Singapore crypto fraud ringleader pleads guilty

Malone Lam, a 22-year-old Singapore citizen living in Miami, has pleaded guilty to a federal racketeering conspiracy charge over an international social-engineering operation that U.S. prosecutors say stole and laundered more than $245 million in cryptocurrency.

The guilty plea, entered Tuesday in a case brought by the U.S. Attorney’s Office for the District of Columbia, places Lam among the most prominent defendants in a sprawling alleged cryptocurrency theft network. Prosecutors described him as a leader of the group, responsible for selecting victims and coordinating participants who carried out the thefts and moved the proceeds.

Lam faces a maximum prison term of 20 years. A status hearing is scheduled for Dec. 8.

Prosecutors describe a coordinated theft and laundering operation

Federal prosecutors charged Lam in 2024 alongside Jeandiel Serrano, alleging that the defendants participated in a racketeering conspiracy built around social engineering. The term refers to manipulating a person into handing over access, credentials, verification codes, or other information that can unlock accounts and wallets.

Such schemes can take several forms, including impersonation of customer-support staff, deceptive calls or messages, and fake websites designed to capture login details. Once attackers gain control of a victim’s account or wallet, crypto transfers can be difficult to reverse, particularly when funds are rapidly split among many addresses or converted into other assets.

According to prosecutors, Lam used the aliases “Anne Hathaway,” “$$$” and “King Greavy” while participating in the operation. Authorities alleged that the group targeted cryptocurrency holders through deception, then laundered the stolen proceeds through a network of participants.

The racketeering conspiracy charge allows prosecutors to frame the alleged conduct as an organized criminal enterprise rather than a series of unrelated thefts. Lam’s guilty plea removes the need for a trial on that count, though sentencing will determine the punishment he ultimately receives.

Luxury spending featured in prosecutors’ account

The government said the group spent stolen cryptocurrency proceeds on an unusually visible range of luxury goods and services. Prosecutors cited nightclub services that cost close to $500,000 in a single evening, along with luxury handbags, watches, and rental homes in Los Angeles, the Hamptons and Miami.

Authorities also pointed to multiple luxury vehicles with values ranging from $100,000 to $3.8 million. The spending allegations illustrate one of the practical challenges in major crypto-crime investigations: stolen assets may begin as on-chain transfers but can be converted into cash, goods, travel, real estate rentals, and other off-chain purchases.

Lavish purchases can also create an evidentiary trail. High-value rentals, vehicle acquisitions and luxury services typically involve records that can help investigators connect crypto proceeds to individuals alleged to have controlled them.

Lam was originally charged alongside Serrano, while other defendants have also been connected to the same scheme. Evan Tangeman, 22, received a prison sentence of more than five years in April, according to prosecutors. That earlier sentence suggests the government has been advancing cases against participants separately as defendants resolve their charges or proceed through court.

Social engineering remains a costly crypto threat

The Lam case centers on deception rather than an alleged breach of blockchain code or the cryptography securing a digital asset. That distinction has practical consequences for cryptocurrency holders: even a technically secure wallet can be emptied if its owner is persuaded to reveal a recovery phrase, approve a malicious transaction, or provide access to an account.

The FBI reported $9.3 billion in cryptocurrency-related losses during 2024, based on complaints submitted to its Internet Crime Complaint Center. Such totals cover fraud and criminal activity reported by victims, rather than every on-chain theft worldwide, since many cases are never reported or cannot be fully valued.

Phishing links remain a common entry point. The supplied figures say fake links drained $494 million from 332,000 victim accounts in 2024, though the pattern extends beyond a single method: criminals often combine spoofed websites with calls, messages and urgent claims about locked accounts or suspicious transactions.

Large platform breaches can also dominate annual loss estimates. The materials cite a $1.5 billion theft from a major trading platform during 2025, showing how losses can arise both from targeted attacks on individuals and compromises affecting centralized services.

Security practices can limit exposure

The case offers a reminder that account-security decisions often determine whether a social-engineering attempt succeeds. Hardware wallets, which keep private keys offline, can reduce exposure to malware and some online account compromises, though they do not protect a holder who gives away a recovery phrase or signs a fraudulent transaction.

Multi-factor authentication can add another barrier for exchange and email accounts, particularly when it relies on an authenticator app or hardware security key rather than text messages alone. Users should also independently verify support requests through official channels rather than responding to unexpected calls, direct messages, or links.

Lam’s plea now shifts attention to sentencing and to the remaining defendants tied to the alleged network. Prosecutors’ account of the operation shows how a fraud ring can turn a single successful deception into high-value thefts, rapid laundering activity and a long trail of spending records.