Malone Lam Pleads Guilty in $245M Bitcoin (BTC) Theft and Laundering Ring

Singaporean Ringleader Admits RICO Conspiracy

Malone Lam, a 22-year-old Singaporean national, pleaded guilty in federal court in Washington, DC to conspiring to violate the RICO Act, admitting he led a network that stole and laundered more than $245 million in cryptocurrency. The plea, entered on September 8, makes Lam the acknowledged head of an operation federal prosecutors say combined online impersonation with physical break-ins to drain victims' wallets. The US Attorney's Office for the District of Columbia, in its own announcement of the plea, describes Lam as the organizer who selected targets and assigned roles to participants spread across California, Connecticut, New York, Florida and overseas, coordinating under aliases including Anne Hathaway, $$$ and Kim Gravey. The ring's relationships were first formed on online gaming platforms, then hardened into a division of labor among hackers, burglars and money launderers operating from at least October 2023 through May 2025. Prosecutors say proceeds bankrolled an extravagant lifestyle: nightclub bills of up to $500,000 in a single night, watches priced above $500,000, private jet travel and sports cars costing as much as $3.8 million. Lam, arrested at a rented residence in Miami, returns to court on December 8 — a hearing that is not yet a sentencing proceeding, with the timing of his punishment still undecided.

4,100 BTC Taken via Fake Google Support

The case became public through a single, extraordinary theft. On August 18, 2024, conspirators posing as support staff for Google and Gemini persuaded a Washington, DC victim to reveal information stored on Google Drive and to open a file containing his private keys — the credentials that control Bitcoin (BTC) holdings regardless of address format, including a Segregated Witness address. More than 4,100 BTC, worth over $230 million at the time, were drained and divided among the attackers. Court filings show the group treated deception as only one tool: when account compromise failed, members resorted to home invasions. Co-conspirator Marlon Ferro, who admitted his role, was sentenced to 78 months in prison for stealing a hardware wallet containing roughly 100 BTC from a Texas residence, and in a separate search shattered a window at a New Mexico home with a brick. The scale of such operations shows up in federal data: the FBI's most recent annual cybercrime report recorded 181,565 complaints involving cryptocurrency losses in 2025, with reported losses exceeding $11 billion, and investment fraud accounting for nearly half of all reported cyber-fraud losses. Notably, none of these cases required breaking Bitcoin's consensus mechanism or exploiting a smart contract — every loss began with a deceived person, not a protocol failure.

Virginia Man Listed $0.34 in Bankruptcy

In a separate case decided the same day, a federal jury in Alexandria, Virginia convicted Jihoon Park, 52, of Chantilly on three wire fraud counts and two bankruptcy fraud counts. Prosecutors say he diverted more than $2.5 million from multiple investors into his own accounts and spent the money on real estate and cryptocurrency. The Justice Department's conviction announcement states Park won victims' trust through personal relationships and his former post at a large national financial institution, promising safe investments and high returns before using the funds on himself. After one victim sued, Park transferred assets to his wife and concealed millions of dollars in cryptocurrency before filing for bankruptcy protection — a filing that listed just $0.34 in financial assets and denied any crypto ownership, according to prosecutors. A bankruptcy court opinion from August 2025 recorded an uncontested $300,000 check from an investor in August 2024, and a roughly $1.2 million Chantilly home bought the following month with a $700,000 down payment that included investor funds. Chief Bankruptcy Judge Brian F. Kenney upheld the trustee's clawback power, and Park waived his discharge. Each wire fraud count carries a statutory maximum of 20 years; sentencing is scheduled for December 10. The verdict echoes other prosecutions, including one fund whose advertised automated trading system — pitched much like an AI Trading Bot — turned out not to exist. Readers tracking the market in real time can follow live spot and futures prices on Gate.

Specialized Crypto Crime Meets Federal Response

Read together, the two rulings show US prosecutors dismantling crypto crime as organized enterprise rather than lone-wolf hacking — and neither case turned on cryptography. Privacy tooling such as Zcash (ZEC) played no role; the losses flowed from impersonated support agents, cloud-stored key files and hidden bankruptcy schedules. The Justice Department's criminal division, announcing the Park verdict, put the conduct plainly: funds entrusted by investors were stolen and spent on the defendant himself. For COINOTAG's desk, the pattern is clear — as theft and laundering networks professionalize, enforcement is following that structure, and disclosure failures in bankruptcy court are proving as incriminating as the thefts themselves.