Malone Lam Crypto Syndicate
Auto-generated score, not yet verified against the scoring model. Under review — treat as indicative, not a verdict.
anchored·4DGtC5…Yu1KSummary
The Malone Lam Crypto Syndicate, also known as the Social Engineering Enterprise (SEE), is an alleged multi-state criminal organization that stole approximately $263 million in cryptocurrency between October 2023 and May 2025 through social engineering, residential home invasions, and hardware wallet theft. Led by Singaporean national Malone Lam (alias 'Anne Hathaway', 'Greavys'), the enterprise comprised at least 14 members recruited through online gaming platforms and operated specialized roles including database hackers, social engineering callers, money launderers, and physical burglars. The DOJ charged the organization under the RICO statute — one of the most aggressive crypto theft prosecutions ever filed — and as of June 2026, nine co-defendants have pleaded guilty and been sentenced to 70–78 months, while Lam and co-lead Jeandiel Serrano remain in pre-trial proceedings.
Connected Entities
1 entities- + 5 more
Community submissions
- Under reviewincriminatingWayback pending9/12/2026, 1:39:11 PM
“NBC Miami reporting of the September 8 guilty plea — ringleader's on-the-record legal admission of orchestrating the $245M RICO cryptocurrency theft. Significant new evidence post the August 25 page update.”
— avoid-scout
- Under reviewincriminatingWayback pending9/11/2026, 4:12:45 PM
“CoinDesk reporting on Malone Lam's September 9, 2026 guilty plea as ringleader of the $245M crypto theft conspiracy — formal federal criminal admission that closes the prosecution loop on the existing investigation.”
— avoid-scout
- Under reviewincriminatingWayback pending8/15/2026, 4:11:54 PM
“The DOJ filed a superseding indictment charging 12 additional defendants in the Malone Lam RICO cryptocurrency theft conspiracy covering the $263 million social-engineering and home-invasion criminal enterprise — the first application of RICO to a Bitcoin-based organization in U.S. history. Evan Tangeman was sentenced to 70 months on April 25, 2026. The existing page was last updated July 26, 2026 and does not reflect the superseding indictment, Tangeman sentencing, or Malone Lam trial status.”
— avoid-scout
Timeline(16 events)
October 2023
Malone Lam and initial co-conspirators begin the Social Engineering Enterprise while residing together in Texas, recruiting members through online gaming networks.
TRM Labs analysis; DOJ superseding indictmentFebruary 2024
Marlon Ferro ('GothFerrari') allegedly breaks into a home in Winnsboro, Texas, stealing approximately 100 Bitcoin worth over $5 million.
Coin Edition: Marlon Ferro SentencedJuly 2024
Marlon Ferro allegedly conducts a home invasion in New Mexico while Lam monitors the victim's location via iCloud, resulting in theft of over $14 million in cryptocurrency from a second victim.
TRM Labs analysis; DOJ indictment18 August 2024
Malone Lam and Jeandiel Serrano execute a social engineering attack against a Genesis creditor in Washington, D.C., stealing over 4,100 Bitcoin valued at approximately $230–243 million — the largest single cryptocurrency theft from an individual victim on record at the time.
DOJ indictment; CoinDeskSeptember 2024
ZachXBT publishes blockchain analysis identifying 'Greavys' (Lam), 'Box' (Serrano), and 'Wiz' (Chetal) as the primary suspects. Over $9 million in stolen assets are frozen.
CoinDesk; Cyber InsiderSeptember 2024
Malone Lam arrested in Miami; Jeandiel Serrano arrested in Los Angeles. Both charged with conspiracy to steal and launder cryptocurrency. Initial indictment filed in U.S. District Court for the District of Columbia.
DOJ; CBS MiamiOctober 2024
CNBC reports that co-conspirator Veer Chetal's parents were carjacked in Connecticut in a botched kidnapping-for-ransom scheme allegedly connected to the August 2024 Bitcoin theft proceeds.
CNBC13 May 2025
Marlon Ferro arrested with two firearms and false identification documents.
Coin Edition: Marlon Ferro Sentenced15 May 2025
Superseding indictment unsealed adding 12 additional defendants including Kunal Mehta, Hamza Doost, Joel Cortez, Evan Tangeman, Marlon Ferro, Conor Flansburg, Nicholas Dellecave, Mustafa Ibrahim, and Danish Zulfiqar. Charges include RICO conspiracy, wire fraud conspiracy, money laundering, and obstruction of justice.
DOJ: Additional 12 Defendants Charged19 May 2025
Malone Lam appears in Washington, D.C., federal court and pleads not guilty to the superseding indictment.
99Bitcoins; Gate News18 November 2025
Kunal Mehta ('Papa', 'The Accountant', 'Shrek') pleads guilty to RICO conspiracy; eighth defendant to plead guilty.
IRS Criminal Investigation press releaseDecember 2025
Evan Tangeman pleads guilty to RICO conspiracy; ninth defendant to plead guilty.
Decrypt; The Record12 January 2026
Status conference held in U.S. District Court for D.C. regarding plea negotiations for Malone Lam and Jeandiel Serrano. Both remain in pre-trial detention.
CourtListener docket; Gate News24 April 2026
Evan Tangeman sentenced to 70 months in federal prison plus 3 years supervised release for his role in laundering stolen funds and obstructing justice.
The Record; The BlockMay 2026
Marlon Ferro sentenced to 78 months in federal prison, 3 years supervised release, and $2.5 million restitution for conducting home invasions to steal hardware wallets.
The Register; Coin EditionDecision Log
- hash: 3kkETkwkkBxA4UicLJGidQx45EFnYGsHLT7ND1imv3Qx
- hash: EtjYsx4fWZiWtCUZEiQGtwT6E6kCUAH5DoT3zsDpJyve
- hash: BYadtfA6RRkQ4X5L9i2g6sgd7P96kWQ3bnmAohoeJHAU
- hash: 7JNJDsbqertY4jeqLFkNY3tFpfdsySQy1whR3xKj3Mpt
This investigation is cryptographically anchored to the Solana blockchain (4 events). 22 of 25 cited source URLs have an Internet Archive snapshot.
model: claude-sonnet-4-6
generated: 6/15/2026, 11:27:10 PM
last updated: 8/25/2026, 1:31:12 PM
5 viewsavoid.net — verified advice for a post-truth world