Highlights
- Malone Lam, the alleged 22-year-old ringleader of a scheme that stole $263 million in Bitcoin, is scheduled to plead guilty this week.
- The Department of Justice has built the case as the first Bitcoin-related prosecution ever brought under the federal RICO statute.
- Eighteen defendants have been charged in total; Lam becomes the eleventh to enter a guilty plea.
- The 4,100-plus Bitcoin stolen in August 2024, worth $263 million at the time, is worth more than $384.5 million today.
A Ringleader's Guilty Plea
Malone Lam, a 22-year-old Singaporean described by prosecutors as the ringleader of a crypto-theft ring, is set to plead guilty this week to charges tied to one of the largest single-victim cryptocurrency thefts on record. On August 18, 2024, Lam and a group of accomplices used social engineering to trick a longtime Bitcoin investor in Washington, D.C. into handing over access to his holdings, making off with more than 4,100 Bitcoin worth $263 million at the time. Lam's plea makes him the eleventh of eighteen charged defendants to admit guilt in a case prosecutors describe as the first-ever Bitcoin theft prosecuted under the federal Racketeer Influenced and Corrupt Organizations Act, a statute more commonly associated with organized crime syndicates than crypto scammers who allegedly met one another through online gaming communities before turning their social engineering skills into a criminal enterprise.
How the Scheme Worked, and Where the Money Went
According to case records, Lam's group posed as representatives of Google and the Gemini exchange to convince the victim his accounts had been compromised, walking him through steps that ultimately handed over his Google Drive contents and account security codes. Prosecutors say the group, whose members were mostly 18-to-20-year-olds from California, Connecticut, New York and Florida, had carried out similar thefts since late 2023 before the August 2024 heist.
Related: US Charges 17 Iranian Hackers Over $6M Bitcoin Extortion, University Data Theft
Separately, the IRS detailed how co-defendant Kunal Mehta, an Irvine, California man who went by the aliases “Papa,” “The Accountant” and “Shrek,” laundered at least $25 million of the stolen funds by creating shell companies, charging 10% conversion fees and titling a fleet of at least 28 exotic cars in straw signers' names. Lam's own spending from the stolen funds reportedly included a $2 million watch, more than 30 customized Porsches, Lamborghinis and Ferraris, and a single $569,000 night at a Los Angeles nightclub, spending patterns prosecutors cited as evidence of the scale of the theft.
Why a RICO Charge Against Bitcoin Thieves Matters
The decision to prosecute a cryptocurrency theft under RICO, rather than more conventional wire fraud or money laundering statutes alone, signals that federal prosecutors now view organized social-engineering rings targeting crypto holders as comparable in structure to traditional racketeering enterprises, complete with a hierarchy, recurring victims and a laundering apparatus built to convert stolen coins into untraceable luxury assets. The case also underscores a persistent weakness in crypto security that no amount of on-chain infrastructure can fully close: individual holders remain vulnerable to impersonation attacks that exploit trust in exchange support staff rather than any flaw in Bitcoin itself. That vulnerability has shown up elsewhere in recent enforcement activity, from a Justice Department case charging seventeen Iranian hackers over Bitcoin extortion and university data theft to a $2.8 billion underground banking ring dismantled by Shanghai police and a Georgia man deported from Fiji over an alleged $165 million crypto Ponzi scheme. Together, these cases point to a widening enforcement push against the human-engineering side of crypto crime, even as the underlying blockchain technology remains, in the DOJ's telling, incidental to how the fraud was actually carried out.
What Happens Next
Lam faces a minimum of 14 years in prison under federal sentencing guidelines once his plea is entered, joining at least three co-conspirators already sentenced to roughly six years each for their roles in laundering the proceeds, with another still awaiting sentencing. Prosecutors have not detailed how much of the original $263 million, or its appreciated value, has been recovered through asset forfeiture, leaving open the question of how much restitution the original victim will ultimately see. With seven more defendants yet to resolve their cases, the RICO prosecution is likely to keep generating plea agreements and sentencing hearings well into next year, each one adding detail to how the group's laundering network moved stolen Bitcoin through shell companies, car dealerships and private jet charters.
FAQ
Who is Malone Lam?
Malone Lam is a 22-year-old Singaporean prosecutors identify as the ringleader of a group that stole more than 4,100 Bitcoin, worth $263 million, from a Washington, D.C. victim in August 2024.
Why is this called the first Bitcoin RICO case?
The Department of Justice charged the scheme under the federal Racketeer Influenced and Corrupt Organizations Act, marking the first time a Bitcoin theft has been prosecuted using that statute.
How did the group steal the Bitcoin?
Members impersonated Google and Gemini exchange staff to convince the victim his accounts were compromised, tricking him into handing over Google Drive access and security codes that exposed his holdings.
How many people have been charged, and what happens to Lam now?
Eighteen defendants face charges, with Lam becoming the eleventh to plead guilty; he faces a minimum of 14 years in prison under federal sentencing guidelines.
