Malone Lam, identified as the alleged mastermind behind a scheme that reportedly swindled over $240 million in Bitcoin from a Washington, D.C. investor, is slated for a plea agreement hearing following the admissions of guilt from 10 other co-defendants in this extensive cryptocurrency theft case.
Summary
- Malone Lam faces a plea agreement hearing over the theft of more than 4,100 Bitcoin, valued at over $240 million, from a Washington investor.
- According to prosecutors, Lam and his associates utilized social engineering techniques to gain access to accounts and security information before transferring the stolen cryptocurrency across various platforms.
- The group squandered millions on luxury commodities, including cars, private jets, upscale watches, mansions, and nightlife experiences, prior to the FBI’s arrests in September 2024.
- A total of eighteen defendants are charged in the incident, with Lam set to be the 11th to plead guilty, potentially facing a sentence of at least 14 years in prison.
The Associated Press reported that the 22-year-old from Singapore is scheduled to appear in court on Tuesday, nearly two years after being charged with orchestrating a scheme that allowed him and his associates to steal over 4,100 Bitcoin from a veteran crypto investor in August 2024.
With 18 defendants in total for this case, Lam is preparing to become the 11th to admit guilt. During his initial court appearance, a prosecutor indicated that federal sentencing guidelines could suggest a prison term of at least 14 years if convicted.
Lam was apprehended in September 2024 after officials tracked a month-long luxury spending spree that included exotic cars, private jets, high-end watches, lavish homes, and substantial nightclub expenditures.
Case Initiation: $240 Million in Bitcoin Theft
The legal proceedings focus on an attack that took place on August 18, 2024, against a Washington resident identified in documents as “Victim 7.”
Prosecutors alleged the perpetrators targeted this individual due to his status as a wealthy and experienced cryptocurrency investor. One impersonated a Google employee inquiring about supposed compromises to the victim’s account, while another claimed to be from the crypto exchange Gemini, warning him about malware affecting his wallet.
These impersonators managed to convince the victim to grant access to his Google Drive and share security codes, enabling the group to seize control of over 4,100 BTC.
Crypto.news previously reported in September 2024 that Lam, along with Veer Chetal and Jeandiel Serrano, was linked to the estimated $243 million theft achieved through social engineering tactics. Blockchain investigator ZachXBT assisted in tracking the stolen assets and shared relevant information about the group.
A private recording captured the suspects’ reactions following the Bitcoin acquisition; one voice enthusiastically exclaimed, “Oh, my God! Bro, bro, I’m going to spaz out!”
Subsequently, the stolen crypto was funneled through several exchanges as money laundering efforts attempted to convert parts of the haul into fiat currency, as stated by prosecutors.
Investigators pointed out that the August theft wasn’t the group’s first criminal endeavor. Lam and his associates, who met through online gaming forums, had conducted similar multimillion-dollar thefts since late 2023 using comparable social engineering strategies.
Such methods continue to prove problematic, resulting in significant cryptocurrency losses. In January 2026, a crypto owner lost over $282 million following another social engineering scheme involving a hardware wallet. ZachXBT reported that stolen assets were then laundered through various instant exchanges into Monero.
Tracing the Group via IP Address
A single operational misstep allowed investigators to uncover the identities behind the 2024 theft.
Prosecutors revealed that Serrano set up an account on a crypto exchange to hold nearly $30 million in stolen funds but neglected to mask his IP address. This oversight led investigators to a rental property in Encino, California, where he was living for $47,500 a month.
By this point, the group’s members had commenced extravagant spending.
Serrano was enjoying a vacation in the Maldives when authorities identified him as a suspect, while Lam and his crew allegedly spent $4 million in Los Angeles nightclubs over the course of a month, according to the authorities.
Notably, Lam reportedly spent over $569,000 in a single night at a Los Angeles club. The FBI noted that he used stolen funds to purchase a $2 million watch and more than 30 vehicles, including customized models of Porsches, Lamborghinis, and Ferraris.
