal prosecutors revealed that Lam maintained operational control of the conspiracy even while held in pretrial detention, including coordinating the delivery of luxury items to his romantic partner.
The criminal enterprise’s spending patterns were remarkably extravagant. Stolen funds purchased at least 28 high-end exotic automobiles, with individual vehicles valued as high as $3.8 million. Additional expenditures included chartered private aircraft, premium rental properties in Los Angeles, Miami, and the Hamptons, and luxury timepieces worth up to $500,000.
The group’s nightclub expenditures were equally excessive, with single visits generating bills of $500,000. Reports indicate that expensive Hermes Birkin handbags were casually discarded into crowds during celebrations.
Background information reveals that Lam discontinued his formal education in Singapore at age 14. He entered the United States in October 2023 and remained in the country illegally after his visa authorization expired in January 2024.
In April 2026, another member of the conspiracy, Evan Tangeman, received a 70-month prison sentence for his involvement in laundering the proceeds.
US Attorney Jeanine Pirro emphasized the government’s commitment to prosecution: “If you build a cybercrime empire, we will find you, dismantle your operation, and hold you accountable.”





