XRP $3.12 ▲ 4.8% BTC $114,820 ▲ 1.2% ETH $4,380 ▼ 0.6% RLUSD $1.00 ▲ 0.0% XLM $0.41 ▲ 3.1% Fear & Greed 68 · GreedXRP $3.12 ▲ 4.8% BTC $114,820 ▲ 1.2% ETH $4,380 ▼ 0.6% RLUSD $1.00 ▲ 0.0% XLM $0.41 ▲ 3.1% Fear & Greed 68 · Greed
Home / Regulation
● Regulation

Cybercrime Kingpin Malone Lam Admits Guilt in $245M Cryptocurrency Theft Ring

Singaporean national pleads guilty to leading international operation targeting crypto holders through social engineering and physical break-ins.

JM
by Jacob Marquez · Regulation Desk
Published September 9, 2026 · 3 min read

Guilty Plea in Major Crypto Theft Conspiracy

In a significant development in cryptocurrency-related crime, the US Justice Department announced that Singaporean national Malone Lam has pleaded guilty to orchestrating a racketeering conspiracy that authorities say resulted in the theft and laundering of more than $245 million in cryptocurrency assets. Lam entered his plea before US District Judge Colleen Kollar-Kotelly on a single count of participating in a Racketeer Influenced and Corrupt Organizations (RICO) conspiracy. According to the Justice Department, Lam served as the architect of the international criminal network, identifying targets and directing co-conspirators in their criminal activities. The operation spanned from October 2023 through at least May 2025, operating across multiple jurisdictions and leveraging online gaming platforms as a recruitment mechanism.

Social Engineering and Home Invasions: The Attack Strategy

The conspiracy employed sophisticated social engineering tactics combined with physical theft to compromise cryptocurrency holdings. In one prominent case from August 2024, Lam and co-conspirator Jeandiel Serrano targeted a Washington, DC resident who held substantial cryptocurrency. The attackers masqueraded as representatives of Google, gaining access to the victim’s accounts before impersonating support staff from cryptocurrency exchange Gemini. Through these deceptions, they tricked the victim into disabling security measures and using screen-sharing applications, ultimately obtaining the private keys needed to access digital wallets containing more than 4,100 Bitcoin. Beyond account takeovers, the criminal network also conducted physical home invasions targeting individuals with significant cryptocurrency holdings, particularly those with hardware wallets. Both men were arrested in mid-September 2024, with prosecutors unsealing their initial indictment shortly thereafter. However, the operation extended far beyond this single case—in May 2025, prosecutors expanded charges against 12 additional defendants, revising the total alleged theft amount to over $263 million and revealing a separate $14 million theft from July 2024.

Laundering Proceeds and Continued Coordination

Once cryptocurrency was stolen, the network employed professional money-laundering techniques to obscure the origins of the funds. These methods included routing stolen assets through cryptocurrency mixers, moving funds across multiple exchanges, utilizing intermediate wallets, and leveraging virtual private networks to mask transaction origins. Even while detained pending trial, Lam allegedly continued directing associates, including arranging delivery of luxury goods to his girlfriend. The group’s expenditure patterns revealed the scale of their illicit gains, with members purchasing private aircraft, acquiring multiple rental properties, collecting high-end timepieces, and accumulating at least 28 exotic vehicles. Weekly nightclub expenditures alone reportedly reached $500,000. Judge Kollar-Kotelly has scheduled a status hearing for December 8, though the Justice Department has not yet announced a sentencing date.

The case underscores the sophisticated threats facing cryptocurrency investors and the importance of multi-layered security practices in protecting digital assets.

Source: US Justice Department, via Cointelegraph. Not financial advice.

// DISCLAIMER: This article is for informational purposes only and is not financial, investment, or trading advice. Terminalcraft may earn a commission from affiliate links. Crypto is volatile and high-risk. Always do your own research.
JM

Jacob Marquez — Regulation Desk

Jacob Marquez is the founder and editor of Terminalcraft, an independent XRP-first crypto news desk. An XRP holder and market watcher since 2016, he started Terminalcraft to deliver fast, factual crypto news without the hype.