Author
Ahmed Barakat
Author
Share
Fact Checked by
CryptoNews Editorial Team
Author
Malone Lam, a 22-year-old Singaporean and recent Miami resident, pleaded guilty in a Washington, D.C. federal court to one count of participating in a RICO conspiracy tied to the theft and laundering of more than $245 million in Bitcoin and cryptocurrency. He faces a maximum sentence of 20 years, according to court proceedings before U.S. District Judge Colleen Kollar-Kotelly.
The case centers on an August 2024 theft of more than 4,100 Bitcoin from a Washington-area victim, executed not through a protocol exploit but through impersonation and credential theft.
According to prosecutors, two alleged co-conspirators posed as representatives of Google and the Gemini cryptocurrency exchange to manipulate the victim into granting access to his Google Drive and revealing security codes. That access allegedly let Lam siphon off the Bitcoin holdings in one move.
No wallet was cracked; no private key was brute-forced. The attackers simply talked their way past the human layer that sits in front of every custody setup.
Lam is one of 18 defendants charged in the case and the 11th to plead guilty. Prosecutors describe him as an organizer for a network of young men who ran a string of cryptocurrency scams starting in 2023.
Trade Crypto on Bybit and Get a Chance to Win Our $1,000 USDT Airdrop
From Bitcoin Laundering to a Month-Long Spending Spree
Authorities say Lam helped launder and convert the stolen cryptocurrency into cash, which then funded a fleet of more than 30 cars, including custom Porsches, Lamborghinis, and Ferraris, a $2 million watch, and rented mansions in Miami. Nightclub spending alone reportedly hit $569,000 in a single evening at one Los Angeles club.
The run lasted a month before FBI agents arrested Lam in Miami. Per the indictment, an off-duty law enforcement officer had tipped him off that agents were en route, though the arrest went ahead regardless. In a recorded jailhouse call cited in the indictment, Lam told associates the outcome had exceeded even their own worst-case scenarios for what getting caught might look like.
The mismatch between the crime’s technical simplicity and its financial scale is the real story here. Social engineering doesn’t require exploiting Bitcoin’s underlying protocol. It requires exploiting the people and institutions standing between a holder and their keys. Google Drive access and a leaked security code did more damage here than any blockchain-level attack could.
Discover: The Best Token Presales
What Comes Next
Judge Kollar-Kotelly had not immediately scheduled Lam’s sentencing hearing at the time of the plea. He faces up to 20 years in prison on the single racketeering-conspiracy count, with the remaining defendants in the 18-person case still working through their own proceedings.
For traders and holders, the takeaway isn’t abstract: large balances sitting behind cloud-linked recovery methods, reused security codes, or support channels vulnerable to impersonation remain the softest target in the ecosystem.
Recovery of stolen funds, when it happens at all, typically comes through law enforcement asset forfeiture rather than any on-chain remedy, a process illustrated by past cases involving long-delayed Bitcoin recovery efforts tied to historic exchange failures.
The Lam case is a reminder that the weakest link in crypto security is rarely the cryptography.
Earn $50 and Enter $300K Prize Draw on EdgeX
