Singaporean man pleads guilty in US to massive crypto heist

In a landmark cybercrime case that exposes the growing global threat of digital asset theft, a 22-year-old Singaporean national named Malone Lam has entered a guilty plea to a racketeering conspiracy charge in a U.S. federal court. The charge stems from Lam’s role as the ringleader of one of the largest cryptocurrency heists in recent history, which saw the group steal roughly $245 million worth of bitcoin from hundreds of victims across the globe.

According to official documents released by the U.S. Department of Justice (DOJ), the transnational criminal conspiracy operated from no later than October 2023 through at least May 2025. Lam assembled a network of co-conspirators spread across four U.S. states — California, Connecticut, New York, and Florida — as well as multiple countries outside the United States, with the group first connecting through popular online gaming platforms. Operating under multiple aliases including Anne Hathaway, $$$, and King Greavy, Lam structured the enterprise, targeted potential victims, and assigned specialized roles to each member of the ring, prosecutors confirmed.

The criminal group used a mix of sophisticated cyber deception and physical burglary to steal digital assets, the DOJ says. Conspirators tricked victims into handing over sensitive account credentials through phishing and social engineering schemes, and in some cases carried out residential break-ins to steal private keys required to access cryptocurrency wallets. Once they gained control, the group drained the wallets and transferred the stolen bitcoin to accounts they controlled.

Over the course of the conspiracy, Lam and his associates laundered the stolen funds and spent the proceeds on an extravagant lifestyle of luxury. Court records and evidence released by U.S. authorities show the group spent as much as $500,000 per outing on high-end nightclub trips, where they threw tens of thousands of dollars worth of Hermes Birkin handbags into crowds of partygoers. They also purchased a collection of high-performance supercars, with individual vehicle values ranging from $100,000 to $3.8 million, alongside luxury watches priced as high as $500,000, designer clothing, and long-term luxury home rentals in elite U.S. destinations including Los Angeles, the Hamptons, and Miami. The group also splurged on private jet travel and hired a dedicated team of private security to protect their operation. U.S. law enforcement has released public photos showing Lam partying with large stacks of cash at a Miami nightclub in September 2024, alongside images of the exotic car fleet purchased with stolen funds.

Following his guilty plea entered on Tuesday, Lam now faces a maximum possible prison sentence of 20 years behind bars. U.S. District Judge Colleen Kollar-Kotelly has not yet scheduled a formal sentencing hearing for the defendant. In a statement following the plea, U.S. Attorney Pirro emphasized that the DOJ’s commitment to combating transnational cybercrime remains unwavering. “If you build a cybercrime empire, we will find you, dismantle your operation, and hold you accountable,” Pirro said. She added that Lam “led an international network that preyed on victims through deception, invaded their privacy, and stole hundreds of millions of dollars in cryptocurrency.”

The case marks one of the highest-profile cryptocurrency theft prosecutions in recent years, highlighting how cross-border criminal networks are increasingly targeting unregulated digital assets, and the challenges international law enforcement faces in tracking and apprehending the perpetrators of these digital crimes.