Blab Crypto
Singaporean Man Pleads Guilty to $245 Million Bitcoin Theft in First U.S. RICO Crypto Case
Malone Lam, a 22‑year‑old Singaporean who left school after eighth grade, entered a guilty plea on Tuesday to a federal racketeering conspiracy that involved the theft of more than 4,100 Bitcoin—worth roughly $245 million at the time of the crime. Prosecutors say the case is the largest single‑victim Bitcoin theft in U.S. history and marks the first time the Department of Justice has applied the Racketeer Influenced and Corrupt Organizations Act (RICO) to a cryptocurrency crime.
Lam, who had recently relocated to Miami, is alleged to have organized a theft ring that began in 2023. In August 2024, he and two associates targeted a Washington, D.C. resident. The trio posed as representatives of Google and the Gemini crypto exchange, convincing the victim to grant them access to his Google Drive account. The drive contained the security codes that protected the victim’s Bitcoin wallet. Once Lam had the codes, he transferred 4,100 Bitcoin to accounts he controlled.
Court filings indicate that Lam converted the stolen Bitcoin into U.S. dollars and spent the proceeds on a lavish lifestyle. Reports show he purchased custom‑built Porsches, Lamborghinis, and Ferraris; rented mansions in Miami; bought a $2 million watch; and spent $569,000 in a single night at a Los Angeles nightclub. The FBI seized a number of the vehicles and other assets during the investigation.
Law enforcement traced the theft partly because one ring member failed to use a virtual private network (VPN) when setting up a cryptocurrency exchange account. The lack of VPN encryption left a digital trail that investigators followed, according to the U.S. Attorney’s Office for the District of Columbia. The FBI arrested Lam at a Miami rental home on September 18, 2024, roughly a month after the first round of spending began.
Lam entered a guilty plea on Tuesday in U.S. District Court in Washington, D.C. He faces a maximum sentence of 20 years in federal prison, plus potential civil forfeiture of the assets seized.
The case underscores the vulnerability of cryptocurrency holders to social‑engineering attacks. By impersonating trusted institutions, the perpetrators bypassed the technical security of the victim’s wallet. The use of a Google Drive account to store private keys is a known risk, and regulators have warned that users should keep such keys offline and in secure hardware wallets.
The DOJ’s decision to use RICO signals a willingness to apply traditional organized‑crime tools to the digital asset sector. In a statement, the U.S. Attorney’s Office said the prosecution demonstrated that cryptocurrency theft can be part of a larger, coordinated criminal enterprise that meets the statutory definition of racketeering.
Industry observers note that the seizure of luxury cars and other high‑value items illustrates the difficulty of tracking and recovering stolen crypto assets once they are converted to fiat. While blockchain analytics can trace the movement of Bitcoin, converting it to cash and spending it on physical goods creates a complex laundering chain that requires cooperation between law enforcement, financial institutions, and asset‑seizure units.
As of now, the court has not set a sentencing date for Lam. The case remains a landmark in U.S. crypto‑crime enforcement and may influence how prosecutors approach future large‑scale thefts. The DOJ has indicated it will continue to pursue similar cases, emphasizing that the legal framework is adaptable to the evolving nature of digital asset crimes.
Lam, who had recently relocated to Miami, is alleged to have organized a theft ring that began in 2023. In August 2024, he and two associates targeted a Washington, D.C. resident. The trio posed as representatives of Google and the Gemini crypto exchange, convincing the victim to grant them access to his Google Drive account. The drive contained the security codes that protected the victim’s Bitcoin wallet. Once Lam had the codes, he transferred 4,100 Bitcoin to accounts he controlled.
Court filings indicate that Lam converted the stolen Bitcoin into U.S. dollars and spent the proceeds on a lavish lifestyle. Reports show he purchased custom‑built Porsches, Lamborghinis, and Ferraris; rented mansions in Miami; bought a $2 million watch; and spent $569,000 in a single night at a Los Angeles nightclub. The FBI seized a number of the vehicles and other assets during the investigation.
Law enforcement traced the theft partly because one ring member failed to use a virtual private network (VPN) when setting up a cryptocurrency exchange account. The lack of VPN encryption left a digital trail that investigators followed, according to the U.S. Attorney’s Office for the District of Columbia. The FBI arrested Lam at a Miami rental home on September 18, 2024, roughly a month after the first round of spending began.
Lam entered a guilty plea on Tuesday in U.S. District Court in Washington, D.C. He faces a maximum sentence of 20 years in federal prison, plus potential civil forfeiture of the assets seized.
The case underscores the vulnerability of cryptocurrency holders to social‑engineering attacks. By impersonating trusted institutions, the perpetrators bypassed the technical security of the victim’s wallet. The use of a Google Drive account to store private keys is a known risk, and regulators have warned that users should keep such keys offline and in secure hardware wallets.
The DOJ’s decision to use RICO signals a willingness to apply traditional organized‑crime tools to the digital asset sector. In a statement, the U.S. Attorney’s Office said the prosecution demonstrated that cryptocurrency theft can be part of a larger, coordinated criminal enterprise that meets the statutory definition of racketeering.
Industry observers note that the seizure of luxury cars and other high‑value items illustrates the difficulty of tracking and recovering stolen crypto assets once they are converted to fiat. While blockchain analytics can trace the movement of Bitcoin, converting it to cash and spending it on physical goods creates a complex laundering chain that requires cooperation between law enforcement, financial institutions, and asset‑seizure units.
As of now, the court has not set a sentencing date for Lam. The case remains a landmark in U.S. crypto‑crime enforcement and may influence how prosecutors approach future large‑scale thefts. The DOJ has indicated it will continue to pursue similar cases, emphasizing that the legal framework is adaptable to the evolving nature of digital asset crimes.
