By How Did The $245 Million Crypto Scheme Work?
Malone Lam, a 22-year-old Singaporean citizen who lived in Miami, has pleaded guilty to a federal racketeering conspiracy tied to an international social-engineering operation that stole and laundered more than $245 million in cryptocurrency.
Lam entered the guilty plea Tuesday, according to the U.S. Attorney’s Office for the District of Columbia. Prosecutors say he helped lead a network that targeted cryptocurrency holders through deception and coordinated the movement and spending of stolen digital assets.
Lam used several aliases, including “Anne Hathaway,” “$$$” and “King Greavy,” according to prosecutors.
Authorities said his role extended beyond participating in individual thefts. Lam allegedly identified victims and coordinated the responsibilities of other members of the operation, placing him near the center of a broader criminal network rather than treating him as a lower-level participant.
“If you build a cybercrime empire, we will find you, dismantle your operation, and hold you accountable,” U.S. Attorney Jeanine Pirro said. “This defendant led an international network that preyed on victims through deception, invaded their privacy, and stole hundreds of millions of dollars in cryptocurrency.”
Who Else Was Charged In The Operation?
Federal prosecutors initially charged Lam and alleged co-conspirator Jeandiel Serrano in 2024. Other defendants were later tied to the operation as authorities expanded the case.
Among them was Evan Tangeman, 22, who was sentenced in April to more than five years in prison.
The use of a racketeering conspiracy charge gives prosecutors a way to treat the alleged activity as an organized criminal enterprise involving coordinated roles rather than a series of unrelated cryptocurrency thefts.
The case also illustrates how large crypto theft investigations increasingly extend beyond tracing blockchain transactions. Prosecutors have focused on the people who selected targets, manipulated victims, moved stolen assets and converted those proceeds into luxury purchases.
That distinction matters because the alleged scheme relied on social engineering rather than simply exploiting software vulnerabilities. Such attacks target people and account-access procedures, making them difficult to prevent through blockchain security alone.
Investor Takeaway
The case shows that some of the largest cryptocurrency losses can begin with manipulation of individuals rather than a technical breach of a blockchain. For investors and platforms, account security, identity controls and resistance to social-engineering attacks remain as important as wallet technology.
Where Did The Stolen Crypto Go?
Prosecutors said Lam and other members of the group spent stolen proceeds on an unusually expensive lifestyle after the cryptocurrency was taken and laundered.
The spending allegedly included nightclub services costing close to $500,000 in a single evening, as well as luxury handbags, watches and rental properties in Los Angeles, the Hamptons and Miami.
The group also bought or used several luxury vehicles, with prosecutors placing their values between roughly $100,000 and $3.8 million.
Those purchases form an important part of the government’s case because moving cryptocurrency into high-value physical assets can create additional financial records, counterparties and ownership trails for investigators to follow.
The scale of the spending also shows how quickly proceeds from digital-asset theft can move into the traditional economy. Although stolen cryptocurrency can be transferred across wallets within minutes, converting those assets into cars, real estate, nightlife spending and luxury goods creates links to businesses and financial intermediaries outside the blockchain.
What Happens Next For Lam?
Lam faces a maximum sentence of 20 years in prison following his guilty plea. A status hearing is scheduled for Dec. 8.
The final sentence has not yet been determined, and the statutory maximum does not necessarily indicate the term Lam will ultimately receive.
His plea nevertheless removes one major defendant from a case involving one of the larger alleged social-engineering cryptocurrency theft operations pursued by U.S. prosecutors.
For law enforcement, the prosecution also serves as a warning that crypto-related crime does not remain isolated from conventional investigative tools. Blockchain tracing, financial records, luxury purchases and the coordination between multiple defendants can all provide evidence as authorities reconstruct how stolen assets moved.
The wider risk for cryptocurrency users is that social-engineering attacks can bypass many of the protections normally associated with digital assets. If an attacker convinces a victim, employee or service provider to surrender access credentials or approve a transaction, the security of the underlying blockchain may offer little protection once the transfer is authorized.
Lam’s case therefore sits at the intersection of crypto theft and traditional organized financial crime: digital assets provided the target and transfer mechanism, but prosecutors say deception, coordination and laundering were central to the operation.