Chetal gifted his parents a Lamborghini and concealed $500,000 in cash within a duffel bag in their washing machine.
This lavish spending led to further complications when, about a week after the Bitcoin theft, several masked individuals confronted Chetal’s parents while they were driving in Danbury, Connecticut.
According to the AP, the attackers assaulted Chetal’s father with a baseball bat, forced the couple into a van, and bound their hands. Prosecutors asserted that the perpetrators intended to use the parents to pressure Chetal into surrendering his share of the stolen Bitcoin.
Witnesses alerted the police, and law enforcement apprehended the would-be kidnappers before their plot could reach fruition.
Physical assaults involving cryptocurrency holders and their families have increased significantly. Chainalysis estimated that criminals stole over $30 million through successful physical attacks on crypto holders globally in the first half of 2026.
Through late June, Chainalysis documented 46 attacks, with 12 resulting in successful payments. Family members or associates of crypto holders made up roughly 25% to 30% of the reported incidents by early 2026.
FBI Action Followed by Group’s Extravagance
The FBI executed a search warrant at Chetal’s apartment in Brunswick, New Jersey, on September 9, 2024, discovering $37 million in stolen cryptocurrency in his possession. Following this, Chetal agreed to cooperate with investigators.
Nine days later, agents apprehended Serrano at Los Angeles International Airport, where he was seen wearing a watch valued at $500,000.
Initially, Serrano denied his involvement but later admitted to having around $20 million in cryptocurrency stolen from the Washington investor, according to prosecutors. His case remains ongoing.
Lam was arrested that same day at a Miami residence he had been using. Prosecutors later alleged that an off-duty law enforcement officer had notified him about the impending arrest.
“We used to speculate what it would be like if I got caught, but I never imagined it would escalate to this extent,” Lam remarked during a recorded phone call from jail referenced in his indictment.
This extravagant lifestyle surprised U.S. Magistrate Judge Alicia Valle during Lam’s initial appearance in Miami.
“I was reminded of Ferris Bueller gone wrong,” Valle stated, alluding to the protagonist in the 1986 film “Ferris Bueller’s Day Off.”
The arrests did not immediately curb the spending of stolen funds. Prosecutors indicated that another defendant, Ferro, later utilized funds from the theft to cover Lam’s legal fees. Ferro pleaded guilty to conspiracy charges but remained silent during his sentencing in May.
Rising Social Engineering Losses
The Lam case is part of a trend of substantial cryptocurrency thefts where attackers have focused on people rather than exploiting vulnerabilities in blockchain technology.
In April 2025, another elderly American tragically lost $330.7 million in Bitcoin after being targeted by a social engineering scheme that resulted in the theft of 3,520 BTC, according to ZachXBT. The stolen funds were subsequently funneled through over 300 wallets and at least 20 exchanges.
Federal statistics reflect major losses from crypto-related fraud. In 2025, the FBI received 181,565 complaints linked to cryptocurrency, accounting for $11.37 billion in losses, while investment fraud amounted to 61,559 complaints and $7.23 billion in losses.
Cybersecurity researcher Allison Nixon, who monitors an online hacker community known as The Com, told the AP that the significant sums involved in crypto fraud have drawn in youthful offenders and highlighted the need for enhanced law enforcement resources.
“If we don’t significantly boost our resources to tackle these criminals swiftly, the situation will only worsen,” Nixon stated.
U.S. District Judge Colleen Kollar-Kotelly, overseeing Lam’s case, has already sentenced three of his alleged accomplices. Two defendants involved in money laundering received approximately six-year prison sentences.
Chetal pleaded guilty to conspiracy charges in November 2024 and is awaiting his sentence, while Tucker Desmond received probation after admitting to destroying evidence related to the other group members.
During a March sentencing, Desmond expressed that he had become “obsessed with the facade of success rather than committing to hard work.”
During Ferro’s sentencing, defense attorney Kevin Wilson characterized the defendants as mischievous “young kids,” a perspective that Kollar-Kotelly dismissed.
“Youth is not a valid excuse,” stated the judge.