Crypto Gang Stole $245M Through Deception and Brazen Home Break-Ins

Malone Lam Admits Leading the Crypto Theft Enterprise

Malone Lam, a 22-year-old Singaporean citizen and recent Miami resident, pleaded guilty Sept. 8 in U.S. District Court in Washington to participating in a Racketeer Influenced and Corrupt Organizations Act, or RICO, conspiracy. The Justice Department identified Lam as the ringleader of an international enterprise that stole and laundered cryptocurrency valued at more than $245 million.

Federal prosecutors described Lam as the organizer who selected targets and assigned roles across the sprawling operation. Using the aliases “Anne Hathaway,” “$$$,” and “King Greavy,” he coordinated participants based in California, Connecticut, New York, Florida, and other countries.

“If you build a cybercrime empire, we will find you, dismantle your operation, and hold you accountable,” U.S. Attorney Jeanine Ferris Pirro stated, adding:

“This defendant led an international network that preyed on victims through deception, invaded their privacy, and stole hundreds of millions of dollars in cryptocurrency.”

“Working with our partners at the FBI and IRS-CI, we will continue to hunt down the criminals who weaponize technology to steal from innocent people,” Pirro continued.

The federal case first emerged publicly in September 2024, when prosecutors accused Lam and Jeandiel Serrano of conspiring to steal and launder more than $230 million from one Washington victim. The original charges centered on more than 4,100 bitcoin, which the conspirators allegedly obtained during an Aug. 18, 2024, social-engineering attack.

Online Impersonation Escalated Into Residential Burglary

The conspirators did not rely solely on code or compromised accounts to reach their targets’ assets. During the Washington theft, participants allegedly impersonated Google and Gemini personnel, persuaded the victim to reveal information stored in Google Drive, and manipulated the individual into opening files containing private keys. Court filings detailed how the attackers divided the stolen bitcoin after gaining access.

Physical burglary became the enterprise’s fallback when deception and account intrusions failed to deliver access to victims’ cryptocurrency. Marlon Ferro, another member of the network, received 78 months in prison after admitting his role. His crimes included stealing a hardware wallet containing about 100 bitcoin from a Texas residence and smashing a New Mexico home’s window with a brick during another search.

Social engineering targets human behavior rather than a technical weakness, often by impersonating a trusted company representative. Common crypto fraud defenses include keeping private keys and recovery phrases offline, rejecting unsolicited requests for wallet information, and limiting public disclosure of significant cryptocurrency holdings that could attract digital or physical attacks.

Stolen Crypto Financed an Extravagant Spending Spree

The Lam enterprise operated from no later than October 2023 through at least May 2025 after developing through relationships formed on online gaming platforms. It divided its work among hackers, burglars, and money launderers. That structure resembles the broader professionalization of cryptocurrency fraud, with impersonation scams growing more than 1,400% in 2025 as specialized infrastructure and laundering networks enabled increasingly organized operations.

Cryptocurrency complaints carried the highest reported losses in the FBI’s latest annual internet crime report. Americans submitted 181,565 complaints involving cryptocurrency losses exceeding $11 billion during 2025, while investment fraud accounted for nearly half of all reported cyber-enabled scam losses.

Members converted stolen cryptocurrency into a highly visible lifestyle filled with luxury goods and expensive entertainment. Prosecutors listed nightclub services costing up to $500,000 per evening, watches valued up to more than $500,000, private jets, rental homes, security guards, and exotic cars valued as high as $3.8 million. Lam was arrested at his Miami rental home on Sept. 18, 2024, and his next status hearing is scheduled for Dec. 8.