Malone Lam, a 22-year-old Singaporean citizen living in Miami, pleaded guilty on September 8, 2026, in U.S. District Court in Washington, D.C., to leading an international cybercrime network that stole and laundered more than $245 million in cryptocurrency, according to the case details disclosed in court.

Court disclosures said Lam led a criminal group that operated from October 2023 to May 2025. The network used social-engineering tactics through contacts on online gaming platforms and manipulated victims into giving up credentials that provided access to cryptocurrency wallets.

According to the case details, Lam coordinated the operation, selected targets, and directed the spending of stolen funds after they were laundered. He now faces a maximum sentence of 20 years in prison.

Prosecutors said the group spent heavily after the thefts, including nightclub bills reaching as much as $500,000 and more than $569,000 in a single night at a Los Angeles nightclub. The network also bought luxury goods such as Hermes Birkin bags and high-end watches, financed homes in Los Angeles, the Hamptons, and Miami, and chartered private jets and exotic cars valued between $100,000 and $3,800,000.

Other participants have also been charged. The disclosed case details said Evan Tangeman admitted to laundering at least $3.5 million, pointing to a broader organization beyond Lam’s individual role and underscoring the laundering component of the operation.

Why It Matters

The case stands out because it centers on one of the largest disclosed crypto theft schemes tied to social engineering rather than an on-chain exploit. For the industry, that reinforces a persistent security problem: user compromise can produce losses on a scale comparable to technical attacks, while also making prevention dependent on identity checks, withdrawal controls, and behavioral monitoring.

It also adds to the enforcement backdrop around crypto-related financial crime in the U.S. A guilty plea in a case involving cross-border actors, wallet credential theft, and laundering may increase pressure on platforms and service providers to show stronger surveillance and tracing capabilities when stolen digital assets move into the broader financial system.