Cyber Awareness
22-Year-Old Ringleader Pleads Guilty in $245 Million Crypto Theft, Spent Over $500,000 in One Night
A 22-year-old man identified by prosecutors as the ringleader of an international cybercrime network has pleaded guilty to charges tied to the theft and laundering of more than $245 million in cryptocurrency, one of the largest such thefts in US history. Malone Lam, a citizen of Singapore and a recent Miami resident, entered his plea on September 8, 2026, admitting to one count of participating in a RICO conspiracy. He was arrested in Miami in September 2025, and a status hearing in his case has been set for December 8. According to prosecutors, the scheme involved social engineering tactics to gain access to victims' cryptocurrency holdings. One of the largest thefts took place on August 18, 2024, when a cryptocurrency investor in Washington, DC, received calls from individuals posing as representatives of Google and the Gemini exchange. The scammers convinced the victim to share access to his Google Drive and disclose security codes, which allowed Lam and associates Veer Chetal and Jeandiel Serrano to steal more than 4,100 bitcoin. The stolen funds were then moved through money launderers and several cryptocurrency exchanges. Investigators caught a break when Serrano allegedly failed to hide his IP address while setting up an exchange account holding nearly $30 million in stolen funds. That misstep led authorities to a rented house in Encino, California, where he was paying $47,500 a month. Following the theft, the group spent extravagantly. Authorities said Lam and his associates spent about $4 million at Los Angeles nightclubs within a single month, with Lam alone spending more than $569,000 during one night out. He is also accused of buying a $2 million watch and more than 30 luxury vehicles, including Porsches, Lamborghinis and Ferraris. Chetal reportedly gifted his parents a Lamborghini and stashed $500,000 in cash inside their washing machine. The newfound wealth also drew the attention of other criminals. About a week after the theft, masked assailants kidnapped Chetal's parents in Connecticut in an apparent attempt to extort his share of the stolen funds. Witnesses alerted police, who arrested the attackers. On September 9, 2024, the FBI searched Chetal's apartment in New Jersey and recovered $37 million in stolen cryptocurrency; Chetal subsequently agreed to cooperate with investigators. Serrano was arrested at Los Angeles International Airport on September 18, 2024, while wearing a $500,000 watch, and later admitted to possessing roughly $20 million of the stolen funds. In total, 18 defendants have been charged in the case. Lam became the 11th to plead guilty. Chetal pleaded guilty to conspiracy charges in November 2024 and is awaiting sentencing, while Serrano's case remains pending. Several co-defendants have already been sentenced, including two money launderers who each received approximately six years in prison. The case has drawn attention to the rising threat of cryptocurrency-related cybercrime and increasingly sophisticated social-engineering schemes targeting wealthy investors. Cybersecurity researcher Allison Nixon has called for greater law enforcement resources to identify and dismantle such criminal networks, warning that delays in enforcement could allow similar crypto thefts to continue.