A 22-Year-Old Stole $245 Million in Bitcoin and Was Caught in 30 Days

A 22-year-old stole $245 million in Bitcoin.

He was caught 30 days later

Malone Lam, a Singaporean who dropped out of school at 14 and met his co-conspirators on Minecraft, led what prosecutors call one of the largest cryptocurrency thefts in U.S. history.

In August 2024, he and his group social-engineered a Washington, D.C., resident out of over 4,100 Bitcoin - roughly $230–245 million at the time.

Then he spent nearly all of it in a month.

- Fleet of 28+ luxury cars 
- Watches and jewellery: $1.8–2 million 
- Private jets, private security, luxury rentals
- Hermès Birkin handbag giveaways at parties
- Nightclub tabs: $400,000–$569,000 per evening
- All documented online

So, how did he get caught?

One co-conspirator forgot to use a VPN when creating an exchange account.

Lam's crew was notorious at LA and Miami clubs.

Nightclub receipts, surveillance footage, exotic cars parked outside rental homes. No operational security. No separation of funds. No patience.

When the FBI showed up at his Miami rental house on September 18, 2024, Lam walked to the dock and threw his phone into Biscayne Bay.

They arrested him anyway.

He pleaded guilty to RICO charges in September and faces up to 20 years in prison.

The crypto was stolen through social engineering.

They moved it through exchanges and wallets. They converted it to cash. Then they immediately did the one thing that guarantees you get caught:

They lived as if they'd just pulled off a heist.

The average life expectancy of a $245M theft, once you start throwing Birkins into crowds and buying 28 cars, is apparently about 30 days.

How do you stop social engineering attacks?