Malone Lam, a 22-year-old Singaporean national, has pleaded guilty to helping lead an international cryptocurrency conspiracy that stole and laundered more than $245 million, including more than 4,100 Bitcoin from a Washington, D.C., victim.
A 22-year-old Singaporean man has pleaded guilty to his role in one of the largest cryptocurrency thefts in U.S. history, admitting his involvement in an international cybercrime operation that prosecutors say stole and laundered more than $245 million in cryptocurrency.
Malone Lam pleaded guilty on Tuesday, September 8, 2026, in U.S. District Court in Washington, D.C., to one count of participating in a RICO conspiracy, according to the U.S. Attorney’s Office for the District of Columbia.
Lam, who was a recent resident of Miami, was identified by prosecutors as a ringleader of the operation. Authorities said the criminal enterprise used social engineering, deception and, in some cases, home break-ins to obtain information that allowed members of the group to access victims’ cryptocurrency wallets.
The operation allegedly began no later than October 2023 and continued until at least May 2025.
How the $245 million cryptocurrency theft happened
One of the biggest thefts connected to the case occurred in August 2024, when Lam and associates targeted a wealthy cryptocurrency investor living in Washington, D.C.
According to prosecutors, members of the group used social engineering to convince the victim that there was a security problem involving his cryptocurrency holdings.
Two conspirators allegedly posed as representatives of Google and the cryptocurrency exchange Gemini. Through the deception, they persuaded the victim to provide access to his Google Drive and reveal security codes.
That information enabled the group to gain access to the victim’s cryptocurrency holdings.
More than 4,100 Bitcoin were ultimately drained from the victim’s wallet, with the cryptocurrency valued at more than $245 million at the time described in the case.
The incident demonstrates how social engineering can be used to defeat security systems without necessarily requiring attackers to directly break through sophisticated technical defenses.
Instead, criminals manipulate people into voluntarily providing the information needed to access their accounts.
Lam allegedly coordinated the operation
The Justice Department said Lam used several aliases, including “Anne Hathaway,” “$$$” and “King Greavy.”
Prosecutors described him as an organizer who identified potential victims and coordinated the roles of different participants in the criminal enterprise.
The group was made up of people based in several U.S. states, including California, Connecticut, New York and Florida, as well as individuals abroad.
According to the Justice Department, some of the members had connections through online gaming platforms.
The operation allegedly targeted cryptocurrency holders and used different methods to obtain information that could provide access to their digital assets.
The group also used stolen cryptocurrency in an effort to conceal the proceeds and convert them into assets and services.
Stolen cryptocurrency funded an extravagant lifestyle
After obtaining the cryptocurrency, Lam and other members of the group allegedly embarked on an extraordinary spending spree.
Federal prosecutors said stolen funds were used for luxury cars, private jets, expensive watches, designer clothing, rented mansions and private security.
The Justice Department said the group spent as much as $500,000 on nightclub services in a single evening.
They also allegedly purchased luxury handbags worth tens of thousands of dollars and gave some away during nightclub parties.
The group rented properties in Los Angeles, the Hamptons and Miami and used private aircraft for travel.
Their collection of exotic vehicles included cars valued from approximately $100,000 to $3.8 million, according to prosecutors.
The spending eventually attracted attention from investigators.
The Associated Press reported that Lam’s spending included more than 30 vehicles, including customized Porsches, Lamborghinis and Ferraris, as well as a watch valued at approximately $2 million.
The lavish lifestyle stood in stark contrast to Lam’s age. At just 22, he had allegedly become one of the organizers of a multimillion-dollar international cryptocurrency theft operation.
The spending spree lasted about a month
According to the Associated Press, the group went on an extravagant spending spree for roughly a month after the major Bitcoin theft.
The money was allegedly converted and moved through different channels before being spent on luxury goods and entertainment.
One particularly striking example was a reported $569,000 expenditure at a Los Angeles nightclub in a single night.
Investigators eventually began closing in on the people involved.
Lam was arrested by federal authorities on September 18, 2025, at a rental property in Miami, according to the Justice Department.
