The FBI has arrested Malone Lam, alleged leader of a gang that pulled off one of the largest cryptocurrency thefts in U.S. history, stealing over $245 million in bitcoin through sophisticated social engineering. According to the Justice Department, the 22-year-old Singaporean pleaded guilty on September 8, 2025 to participating in a Racketeer Influenced and Corrupt Organizations conspiracy, making him the 11th defendant to plead guilty in the sprawling case. The scammers, a network of young men in their late teens or early 20s, duped a wealthy crypto investor by impersonating Google and Gemini representatives to gain access to his Google Drive and security codes. The case centers on an August 18, 2024 attack against a Washington resident identified as a Genesis creditor, with prosecutors revealing that Lam and his associates had previously conducted similar multimillion-dollar thefts since October 2023 through at least May 2025. As reported by Crypto.news, the Bitcoin stolen was worth more than $230 million at the time of the theft. The attackers simply talked their way past the human layer that sits in front of every custody setup, with no wallet cracked and no private key brute-forced.
Following the August 2024 heist, the scammers embarked on an extravagant spending spree that drew significant attention. According to the Justice Department, members spent stolen funds on rental mansions, private jets, security guards, watches, designer clothing and at least 28 exotic vehicles valued between $100,000 and $3.8 million each. The group allegedly spent $500,000 per evening at nightclubs, with nightclub spending alone reportedly hitting $569,000 in a single evening at one Los Angeles club. The FBI discovered $37 million in stolen crypto at Chetal's apartment during a September 2024 search, leading to his cooperation with the investigation. The stolen cryptocurrency was subsequently moved through multiple exchange platforms as money launderers worked to convert parts of the proceeds into fiat currency. Chetal gifted a Lamborghini to his parents and hid $500,000 in cash in their laundry machine, while Lam purchased a $2 million watch and over 30 luxury cars including custom Porsches, Lamborghinis and Ferraris. In a recorded jailhouse call cited in the indictment, Lam told associates the outcome had exceeded even their own worst-case scenarios for what getting caught might look like.
The investigation revealed critical mistakes that led to the gang's downfall. According to the Justice Department, Serrano created an account on a cryptocurrency exchange to hold nearly $30 million in stolen assets but failed to conceal his internet protocol address, which investigators traced to a home in Encino, California that he was renting for $47,500 per month. Serrano was vacationing in the Maldives when authorities identified him as a suspect, while Lam was arrested at his Miami mansion after an off-duty law enforcement officer tipped him off. The FBI searched Chetal's apartment on September 9, 2024, finding the stolen cryptocurrency, leading to his cooperation with investigators. A private recording captured the suspects reacting after gaining control of the Bitcoin, with one voice saying, "Oh, my God! Bro, bro, I'm going to spaz out!" The case highlights the growing trend of cryptocurrency fraud, with FBI complaints of crypto investment fraud rising by nearly 50% in 2025.
Eighteen defendants have been charged in connection with the heist, with Lam expected to be the 11th to plead guilty. As reported by the Justice Department, U.S. District Judge Colleen Kollar-Kotelly scheduled a December 8, 2026 status hearing without announcing Lam's sentencing date yet. Lam faces a maximum sentence of 20 years on the single racketeering-conspiracy count, with the remaining defendants in the 18-person case still working through their own proceedings. His plea agreement may address cooperation, restitution and forfeiture, though the Justice Department did not publish those details in its announcement. Chetal pleaded guilty to conspiracy charges in November 2024 and awaits sentencing, while Serrano's charges remain pending. The investigation reveals how these young scammers, who met in online gaming forums, had been conducting similar multimillion-dollar thefts since late 2023 using sophisticated social engineering techniques. The case shows how attackers combine digital deception with physical threats, with home invasions accounting for 37% of documented physical crypto attacks through mid-2026.
