Back to Flash News

22-Year-Old Singaporean Malone Lam Admits to Leading $245 Million Crypto Theft

22-year-old Singaporean Malone Lam admitted to a RICO conspiracy charge in a federal court in Washington, where prosecutors allege he masterminded social engineering and occasional break-ins to steal and launder over $245 million worth of cryptocurrency. Judge Colleen Kollar-Kotelly set a status conference for December 8, with no sentencing date announced yet; the charge carries a maximum sentence of 20 years.

The operation reportedly began no later than October 2023 and lasted at least until May 2025, with members meeting through gaming platforms, distributed across California, Connecticut, New York, Florida, and overseas. Lam used aliases including Anne Hathaway and King Greavy, responsible for targeting victims and delegating tasks. The largest incident occurred in August 2024: accomplices impersonated Google and Gemini customer service, tricking a victim in Washington into providing cloud storage and verification codes, then remotely transferring nearly 4,100 bitcoins, valued at approximately $245 million at the time.

The stolen funds were spent on a lavish lifestyle. Prosecutors cited expenditures of up to $500,000 in a single night at nightclubs, tens of thousands on handbags, watches worth between $100,000 and $500,000, rent for luxury homes in Los Angeles, private jets, personal security, and a fleet of cars valued between $100,000 and $3.8 million; one night in a Los Angeles nightclub reportedly cost about $569,000. He is the 11th defendant to plead guilty in the case involving around 18 defendants.

The investigation was aided by on-chain tracking and social media flaunting. Prosecutors stated that some funds became difficult to recover after being laundered through exchanges, mixing, and chain stripping. D.C. federal prosecutor Jeanine Pirro stated that if someone builds a cybercrime empire, authorities will dismantle it and hold them accountable. Lam was reportedly arrested in Miami while living there on an expired tourist visa.

Mechanically, this elevates social engineering cases to organized extortion. The buyers are individuals holding large amounts of self-custodied cryptocurrency, while the sellers are youth gangs posing as customer service. Funds move from wallets into nightclub, car dealership, and landlord accounts, then become part of the prosecutor's forfeiture list. Pleading guilty shortens the mastermind's trial, transferring sentencing leverage to cooperation and restitution; those still at large or unpleaded continue to bear the risks of laundering and physical cash-out. The market value of the stolen bitcoins has been fixed at the prosecution's figure, determining how much victims can recover.

Source: Public Information

ABAB AI Insight

Prosecutors framed the bitcoin theft as a RICO case, viewing the gaming group, task delegation, and car purchases as an ongoing enterprise rather than a one-time scam. Lam's journey from dropping out in eighth grade to masterminding in Miami illustrates that the threshold lies not in cryptography but in the ability to perform customer service scripts to seed phrase exits. Investigators like ZachXBT previously mapped nightclubs and car fleets into public graphs, and as law enforcement caught up, guilty pleas became a way to cement narratives into judgments.

The capital path is "crypto - fiat - registrable assets." Mixing breaks the ledger, while car and rent expose remaining value through VINs and leases. The gang does not operate an exchange but exploits trust gaps: the brands of Google and Gemini were rented for a night. After the mastermind's guilty plea, prosecutors can handle accomplices and civil forfeiture more cost-effectively, with remaining portions in mixing likely becoming bad debts.

The analogy is not that exchanges were hacked, but that traditional phone scams have upgraded to seed phrase harvesting via remote desktop, layered with anti-hacking laws. Crypto crime is at a stage where it is "traceable on-chain, flauntable off-chain, and recognizable in court," with the largest individual theft case serving as a test of whether RICO applies to decentralized assets.

Structural judgments belong to regulatory changes. Pricing power has shifted from anonymous addresses to federal plea agreements. The mechanism is: social engineering attacks people, not consensus algorithms; when stolen funds must be converted into cars and nightclubs to be enjoyed, the organization becomes visible to RICO, and the mastermind's 20-year cap becomes the residual value of this business model.

ABAB News · Cognitive Laws

  1. Once seed phrases are given to fake customer service, no matter how clean the ledger, the coins cannot be recovered.

  2. Flaunting wealth turns money laundering into a collection of evidence.

  3. Turning theft into a business allows the court to dismantle it as such.