Crypto scammers arrested after $240M bitcoin theft

A network of young men is accused of stealing more than 4,100 bitcoin — valued at over $240 million — from a Washington investor on Aug. 18, 2024, then spending the proceeds on luxury goods before FBI arrests halted the activity.

Court filings and prosecutors say the defendants used social engineering to carry out the theft. Callers posing as a Google employee and a representative from the Gemini crypto exchange contacted the victim and persuaded him to give access to his Google Drive and reveal security codes. Those credentials, prosecutors say, allowed the group to move the bitcoin into wallets they controlled.

Authorities allege the suspects then employed money-laundering specialists to convert the stolen cryptocurrency into cash through multiple exchanges. Investigators traced part of the stolen funds to an Encino, California, rental after a defendant, Jeandiel Serrano, failed to conceal his IP address when creating an account that held roughly $30 million of the proceeds.

Serrano was arrested at Los Angeles International Airport on Sept. 18, 2024; prosecutors noted he was wearing a watch they value at $500,000. Malone Lam, identified in the indictment as the alleged ringleader, was arrested the same day at a Miami residence. Court papers say an off-duty law enforcement officer warned Lam agents were coming.

Prosecutors say the group met in online gaming forums and had worked together on other multimillion-dollar thefts since late 2023. Other named co-defendants include Veer Chetal and Serrano. Federal charges have been filed against 18 people in the case. Lam has a plea agreement hearing scheduled and a prosecutor estimated his sentencing guidelines could recommend at least 14 years in prison if he is convicted.

The defendants’ spending drew rapid attention from law enforcement. Prosecutors allege Lam spent more than $569,000 in one night at a Los Angeles nightclub and that he and associates spent about $4 million at nightclubs over a month. Authorities say purchases included more than 30 high-end cars, a $2 million watch, private jet travel and rentals of mansions in Miami and the Hamptons. One defendant is accused of gifting a Lamborghini to his parents and hiding $500,000 in cash in their laundry machine.

Violence followed the thefts. Prosecutors say masked men from Miami intercepted Chetal’s parents in Danbury, Connecticut, forced them from their car and beat Chetal’s father as part of an alleged plan to extort money from Chetal; witnesses alerted police and the plot collapsed. When FBI agents searched Chetal’s apartment on Sept. 9, 2024, they found about $37 million in cryptocurrency, and Chetal agreed to cooperate with investigators.

Some co-defendants have pleaded guilty or been sentenced. Two alleged money launderers received prison terms of roughly six years. Tucker Desmond, who pleaded guilty to destroying evidence, was sentenced to probation. One defendant who pleaded guilty to racketeering conspiracy used stolen funds to pay legal fees for Lam.

At a sentencing hearing, prosecutor William Hart described the lifestyle the defendants bought as “built on a foundation of fraud.” U.S. Magistrate Judge Alicia Valle compared their spending to “Ferris Bueller gone bad.” Cybersecurity researcher Allison Nixon urged more law enforcement resources to address the type of online subculture she has tracked, warning the activity could expand without faster enforcement.

Federal officials say the investigation used digital forensics, cooperation with exchanges and traditional law enforcement work to trace and recover portions of the stolen funds. Court proceedings are ongoing as prosecutors pursue charges against remaining defendants and seek sentences for those convicted.