The wider case involves 18 defendants, according to the Associated Press, with Lam becoming the 11th person charged in the case to plead guilty.
Online deception was central to the scheme
The case highlights a growing concern within the cryptocurrency industry: the use of social engineering to steal digital assets.
Cryptocurrency transactions can be difficult to reverse once they are completed. This makes the protection of account credentials, security codes and wallet access particularly important.
In Lam’s case, prosecutors say the attackers did not simply rely on technical hacking.
They allegedly manipulated victims by pretending to be trusted companies or representatives and used information obtained through those interactions to access cryptocurrency.
The Washington victim was reportedly targeted because the group believed he was a wealthy, longtime cryptocurrency investor.
The case therefore demonstrates how criminals can combine traditional deception with digital financial technology to carry out extremely large thefts.
Lam faces up to 20 years in prison
Lam’s guilty plea does not immediately determine how long he will spend in prison.
The federal RICO conspiracy charge carries a maximum sentence of 20 years in prison, according to the Justice Department.
A sentencing date has not yet been scheduled.
U.S. District Judge Colleen Kollar-Kotelly has instead set a status hearing for December 8, 2026.
The eventual sentence will depend on the federal sentencing process and the circumstances surrounding Lam’s role in the conspiracy.
Other defendants connected to the operation have already faced court proceedings.
The Justice Department said the investigation involved the U.S. Attorney’s Office for the District of Columbia, the FBI and the IRS Criminal Investigation division, with assistance from federal law enforcement offices in several states.
Cryptocurrency theft case marks major law enforcement breakthrough
Lam’s guilty plea represents a significant development in a case that has attracted attention because of the enormous amount of cryptocurrency involved.
The Justice Department described Lam as the ringleader of an international cybercrime conspiracy that preyed on victims through deception.
U.S. Attorney Jeanine Ferris Pirro said authorities would continue pursuing criminals who use technology to steal from victims.
The case also illustrates the difficulty criminals face when attempting to conceal large cryptocurrency transactions.
Although digital assets can be transferred across borders relatively quickly, investigators can analyze transaction records and other digital evidence to trace movements of cryptocurrency.
In Lam’s case, prosecutors eventually connected the alleged operation to an extravagant trail of purchases, rentals and other spending.
From online gaming connections to a multimillion-dollar criminal operation
According to federal prosecutors, the criminal enterprise developed through connections made on online gaming platforms.
The network eventually expanded into an organized operation targeting cryptocurrency holders.
That progression is significant because it shows how online communities can sometimes provide environments in which criminal relationships develop.
Authorities allege that the participants were not simply acting independently. Lam allegedly coordinated different roles, identified targets and helped organize the social engineering attacks.
The investigation consequently treated the conduct as a broader racketeering conspiracy rather than an isolated cryptocurrency theft.
A warning for cryptocurrency holders
The case serves as a major warning about the importance of protecting cryptocurrency accounts and being skeptical of unsolicited requests for security information.
The alleged attackers reportedly succeeded by convincing a victim that they were legitimate representatives of trusted technology and cryptocurrency companies.
Users can therefore face significant risks even when they have strong passwords and other security measures if they are persuaded to reveal access information themselves.
For cryptocurrency investors, the incident also underscores the importance of independently verifying unexpected calls, emails and messages involving account security.
Once sensitive authentication information is disclosed, criminals may be able to move digital assets rapidly.
What happens next for Malone Lam?
Lam has now admitted his role in the RICO conspiracy, bringing one of the most significant developments in the $245 million cryptocurrency case.
His sentencing remains pending, with the court scheduled to hold a status hearing on December 8.
The broader investigation is also continuing as authorities deal with the other defendants charged in the operation.
For Lam, the guilty plea brings an end to the trial phase of his case but opens the next stage: determining the punishment for his role in an international conspiracy that prosecutors say stole and laundered more than $245 million in cryptocurrency.
The case stands as one of the clearest recent examples of how social engineering, cryptocurrency and online criminal networks can combine to produce losses reaching hundreds of millions of dollars.
