Bitcoin Thief Pleaded Guilty: The $245M Social Engineering

Malone Lam, a 22-year-old Singaporean and recent Miami resident, pleaded guilty in a Washington, D.C. federal court to one count of participating in a RICO conspiracy tied to the theft and laundering of more than $245 million in Bitcoin and cryptocurrency. He faces a maximum sentence of 20 years, according to court proceedings before U.S. District Judge Colleen Kollar-Kotelly.

The case centers on an August 2024 theft of more than 4,100 Bitcoin from a Washington-area victim, executed not through a protocol exploit but through impersonation and credential theft.

Malone Lam, 22, a citizen of Singapore and recent resident of Miami, pleaded guilty today in connection with his role as ringleader of an international cybercrime conspiracy that used social engineering to steal and launder cryptocurrency valued at more than $245 million,… pic.twitter.com/R8Nnz9a7n6

According to prosecutors, two alleged co-conspirators posed as representatives of Google and the Gemini cryptocurrency exchange to manipulate the victim into granting access to his Google Drive and revealing security codes. That access allegedly let Lam siphon off the Bitcoin holdings in one move.

No wallet was cracked; no private key was brute-forced. The attackers simply talked their way past the human layer that sits in front of every custody setup.

Lam is one of 18 defendants charged in the case and the 11th to plead guilty. Prosecutors describe him as an organizer for a network of young men who ran a string of cryptocurrency scams starting in 2023.

Authorities say Lam helped launder and convert the stolen cryptocurrency into cash, which then funded a fleet of more than 30 cars, including custom Porsches, Lamborghinis, and Ferraris, a $2 million watch, and rented mansions in Miami. Nightclub spending alone reportedly hit $569,000 in a single evening at one Los Angeles club.

BREAKING: Malone Lam is expected to plead guilty today in connection with one of the largest crypto thefts in U.S. history.

Prosecutors say Lam and his associates impersonated Google and Gemini representatives to socially engineer a victim and steal more than 4,100 BTC, later… pic.twitter.com/sno0sEe9xs

The run lasted a month before FBI agents arrested Lam in Miami. Per the indictment, an off-duty law enforcement officer had tipped him off that agents were en route, though the arrest went ahead regardless. In a recorded jailhouse call cited in the indictment, Lam told associates the outcome had exceeded even their own worst-case scenarios for what getting caught might look like.

The mismatch between the crime’s technical simplicity and its financial scale is the real story here. Social engineering doesn’t require exploiting Bitcoin’s underlying protocol. It requires exploiting the people and institutions standing between a holder and their keys. Google Drive access and a leaked security code did more damage here than any blockchain-level attack could.

Discover: The Best Token Presales

Judge Kollar-Kotelly had not immediately scheduled Lam’s sentencing hearing at the time of the plea. He faces up to 20 years in prison on the single racketeering-conspiracy count, with the remaining defendants in the 18-person case still working through their own proceedings.

For traders and holders, the takeaway isn’t abstract: large balances sitting behind cloud-linked recovery methods, reused security codes, or support channels vulnerable to impersonation remain the softest target in the ecosystem.

Recovery of stolen funds, when it happens at all, typically comes through law enforcement asset forfeiture rather than any on-chain remedy, a process illustrated by past cases involving long-delayed Bitcoin recovery efforts tied to historic exchange failures.

The Lam case is a reminder that the weakest link in crypto security is rarely the cryptography.

The post Bitcoin Thief Pleaded Guilty: The $245M Social Engineering appeared first on Cryptonews.