A 22-year-old Singaporean man has pleaded guilty in a U.S. federal court to orchestrating one of the largest cryptocurrency thefts ever prosecuted, admitting to leading a criminal network that stole $245 million in Bitcoin through social engineering, hacking, and even home burglaries — then blew through the proceeds on nightclubs, luxury cars, and designer handbags, BBC reports.
The Guilty Plea
Malone Lam entered his guilty plea Tuesday to a racketeering conspiracy charge in U.S. District Court, admitting he organized a scheme with friends and online acquaintances to steal $245 million worth of Bitcoin and subsequently launder the proceeds. Lam now faces a maximum possible sentence of 20 years in federal prison. U.S. District Judge Colleen Kollar-Kotelly, who is overseeing the case, did not immediately schedule a sentencing hearing.
U.S. Attorney Jeanine Pirro issued a pointed warning following the plea:
“If you build a cybercrime empire, we will find you, dismantle your operation, and hold you accountable.”
She added that Lam “led an international network that preyed on victims through deception, invaded their privacy, and stole hundreds of millions of dollars in cryptocurrency.”
Who Is Malone Lam
Lam grew up in Singapore, attending Unity Secondary School in Choa Chu Kang before dropping out of school entirely by age 14. During his teenage years, he became deeply involved in cryptocurrency trading and online gaming communities, including Minecraft and Discord — platforms that would later become central to how he recruited his criminal network.
In October 2023, Lam traveled to the United States and settled across multiple locations, including Miami, Los Angeles, and the Hamptons. He entered the country through the Visa Waiver Program, and remained in the U.S. after that authorization expired in January 2024, continuing his criminal activity while living in the country without valid immigration status.
How the Criminal Network Operated
According to federal prosecutors, Lam launched what investigators have termed the “Social Engineering Enterprise” together with two roommates while living in Texas. Over the following months, the operation expanded to include 14 members spread across California, Connecticut, New York, Florida, and locations outside the United States. Prosecutors say the group’s members connected and coordinated primarily through online gaming platforms.
The network identified potential victims — specifically individuals holding large amounts of cryptocurrency — through multiple methods, including hacked databases, personal information purchased on dark web marketplaces, and targeted phishing emails. Once a victim was identified, the group used social engineering tactics to trick them into surrendering confidential account information, which was then used to drain their cryptocurrency wallets.
The scheme escalated significantly by 2024. According to court documents, group members began arming themselves with firearms, and on July 8, 2024, the network carried out a physical home invasion, burglarizing a victim’s residence in New Mexico specifically to steal hardware wallets containing cryptocurrency.
According to The New York Times, Lam and co-conspirator Jeandiel Serrano even live-streamed one of their social engineering heists to friends online in real time.
Where the Stolen Money Went
Federal prosecutors detailed an extraordinary spending spree fueled by the stolen funds. According to the Department of Justice, Lam and his associates spent as much as $500,000 in a single evening at nightclubs. The group purchased a fleet of exotic vehicles — reportedly more than 30 high-end luxury automobiles in total — ranging in individual value from $100,000 to $3.8 million.
Additional purchases documented by prosecutors included Hermès Birkin handbags worth tens of thousands of dollars each, which the group reportedly threw into crowds during nightclub parties; high-end watches valued up to $500,000; designer clothing worth tens of thousands of dollars; rental properties in Los Angeles, the Hamptons, and Miami; private jet charters; and a dedicated team of private security guards.
Lam became a recognizable, “notorious” figure within the Los Angeles and Miami nightclub scenes because of his flamboyant spending habits, and his sudden cryptocurrency wealth drew significant attention even before his arrest, according to testimony heard in a Florida district court.
The Arrest and Court Reaction
The FBI arrested Lam along with a co-conspirator in Miami on September 18, 2024, effectively dismantling the operation. According to reports, Lam threw his mobile phone into Biscayne Bay in an apparent attempt to destroy evidence just before his arrest, after an off-duty police officer had reportedly tipped him off about his impending detention.
At Lam’s first court appearance, U.S. Magistrate Judge Alicia Valle offered a striking characterization of the case: “As I was listening to the evidence, I could only think of Ferris Bueller gone bad” — a reference to the 1986 film about a teenager who fakes illness to skip school for a day of reckless adventure through Chicago.
The judge elaborated:
“[He] spent this money wildly, going to Los Angeles nightclubs, purchasing more than 30 high-end luxury automobiles. I mean, [that’s] an incredible amount of spending and craziness that followed his coming into more than $230 million.”
Prosecuting the Wider Network
Lam was not operating alone, and prosecutors have continued pursuing other members of the criminal enterprise. In April of this year, co-conspirator Evan Tangeman was sentenced to 70 months in federal prison specifically for laundering proceeds from the scheme. Prosecutors noted that Tangeman had additionally attempted to destroy evidence following Lam’s arrest — behavior the court explicitly treated as evidence of “consciousness of his guilt” when determining his sentence.
According to court filings, the criminal conspiracy is believed to have begun no later than October 2023 and continued operating until at least May 2025 — meaning the network’s activities persisted for roughly eight months even after Lam himself had already been arrested and taken into custody, underscoring how deeply the enterprise had been structured to continue functioning independent of any single member.
Why This Case Matters
The Lam case stands out even within the increasingly crowded landscape of cryptocurrency theft prosecutions, both for the sheer scale of the loss — $245 million — and for the network’s willingness to escalate from purely digital social engineering into armed, physical home invasions to obtain hardware wallets.
That progression illustrates a broader and increasingly documented trend within crypto crime: as cryptocurrency holdings have grown large enough to represent life-changing sums, some criminal networks have shown a willingness to move beyond phishing and hacking into physical violence and coercion, sometimes referred to within the industry as “wrench attacks.”
What Happens Next
With Lam’s guilty plea now entered, the case moves toward sentencing, though Judge Kollar-Kotelly has not yet set a date for that hearing. Given the maximum 20-year sentence he faces and the precedent set by his co-conspirator’s 70-month sentence for a comparatively smaller role in laundering, prosecutors are likely to push for a substantial prison term reflecting both the scale of the theft and Lam’s position as the network’s identified ringleader.
For victims of the scheme and for the broader cryptocurrency industry, the case serves as a stark illustration of how far organized criminal networks are now willing to go — combining digital deception with real-world violence — to target individuals holding substantial digital wealth.