Malone Lam: $250M Crypto Scam Guilty Plea in US RICO Case

• Malone Lam, 22, pleaded guilty to RICO conspiracy for leading a cryptocurrency social engineering fraud that stole over $250 million.
• Operating under aliases like "Anne Hathaway," Lam and co-conspirators posed as tech employees to gain access to victims' digital funds.
• The scheme funded a lavish lifestyle, including over $500,000 per night at Miami nightclubs and the acquisition of exotic cars.
• Lam faces a maximum of 20 years in prison and potential deportation, with his plea deal including the forfeiture of luxury vehicles for victim restitution.
• The criminal enterprise also attempted physical theft, breaking into a victim's home after hacking their iCloud, though they failed to acquire the crypto.

The illicit proceeds fueled a lavish lifestyle, featuring expenditures exceeding $500,000 per night at Miami nightclubs, rentals of opulent mansions in Los Angeles, Miami, and the Hamptons, and the acquisition of numerous exotic vehicles.

Malone Lam, a 22-year-old Singaporean national, has entered a guilty plea to one count of Racketeer Influenced and Corrupt Organization (RICO) conspiracy, acknowledging his central role in a sophisticated scheme that defrauded Americans of over $250 million in cryptocurrency. Operating under various online monikers, including the notable alias "Anne Hathaway," Lam orchestrated a complex cryptocurrency social engineering fraud that involved conspirators impersonating tech support personnel to gain unauthorized access to victims' digital assets. The illicit proceeds fueled a lavish lifestyle, featuring expenditures exceeding $500,000 per night at Miami nightclubs, rentals of opulent mansions in Los Angeles, Miami, and the Hamptons, and the acquisition of numerous exotic vehicles.

The elaborate fraud typically involved conspirators convincing victims that their cryptocurrency accounts had been compromised, then offering fraudulent technical assistance to gain control of their funds. Prosecutor Christopher Howland, from the U.S. Attorney’s Office for the District of Columbia, detailed how Lam met co-conspirator Jeandiel Serrano online via the game Minecraft while still residing in Singapore. Lam subsequently persuaded Serrano to relocate to Texas in October 2023, where they, alongside several other individuals, devised the "social engineering enterprise." This operation aimed to trick cryptocurrency holders into divulging sensitive information over the phone, thereby enabling the transfer and subsequent laundering of substantial cryptocurrency amounts into fiat currency via wire transfers.

Among the significant thefts outlined by prosecutors was an incident in August 2024, where Lam helped identify a victim, R.W., who possessed approximately $245 million in Bitcoin. Conspirators contacted R.W. posing as Google employees, sending a deceptive notification about an attempted access to his Google OneDrive and offering technical support. Serrano, specifically impersonating a representative from Google’s Gemini cryptocurrency exchange, persuaded R.W. to provide digital keys, granting access to his cryptocurrency wallets. Serrano then systematically transferred the Bitcoin in tranches, ultimately siphoning $245,930,239 worth of the digital currency, partly by using AnyDesk to remotely access R.W.'s desktop. Other victims included M.C., from whom approximately $800,000 in cryptocurrency was stolen in June 2024, and S.P., who lost about $14 million in a similar scheme during the same month.

The criminal enterprise also attempted a physical theft in June 2024, targeting victim K.W., whom Lam had identified. Co-conspirators successfully hacked into K.W.’s iCloud account, discovering a significant cryptocurrency holding and tracking the victim's location. Using this information, they accessed the home’s security camera system. Co-conspirator Marlon Ferro then traveled to K.W.'s New Mexico residence, broke in, and stole devices. However, despite the breach, the conspirators were ultimately unsuccessful in acquiring K.W.’s cryptocurrency from the stolen devices.

Malone Lam's guilty plea to RICO conspiracy, specifically under 18 U.S. Code Section 1962(d), carries severe penalties. He faces a maximum sentence of 20 years in prison for his involvement in the cryptocurrency social engineering fraud. Beyond incarceration, Lam also faces the possibility of deportation back to Singapore or another country of his choosing following the completion of his sentence. The case has been presided over by Senior U.S. District Judge Colleen Kollar-Kotelly, a Bill Clinton appointee, who has overseen proceedings for Lam and at least eight other defendants implicated in the extensive cryptocurrency theft operation.

This case highlights the evolving and increasingly sophisticated methods employed by criminal enterprises to exploit the cryptocurrency ecosystem. The blend of digital social engineering tactics, such as impersonating tech support and creating fraudulent notifications, with even physical theft attempts, demonstrates the aggressive and multifaceted approach taken by perpetrators. The international scope of the conspiracy, originating with an online meeting in Minecraft between Lam in Singapore and Serrano, who later moved to Texas, further illustrates the borderless nature of modern financial crime.

The prosecution's successful application of RICO conspiracy charges against Malone Lam underscores the severe legal consequences awaiting those who engage in large-scale cryptocurrency fraud. The aggressive pursuit of asset forfeiture, as seen with Lam's agreement to surrender his luxury vehicles, signals a robust effort by authorities to recover stolen funds and deter future criminal activity. This outcome serves as a critical reminder of the vulnerabilities within the digital asset space and the significant legal and financial risks associated with such illicit operations.

This case underscores the severe legal consequences, including RICO charges, for sophisticated cryptocurrency fraud and highlights the evolving methods, such as social engineering and physical theft, used by perpetrators. Legal and compliance professionals should advise clients on robust security measures and be aware of the aggressive prosecution and asset forfeiture efforts in such high-value crypto theft cases.

Source: Original reporting via Associated Press