RICO First: Malone Lam Pleads Guilty to Orchestrating $245M Crypto Heist

Malone Lam Yu Xuan, a 22-year-old Singaporean, pleaded guilty on Tuesday, September 8, 2026, in a U.S. District Court in Washington D.C., to a racketeering conspiracy charge. Lam, described by prosecutors as the ringleader of an international cybercrime network, admitted to orchestrating the theft of more than $245 million in cryptocurrency through an elaborate social engineering scheme.

U.S. Attorney Jeanine Ferris Pirro announced the plea, which makes Lam the 11th of eighteen defendants charged in the case to admit guilt. The case marks a significant legal milestone, as it is believed to be the first time the Department of Justice has applied the Racketeer Influenced and Corrupt Organizations (RICO) Act to a Bitcoin-related crime.

Who is Malone Lam and what did he do?

Malone Lam Yu Xuan, born July 19, 2004, and known by aliases like "Anne Hathaway," "$$$," and "King Greavy," admitted to leading a sophisticated criminal enterprise that operated from at least October 2023 through May 2025. He grew up in Singapore, attended Unity Secondary School, and eventually dropped out, later moving to the U.S. in October 2023 via the Visa Waiver Program. He began the "Social Engineering Enterprise" with two roommates in Texas.

The enterprise targeted individuals with substantial cryptocurrency holdings. According to reports from the U.S. Department of Justice (DOJ), CNA, and The Associated Press, the conspirators employed various social engineering tactics. They impersonated employees of trusted companies, such as Google and the Gemini cryptocurrency exchange, to trick victims into revealing sensitive information like passwords, seed phrases, and authentication codes, or granting remote access to their devices. The group identified potential targets using hacked databases or information acquired from the dark web.

The scale of the operation was extensive. One notable theft occurred on August 18, 2024, when the group stole over 4,100 Bitcoin, valued at approximately $230 million to over $245 million at the time, from a Washington, D.C., resident. Another victim allegedly lost more than $14 million in July 2024. Lam was reportedly involved in approximately 50 other thefts totaling an additional $3 million between November 2023 and September 2024.

In some instances, the scheme escalated to physical home break-ins. For example, in July 2024, a member of Lam's group burglarized a victim's home in New Mexico to steal hardware wallets. Lam coordinated this remotely by monitoring the victim's iCloud account in real-time.

How did Lam’s arrest happen?

Lam's criminal activities culminated in his arrest by the FBI on September 18, 2024, in Miami, Florida. Before his apprehension, he reportedly threw his mobile phone into Biscayne Bay, having been tipped off by an off-duty police officer. His lavish spending habits, funded by the stolen cryptocurrency, were widely reported. Lam and his associates indulged in nightclub services costing up to $500,000 per evening, including one instance of $569,000 at a Los Angeles club. They also amassed a fleet of luxury cars, some valued up to $3.8 million, including Ferraris, Rolls Royces, and Lamborghinis. Luxury items such as Hermes Birkin bags, which were sometimes thrown into crowds at parties, and expensive jewelry were also part of their expenditures, according to Mothership.SG and Courthouse News Service.

What happens next for Malone Lam?

U.S. District Judge Colleen Kollar-Kotelly did not immediately schedule a sentencing hearing after Lam's guilty plea. A status hearing is set for December 8, 2026, where a sentencing date is expected to be finalized. Lam faces a maximum prison term of 20 years for the RICO conspiracy charge, which typically carries sentences ranging from 7 to 20 years.

Lam and his co-conspirators have been ordered to repay more than $245 million in stolen funds to their victims. Lam has agreed to forfeit many of his exotic vehicles toward this restitution fund. However, prosecutor Christopher Howland noted that a significant portion of the stolen funds may be untraceable, having been transferred online to areas beyond the court's reach.

While Lam's plea acknowledged more than $245 million in thefts, some reports, including the U.S. Justice Department's superseding indictment in May 2025, indicate the broader criminal enterprise was responsible for over $263 million in alleged thefts. The discrepancy likely reflects the specific conduct Lam admitted to versus the full scope of the enterprise's activities. The sentencing phase will consider any cooperation Lam has provided to prosecutors. Other members of the criminal enterprise have already been sentenced, with Evan Tangeman, for instance, receiving 70 months in federal prison for laundering $3.5 million for the syndicate.

This is educational information, not legal, financial, tax, or investment advice.