Alleged $240 Million Bitcoin Theft Ringleader Malone Lam Set to Plead Guilty Tuesday

Malone Lam is scheduled to appear in federal court in Washington, D.C. on Tuesday for a plea agreement hearing, according to Fox News and Crypto Briefing. He's accused of running one of the largest cryptocurrency thefts in U.S. history, and if he pleads guilty as expected, he becomes the 11th of 18 charged defendants to do so, according to Crypto Briefing. Three co-conspirators have already been sentenced.

The theft happened on August 18, 2024. A man identified in court filings as "Victim 7" got a call at his Washington home from someone claiming to be a Google representative, warning about a breach attempt on his account, according to the Associated Press. A second caller claimed to be from the Gemini crypto exchange and warned of a malware attack on his wallet.

Prosecutors say the callers talked the victim into handing over access to his Google Drive and revealing security codes, which let Lam and his associates siphon off more than 4,100 bitcoin, then worth over $240 million, per the AP. Two of Lam's alleged co-conspirators on those calls were Veer Chetal and Jeandiel Serrano. A Justice Department grand jury filing also names co-defendants Hamza Doost and Kunal Mehta, according to Fox News.

The spending spree

Once the money moved, prosecutors say the group laundered it through multiple exchanges and cash-out specialists, then spent it as fast as they could. Fox News reports Lam and his friends dropped $4 million at Los Angeles nightclubs in about a month, including one $569,000 night out. Lam allegedly bought a $2 million watch and more than 30 vehicles, custom Porsches, Lamborghinis and Ferraris among them. The group rented mansions in Miami and the Hamptons, flew private jets, and hired security guards.

A recording captured online by the crypto investigator known as ZachXBT reportedly caught the moment the group realized what they'd pulled off, with one voice yelling, "Oh, my God! Bro, bro, I'm going to spaz out!" according to the AP.

The spending was conspicuous enough that U.S. Magistrate Judge Alicia Valle, presiding over Lam's initial appearance in Miami, told prosecutors, "I could only think of Ferris Bueller gone bad," per Fox News.

A pattern, not an outlier

Cybersecurity researcher Allison Nixon, who tracks an underground hacker subculture known as The Com, told the AP that cases like this one are becoming routine because of the money involved. "If we don't seriously ramp up the resources to take these people down and do it faster, then it's going to spread more and more," she said.

Complaints of cryptocurrency investment fraud to the FBI rose nearly 50% in 2025, according to the AP. In the same period, the Justice Department disbanded a unit dedicated to prosecuting crypto-related crimes, and the Trump administration has largely stepped back from the regulatory crackdown on the industry that marked the Biden years, the AP reported. Trump's own crypto businesses brought in roughly $1.2 billion in 2025, per the same AP reporting.

The Lam prosecution involves 18 defendants, multiple guilty pleas already secured, and completed sentencings, all under existing federal wire fraud, money laundering and identity theft statutes that don't require a specialized crypto unit to enforce. The theft itself predates any of the Trump administration's 2025 policy shifts by roughly a year. None of the sources here include a response from the Trump administration or the Justice Department defending the decision to disband the crypto unit.

Tuesday's hearing will show whether Lam's plea comes with cooperation terms that could affect the co-defendants still fighting their cases, and whether the victim, identified only as "Victim 7," recovers any of the stolen bitcoin.