
AI-generated summary
The case began with the alleged theft of 4,100 Bitcoin from a single victim in August 2024, initially charged as fraud. It was later expanded into a RICO conspiracy involving multiple defendants and over $263 million in alleged crypto thefts, including a separate $14 million theft and a home break-in targeting a hardware wallet.
Singaporean national Malone Lam pleaded guilty to participating in a racketeering conspiracy that US prosecutors say used social engineering and home break-ins to steal and launder more than $245 million in cryptocurrency.
On Tuesday, the US Justice Department said that Lam organized the international operation, identified prospective victims and coordinated other conspirators. The enterprise was formed through connections on online gaming platforms and operated from no later than October 2023 through at least May 2025, according to court documents.
The plea establishes criminal responsibility nearly two years after Lam was charged over the theft of more than 4,100 Bitcoin, worth over $230 at the time, from a Washington, DC resident.
Lam pleaded guilty before US District Judge Colleen Kollar-Kotelly to one count of participating in a Racketeer Influenced and Corrupt Organizations (RICO) conspiracy. The judge scheduled a status hearing for Dec. 8, but the Justice Department did not announce a sentencing date.
From a 4,100 Bitcoin theft to a RICO case
Initially, prosecutors accused Lam and Jeandiel Serrano of fraudulently obtaining more than 4,100 Bitcoin from a single victim on Aug. 18, 2024.
In 2024, blockchain investigator ZachXBT identified the victim as a Genesis creditor. The attackers allegedly posed as Google support staff to compromise the victim’s accounts before impersonating Gemini support to persuade the victim to reset two-factor authentication and use screen-sharing software that exposed private keys.
Lam and Serrano were arrested on Sept. 18, 2024, and prosecutors unsealed their indictment the following day. Prosecutors alleged that the pair laundered the proceeds through crypto mixers, exchanges, pass-through wallets and virtual private networks.
Related: Liquid ‘white hats’ return $270M in Bitcoin as network prepares restart
On May 15, 2025, prosecutors announced a superseding indictment charging 12 additional defendants and expanding the case into an alleged RICO conspiracy involving more than $263 million in crypto thefts. It included a separate $14 million theft in July 2024 and an alleged home break-in targeting a hardware wallet.
Prosecutors also alleged that Lam continued directing associates from pretrial detention, including arranging delivery of luxury items to his girlfriend. The group’s members allegedly spent stolen funds on private jets, rental properties, watches and at least 28 exotic cars, while nightclub bills reached $500,000 per evening.
AI outlook — possibilities, not facts
Malone Lam will receive a sentencing hearing on December 8, 2025, as scheduled by Judge Colleen Kollar-Kotelly.
Very likely · Within days

Malone Lam, a 22-year-old Singaporean, is scheduled for a plea agreement hearing in federal court in Washington on Tuesday. Prosecutors allege he organized a racketeering group that stole over $245 million in Bitcoin from a single investor through social engineering scams impersonating Google and Gemini staff, burglarized homes to steal hardware wallets, laundered funds via Monero and peel chains, and spent millions on luxury items while continuing fraud operations from Dubai.

Ireland's Criminal Assets Bureau reports organized crime gangs are renting vaults to store cryptocurrency wallet seed phrases and private keys alongside cash, luxury watches, and passports. The bureau has shared this finding with the government committee preparing for new EU anti-money laundering rules, noting that while crypto use by criminals is growing, it remains 'still quite basic' and cash dominates dirty money transactions in Ireland.

The exploiter behind the Coldcard wallet hack has moved 45% of their stolen Bitcoin through THORChain and CoinJoin. Galaxy Research reports that 18% of total stolen funds across all waves have been moved, while 82% remain in attacker-controlled addresses.

A FinCEN analysis identified $12.7 billion in cryptocurrency transactions tied to overseas scam centers, based on over 33,000 reports from September 2023 to December 2025. The scams included pig butchering, romance schemes, and fake crypto investment offers. Officials noted the operations are largely run by transnational criminal groups in Southeast Asia, with Myanmar and Cambodia pursuing legislation to criminalize such centers.

The United States and United Kingdom have formed a joint law enforcement alliance targeting scam centers involved in crypto and cyber-enabled investment fraud. The agreement, signed by the US Attorney’s Office for the District of Columbia, the Crown Prosecution Service of England and Wales, and the UK National Crime Agency, enables parallel investigations, information sharing, and coordinated prosecutions. It expands the Scam Center Strike Force launched in November 2025 and builds on prior international operations, including a Dubai-led raid that resulted in 276 arrests. The initiative responds to rising US losses from crypto investment fraud, which reached $8.65 billion in 2025.

The FBI seized Hamas-linked fundraising infrastructure and used it to intercept cryptocurrency donations intended for the group, building on earlier court-authorized seizures that recovered over $560,000 in digital assets. The operation involved working with Tether and Binance to redirect funds and leveraged seized domains and servers to trace and disrupt donations, turning a retrospective tracing effort into an active disruption operation.