Malone Lam, a 22-year-old Singaporean citizen and former Miami resident, has pleaded guilty to his role in an international cybercrime conspiracy that prosecutors say stole and laundered more than $245 million in cryptocurrency.
Lam pleaded guilty Tuesday, September 8, in U.S. District Court for the District of Columbia to one count of participating in a RICO conspiracy. The case involves 18 defendants and centers on a network that allegedly used social engineering, online intrusions and, in some instances, home break-ins to target cryptocurrency holders.
Lam faces a maximum sentence of 20 years in prison. U.S. District Judge Colleen Kollar-Kotelly scheduled a status hearing for December 8, 2026.
The case stands out not only because of the size of the cryptocurrency theft, but also because of what prosecutors say happened afterward: stolen digital assets were rapidly converted into luxury cars, private jets, mansions, watches, nightclub spending and private security.
Who is Malone Lam?
Lam is a Singaporean citizen who most recently lived in Miami. Prosecutors identify him as a central organizer of the cybercrime enterprise, saying he selected targets, coordinated participants and helped organize the social engineering attacks.
He used several online aliases, including “Anne Hathaway,” “$$$” and “King Greavy.” According to prosecutors, members of the group developed relationships through online gaming platforms before building an international operation targeting people believed to hold substantial cryptocurrency assets.
Lam was one of 18 people charged in the broader case and is the 11th defendant to plead guilty, according to the Justice Department and Associated Press.
The operation began no later than October 2023 and continued through at least May 2025, according to court documents cited by prosecutors.
How did the $245 million Bitcoin theft happen?
The conspiracy relied heavily on social engineering, a form of cybercrime that exploits human trust rather than depending solely on technical hacking.
In August 2024, members of the group allegedly targeted a wealthy cryptocurrency investor in Washington, D.C. Two conspirators posed as representatives of Google and the Gemini cryptocurrency exchange.
They allegedly persuaded the victim to provide access to a Google Drive account and reveal security information.
That information gave the conspirators access to the victim’s cryptocurrency holdings. Prosecutors said they ultimately stole more than 4,100 bitcoin, which was worth more than $245 million at the time.
The incident demonstrates why cryptocurrency theft can be particularly damaging when criminals successfully obtain authentication information. A victim does not necessarily have to download malicious software or have an exchange account directly hacked for an attacker to gain access to digital assets.
Social engineering was the key
The alleged operation depended on convincing victims that the people contacting them were legitimate.
The broader conspiracy also allegedly involved physical break-ins intended to obtain information or access that could help conspirators reach cryptocurrency wallets.
That combination of digital deception and physical intrusion made the operation more difficult to characterise as a conventional online scam.
What did Lam and his associates do with the stolen crypto?
The alleged criminals did not quietly hide all of the proceeds.
Instead, prosecutors say the group quickly adopted an extravagant lifestyle, spending stolen cryptocurrency on luxury goods and experiences.
The Justice Department said the spending included:
- Nightclub services costing as much as $500,000 in a single evening
- Luxury handbags worth tens of thousands of dollars
- High-end watches costing between $100,000 and more than $500,000
- Luxury clothing
- Rental properties in Los Angeles, the Hamptons and Miami
- Private jet travel
- Private security
- Exotic cars priced from $100,000 to $3.8 million
The group’s spending became one of the most striking elements of the case.
According to the Associated Press, Lam alone was associated with a spending spree that included more than 30 luxury vehicles and an evening in which he spent hundreds of thousands of dollars at a Los Angeles nightclub.
How did the FBI catch Malone Lam?
The extravagant lifestyle allegedly created a trail that investigators could follow.
Lam was arrested at his Miami rental home on September 18, 2025, according to the Justice Department and AP reporting.
The investigation involved the U.S. Attorney’s Office for the District of Columbia, FBI and IRS Criminal Investigation, with assistance from federal offices in multiple states.
Investigators were also able to examine digital and financial evidence surrounding the cryptocurrency transactions and the group’s spending.
That combination is important in modern cryptocurrency investigations. Although digital assets can provide criminals with a degree of pseudonymity, transactions recorded on public blockchains can also create a permanent trail that investigators can analyze.
Why is the case being prosecuted under RICO?
Lam pleaded guilty to participating in a RICO conspiracy, rather than simply pleading guilty to a single cryptocurrency theft.
RICO, short for the Racketeer Influenced and Corrupt Organizations Act, is a federal law designed to prosecute people involved in organized criminal enterprises.
The government’s case portrays Lam not simply as someone who stole cryptocurrency from one victim, but as an organizer who allegedly helped build and coordinate a broader criminal network.
The Justice Department said the enterprise involved people across California, Connecticut, New York, Florida and other countries.
The case is particularly notable because it applies a statute traditionally associated with organized crime to a cryptocurrency-focused criminal enterprise.
CNA reported that the prosecution is believed to be the Justice Department’s first Bitcoin-related case built under RICO.
How much prison time could Malone Lam face?
Lam faces a maximum sentence of 20 years in prison for the RICO conspiracy charge to which he pleaded guilty.
However, the maximum penalty does not mean he will necessarily receive 20 years.
The eventual sentence will depend on the applicable federal sentencing rules, the terms of the plea agreement and the court’s assessment of the case.
As of September 11, 2026, Lam’s next major court date is a status hearing scheduled for December 8, 2026. A sentencing date has not been announced.
Why does the Malone Lam case matter for crypto security?
The case highlights a weakness that is sometimes overlooked in discussions about cryptocurrency security.
Blockchain technology can be highly secure at the protocol level, but the people controlling cryptocurrency accounts remain vulnerable to deception.
A criminal does not necessarily need to “break Bitcoin” to steal Bitcoin. In this case, prosecutors say the attackers manipulated people into surrendering the information needed to access a wallet.
That distinction matters as cryptocurrency ownership becomes more widespread.
The case also shows how quickly stolen digital assets can be converted into conventional luxury goods and services, creating a complicated money-laundering investigation involving cryptocurrency transactions, exchanges, physical purchases and financial records.
What happens next in the Malone Lam case?
Lam’s guilty plea resolves his criminal liability on the RICO conspiracy count, but the broader case is still moving through the federal courts.
Of the 18 people charged, Lam is the 11th defendant to plead guilty, according to AP reporting. Other defendants have already faced their own proceedings and sentences.
The next major development in Lam’s case is expected to come at the December 8 status hearing.
For prosecutors, the case represents a major test of how traditional federal organized-crime laws can be applied to modern cryptocurrency networks.
For cryptocurrency users, it offers a more practical lesson: some of the most damaging attacks do not begin with sophisticated code. They begin with a convincing phone call, a trusted name and a victim persuaded to reveal information that should have remained private.
TL;DR
- Malone Lam, 22, pleaded guilty to a federal RICO conspiracy charge on September 8, 2026.
- Prosecutors say the Singaporean national led an international cybercrime network that stole and laundered more than $245 million in cryptocurrency.
- The group allegedly used social engineering, impersonation and home break-ins to obtain information needed to access victims’ crypto wallets.
- In one major August 2024 attack, more than 4,100 bitcoin were allegedly stolen from a Washington, D.C., investor.
- Prosecutors say the stolen funds financed exotic cars, private jets, mansions, luxury watches and nightclub spending.
- Lam faces a maximum sentence of 20 years in prison.
- A status hearing is scheduled for December 8, 2026.