Malone Lam Faces Plea Hearing Over $245M Bitcoin Theft
In brief
- Malone Lam, 22, faces plea hearing Tuesday in Washington federal court over $245M Bitcoin theft
- Social Engineering Enterprise: 18-person racketeering group used social engineering and remote access fraud
- Prosecutors say Lam organized the crew that stole from a single crypto investor through extortion
- Ten of 18 charged members have pleaded guilty; three already sentenced
The Theft Itself
A victim identified as Victim-7 was at home in Washington when callers claiming to be from Google and Gemini warned him his accounts were under attack. They talked him into installing remote desktop software and surrendering his security codes, then moved more than $245 million in Bitcoin out of his wallets. The theft was neither random nor small. It targeted a single investor and drained him completely.
The indictment charges 18 people as a racketeering group it calls the Social Engineering Enterprise, with roles running the gamut: database hackers, callers, and money launderers. The crew grew out of friendships formed in online gaming and worked from stolen crypto databases to pick targets. When a victim kept coins on a hardware wallet, prosecutors say, members flew to the house and broke in.
Escalation to Violence
A week later, co-defendant Veer Chetal's parents were driving in Danbury, Connecticut, when a car rammed their Lamborghini and men pulled up in a van, beat the couple and tied them up in an extortion attempt. Eyewitnesses called police, and an off-duty FBI agent happened to be driving past during the attack. The violence wasn't incidental. It was a deliberate tactic to extract more money.
Money Laundering and Spending Spree
The money itself went into Monero through exchanges that ask for no identification, then through peel chains, according to prosecutors. Cash came back in bulk, some of it shipped across the country inside stuffed toys. Lam spent $4 million at Los Angeles nightclubs in a month and bought more than 30 cars, titling them to a shell company called Crypto Administration LLC. The spending was brazen and traceable.
Members relayed messages to and from Lam in a Miami jail and funded his defense with fraud proceeds. Group members were still attempting social engineering attacks from Dubai in early 2025, discussing them in coded language about playing tournaments, according to the indictment. The conspiracy didn't stop when arrests began. It adapted.
Guilty Pleas and Sentencing
Ten of the 18 have so far pleaded guilty. Judge Colleen Kollar-Kotelly, who rejected one lawyer's description of the group as mischievous young kids, has sentenced three of the defendants. Her words carried weight: "Being young only goes so far."
Tuesday's plea hearing will likely add another guilty plea to that tally. Lam's case, like the others, hinges on whether he cooperates with prosecutors and what sentence the judge imposes.
