22-Year-Old Ringleader Pleads Guilty in $245 Million Crypto Racketeering Scheme

Malone Lam, a 22-year-old Singaporean national, has pleaded guilty to one count of participating in a Racketeer Influenced and Corrupt Organizations (RICO) conspiracy. The admission follows a massive international operation that stole and laundered more than $245 million in cryptocurrency.

According to court records, Lam led a sophisticated criminal enterprise that utilized a hybrid approach to theft. The group employed social engineering tactics, impersonating support staff from major firms such as Google and Gemini to deceive victims. These tactics included tricking users into resetting two-factor authentication (2FA) and utilizing screen-sharing software to expose private keys. Beyond digital fraud, the conspiracy extended to physical crimes, including home break-ins specifically targeting hardware wallets.

One notable incident occurred on August 18, 2024, when the group stole over 4,100 Bitcoin from a resident of Washington, D.C. The victim was identified by independent investigator ZachXBT as a creditor of the crypto lender Genesis. The scale of the operation grew as the legal case progressed; while the initial focus was on a single massive theft, a superseding indictment issued on May 15, 2025, added 12 additional defendants and increased the total alleged theft amount to over $263 million.

A Lifestyle of Excess

The stolen funds financed an extreme level of luxury for Lam and his associates. Evidence shows the proceeds were spent on private jets, rental properties, and luxury watches. Lam's fleet included at least 28 exotic cars, and the group's spending habits extended to nightlife, with some single-evening nightclub bills reaching $500,000.

The Evolution of Cybercrime

This case signals a dangerous shift in the landscape of cryptocurrency theft, where digital deception is paired with physical intrusion. By combining social engineering with home burglaries, the enterprise bypassed traditional security layers that many investors believed were foolproof.

Furthermore, the application of RICO charges demonstrates a strategic shift by the U.S. government. Rather than treating these thefts as isolated fraud cases, prosecutors are treating large-scale crypto thefts as organized criminal enterprises. This approach targets the entire infrastructure of the crime, including the sophisticated laundering pipelines that utilize mixers and pass-through wallets to obscure the trail of stolen assets.

Legal Timeline

The investigation gained momentum following the arrest of Lam and Jeandiel Serrano on September 18, 2024. With Lam's guilty plea, the case provides a blueprint for how federal authorities intend to dismantle international crypto-theft rings. Legal proceedings continue as the government seeks to recover the remaining assets and hold the remaining co-conspirators accountable.