Malone Lam, the 22-year-old Singaporean accused of running the largest single-victim Bitcoin theft in US history, is scheduled to plead guilty in federal court in Washington on September 9, with sentencing guidelines recommending at least 14 years in prison. The hearing covers the August 2024 theft of more than 4,100 BTC, worth over $230 million at the time and cited at over $240 million in recent reporting, from a single investor in the District of Columbia.
According to court filings and reporting by Fox News, NBC News and Crypto Briefing, Lam and his co-conspirators posed as support staff from Google and the Gemini exchange. They called the victim, told him his accounts had been compromised, and used the manufactured urgency to obtain access to his Google Drive and account security codes. From there they reset recovery settings and drained the Bitcoin within hours of the first call, which came on August 18, 2024.
If the plea goes through as scheduled, Lam becomes the eleventh of eighteen defendants in the case to admit guilt. The case began as a two-defendant wire fraud and money laundering indictment unsealed in late September 2024, after Lam and close collaborator Jeandiel Serrano were arrested on September 18 that year. In May 2025 the Justice Department expanded it into a RICO conspiracy, the first time the statute, more commonly applied to organized crime networks, has been used against a Bitcoin theft operation. The expanded indictment covers roughly $263 million in total thefts across multiple victims and schemes.
A spending spree that helped unravel the case
The stolen coins moved through exchange accounts and mixing services, but the group’s lifestyle drew attention almost as fast as the on-chain trails did. Prosecutors documented more than 30 vehicles purchased by the group, a $47,500 monthly rental in Encino, California, and roughly $4 million a month in nightclub spending across the network. Lam alone spent $569,000 in a single night at one club. Investigators traced laundered funds through exchange accounts to the September 2024 arrests.
| Case metric | Figure |
|---|---|
| BTC stolen from the D.C. victim | 4,100+ |
| Value at time of theft (Aug 2024) | Over $230 million |
| Total network theft under RICO | About $263 million |
| Defendants charged | 18 |
| Guilty pleas before Lam | 10 |
| Lam’s guideline minimum | 14 years |
| Single-night nightclub spend (Lam) | $569,000 |
Co-defendant Veer Chetal, who handled laundering and cash, pleaded guilty in November 2024. Agents recovered about $500,000 in cash and $37 million in crypto tied to him. Another participant, Tucker Desmond, was sentenced to probation. Prosecutor William Hart described the defendants’ spending in court transcripts reviewed by Fortune as a lifestyle built entirely on a foundation of fraud, language that has supported the DOJ’s push for lengthy sentences even for defendants presenting as young first-time offenders. Most of the network’s members were in their late teens or early twenties.
What the case says about crypto security
The theft did not involve a smart contract bug, a bridge exploit or an exchange breach. It worked because a wealthy holder trusted a phone call. Security researchers have pointed to the case as evidence that human-layer social engineering now rivals technical exploits as the leading threat to large Bitcoin holders, and their recommendations are unglamorous: cold storage, multisig rather than a single hot account, and treating any unsolicited contact claiming account trouble as a red flag rather than a prompt to act quickly.
The timing also sits awkwardly against federal enforcement trends. The Justice Department disbanded its dedicated cryptocurrency crimes prosecution unit in 2025 as the administration moved toward a lighter regulatory touch on digital assets. This case, prosecuted under a statute designed for mob networks, shows what large-scale crypto theft cases look like when they do get resources.
Lam’s eventual sentencing will also give a first read on how judges weigh thefts denominated in bitcoin at current prices rather than at the time of the crime. The D.C. victim’s haul was worth just over $230 million in August 2024 and is cited above $240 million now, a gap that defense and prosecution will likely argue over. Sentencing has not been scheduled yet and typically follows months after a guilty plea, with a presentence investigation in between.
discussion