Crypto Scammers Arrested After $240 Million Bitcoin Heist and Lavish Spending Spree
Law enforcement has arrested multiple individuals in connection with a sophisticated social engineering attack that resulted in the theft of over $240 million in Bitcoin, leading to a month-long spending spree on luxury assets.
Law enforcement has apprehended several individuals, including alleged ringleader Malone Lam, in connection with a massive cryptocurrency theft that netted over $240 million in Bitcoin. The sophisticated scheme involved a social engineering attack targeting a wealthy investor, followed by a complex money laundering operation. The arrests mark a significant success for authorities in combating high-value cryptocurrency-related cybercrime.
The heist, which occurred in August 2024, saw scammers manipulate a victim into granting access to their digital assets. The attackers, described as a network of young men, used a multi-stage social engineering tactic, impersonating representatives from Google and the Gemini crypto exchange to trick the victim into revealing security codes and granting access to their Google Drive. This allowed them to siphon off more than 4,100 Bitcoin.
Following the theft, the perpetrators embarked on an extravagant spending spree, purchasing luxury vehicles, private jets, and high-end properties. Reports indicate significant expenditures at nightclubs, with one alleged ringleader, Malone Lam, reportedly spending over $569,000 in a single evening in Los Angeles. This lavish display of wealth, however, quickly attracted the attention of law enforcement.
The investigation gained traction due to a critical mistake made by one of the alleged participants, Veer Chetal, who failed to conceal his IP address when creating an account on a cryptocurrency exchange to hold nearly $30 million in stolen crypto. Investigators were able to link this IP address to a rented property in Encino, California, providing a crucial lead.
Further complicating matters for the scammers, a separate incident saw masked men attempt to carjack the parents of another alleged participant, Jeandiel Serrano, in an attempt to extort their share of the stolen funds. This incident, however, led to the apprehension of the carjackers and provided law enforcement with additional evidence, including $37 million in stolen crypto found in Serrano's possession.
Cybersecurity experts, like Allison Nixon, have highlighted the growing threat posed by young hackers motivated by the immense profits available through crypto fraud. She advocates for increased law enforcement resources to combat this evolving form of cybercrime, warning that without swift action, such activities could proliferate.
The charges against Lam and the other 17 individuals underscore the increasing prevalence of cryptocurrency investment fraud. Complaints to the FBI regarding such scams saw a significant rise in 2025, even as regulatory oversight of the volatile industry has seen shifts in focus across different administrations.
Authorities are continuing their investigation, with Lam having entered into a plea agreement. The case serves as a stark reminder of the risks associated with cryptocurrency investments and the lengths to which cybercriminals will go to exploit vulnerabilities and enjoy the proceeds of their illicit activities.
Malone Lam, a key figure in the $245 million cryptocurrency heist, has pleaded guilty to RICO charges. Lam, also known by aliases "Anne Hathaway" and "$$$", was indicted in September 2024 for his role in orchestrating social engineering scams to steal digital assets. His plea marks a significant development in the Justice Department's takedown of the "Social Engineering Enterprise" group, which involved at least nine other individuals who have also pleaded guilty.
The new article identifies the alleged mastermind behind the cryptocurrency theft as Malone Lam, a Singaporean citizen who pleaded guilty in a Washington D.C. federal court. Lam, using aliases such as "Anne Hathaway" and "King Greavy," is accused of orchestrating the operation, selecting targets, and directing other participants. The scheme, which ran from at least October 2023 to May 2025, reportedly began through connections made on online gaming platforms and involved individuals across multiple U.S. states and abroad.