Malone Lam, a 22-year-old Singaporean, pleaded guilty on September 8 in Washington, D.C. federal court to orchestrating one of the largest cryptocurrency thefts in U.S. history, admitting to stealing over $245 million in Bitcoin through a sophisticated social engineering scheme.
Lam admitted to leading a racketeering conspiracy involving 18 defendants, 11 of whom have now pleaded guilty. The case marks the first Bitcoin-related prosecution under the Racketeer Influenced and Corrupt Organizations (RICO) Act, a federal law traditionally used against organized crime syndicates.
Wearing a light olive prison jumpsuit, Lam spoke several times during the nearly two-and-a-half-hour hearing, largely confirming the prosecution’s account of the crimes. When the judge asked how he pleaded, he let out a long sigh before replying: “I plead guilty, Your Honour.” He disclosed that he was seeing a therapist regularly and taking medication for depression, anxiety, and sleep issues.
How the Scheme Worked
Lam organized social engineering attacks targeting people with large cryptocurrency holdings. He and his co-conspirators impersonated employees of trusted companies, including Google, to persuade victims to disclose personal information such as passwords, seed phrases, and authentication codes.
One of the largest thefts occurred in August 2024, when Lam and his associates obtained more than 4,100 Bitcoin from a single victim in Washington, D.C. The cryptocurrency was valued at approximately $230 million at the time. Lam was arrested in September 2024, weeks after the theft.
To conceal their digital footprint, the group attempted to launder the stolen cryptocurrency and convert it into payment cards or cash. However, their lavish spending quickly attracted law enforcement attention.
A Lifestyle of Excess
Prosecutors detailed how Lam and his associates spent millions of dollars on luxury goods and experiences. Lam purchased a fleet of exotic cars valued between $100,000 and $3.8 million, and acquired luxury watches ranging from $100,000 to over $500,000.
Beyond vehicles and accessories, Lam rented high-end properties in Miami, Los Angeles, and the Hamptons, hired private security teams, and chartered private jets. Most notably, he spent $569,000 on a single night out at a Los Angeles nightclub, according to U.S. prosecutors. This extravagant spending pattern became the evidence trail that exposed the entire operation.
Lam faces a maximum prison sentence of 20 years and has been ordered to repay more than $245 million in restitution to victims. He is scheduled to return to court on December 8 for a status hearing, when the judge is expected to set a sentencing date.
The case represents a significant development in how federal prosecutors approach cryptocurrency crimes. Social engineering attacks have become increasingly prevalent in the crypto space, with attackers exploiting human trust rather than technical vulnerabilities to gain access to digital wallets. The RICO prosecution signals the government’s intent to treat organized cryptocurrency theft as a serious organized crime matter, applying the same legal framework historically used against mob syndicates.
Sources
- Channel News Asia — Lam’s guilty plea, charges, RICO prosecution details, social engineering method, luxury spending breakdown, and restitution order
- Associated Press — Confirmation of guilty plea and case overview
- U.S. Attorney’s Office for the District of Columbia — Official charging information and RICO conspiracy details
