Audit log

Every state-changing event for Malone Lam: moderation decisions on community submissions, plus corrections and updates from the news pipeline. URL-based decisions are designed to carry three independent witnesses — the original source, an Internet Archive snapshot, and a Solana memo signed by our publicly-disclosed publisher key. Archive coverage is still being backfilled, so each decision below reports its own snapshot status rather than assuming one exists.

1. #1publishby system:backfill

   2026-09-12 17:20:10Z
   Score: ? → ? (no score change)
   anchoranchored

   chain

   ●mainnet-betaslot 446,484,806

   sig

   5XMqBEcXLZcS…7U1Vp4u2copyexplorer ↗

   hash

   5tXjZYof1m62…EQZtvbv6copysha256 → base58

   verifying row…full verify ↗

   canonical bytes (22068 B) ▸

   {"actor":"system:backfill","investigation_id":"246a2133-e8e9-4954-9c91-1e4e00255ef5","kind":"publish","page_slug":"malone-lam","published_at":"2026-09-12T17:20:10.741Z","sequence_num":1,"snapshot":{"content_type":"investigation","entity_name":"Malone Lam","sections":[{"content":"Malone Lam is a Singaporean national, approximately 22 years old at the time of his September 2026 guilty plea, who had been living in the United States. He did not complete middle school and is an eighth-grade dropout, according to reporting by NBC News and Fortune. He used the online aliases 'King Greavys' and '$$$.' According to prosecutors, Lam became roommates with two co-conspirators in Texas around October 2023, which marked the beginning of the organized criminal enterprise. The group's members originally connected through online gaming platforms, including Minecraft.","heading":"Background","severity":"medium","sources":[{"credibility":1,"name":"Singapore man in U.S. pleads guilty to orchestrating $240 million bitcoin theft — NBC News","type":"news_article","url":"https://www.nbcnews.com/news/us-news/singapore-man-us-pleads-guilty-orchestrating-240-million-bitcoin-theft-rcna596761"},{"credibility":1,"name":"The first Bitcoin RICO case comes for a DOJ that gutted its ability to build it — Fortune","type":"news_article","url":"https://fortune.com/2026/09/07/malone-lam-bitcoin-rico-plea-doj-crypto-unit/"}]},{"content":"On September 9, 2026, Malone Lam pleaded guilty in U.S. District Court in Washington, D.C. to one count of racketeering conspiracy (RICO) before U.S. District Judge Colleen Kollar-Kotelly. Prosecutors allege Lam served as the ringleader of what they term the 'Social Engineering Enterprise,' a criminal network that operated from no later than October 2023 through at least March 2025. Lam is one of 18 defendants charged in the broader investigation and was the eleventh to plead guilty. A superseding indictment was filed on September 4, 2026, expanding the scope of the alleged enterprise. Lam faces a maximum prison sentence of 20 years; the plea agreement's sentencing guidelines recommend at least 14 years, according to court filings reviewed by Fox News. A status hearing is scheduled for December 8, 2026. Sentencing had not been scheduled as of the date of his plea. The U.S. Department of Justice announced the plea via a press release from the U.S. Attorney's Office for the District of Columbia.","heading":"Criminal Charges and Guilty Plea","severity":"critical","sources":[{"credibility":1,"name":"DOJ press release: Singaporean Ringleader of $245 Million Cryptocurrency Racketeering Enterprise Pleads Guilty","type":"regulatory","url":"https://www.justice.gov/usao-dc/pr/singaporean-ringleader-245-million-cryptocurrency-racketeering-enterprise-pleads-guilty"},{"credibility":1,"name":"Singapore man in U.S. pleads guilty to orchestrating $240 million bitcoin theft — NBC News","type":"news_article","url":"https://www.nbcnews.com/news/us-news/singapore-man-us-pleads-guilty-orchestrating-240-million-bitcoin-theft-rcna596761"},{"credibility":1,"name":"Man pleads guilty to orchestrating $240 million bitcoin theft from DC resident — ABC News","type":"news_article","url":"https://abcnews.com/Business/wireStory/singapore-man-pleads-guilty-orchestrating-240-million-bitcoin-136279302"},{"credibility":2,"name":"Malone Lam pleads guilty to $245 million bitcoin theft conspiracy — Quartz","type":"news_article","url":"https://qz.com/malone-lam-guilty-plea-bitcoin-theft-racketeering-090926"},{"credibility":2,"name":"Scammer behind $245 million crypto heist pleads guilty to RICO charges — The Record (Recorded Future)","type":"news_article","url":"https://therecord.media/scammer-behind-245-million-crypto-heist-pleads-guilty-rico"}]},{"content":"On August 18, 2024, Malone Lam, Danish Zulfiqar, and others allegedly contacted a victim identified in court filings as 'R.W.,' a resident of Washington, D.C. and a longtime cryptocurrency investor. The conspirators impersonated representatives of Google and the Gemini cryptocurrency exchange. Through these fraudulent calls, they manipulated the victim into granting access to his Google Drive and revealing security codes. This allowed the group to siphon over 4,100 Bitcoin from the victim's wallets, valued at approximately $245.9 million at the time of the theft. The theft represents one of the largest cryptocurrency frauds by a U.S.-based criminal group in history. According to court filings reviewed by Courthouse News, the group also used AnyDesk remote desktop software and sent fraudulent security notifications as part of the attack vector. The enterprise's methods across all victims included impersonating Apple, Google, and Gemini support staff; exploiting remote access tools; and in some cases conducting physical home invasions to target hardware wallets.","heading":"The August 2024 Theft: Method and Scale","severity":"critical","sources":[{"credibility":1,"name":"DOJ: Guilty Plea and Superseding Indictment Announced in Social Engineering Scheme that Stole $263 Million","type":"regulatory","url":"https://www.justice.gov/usao-dc/pr/guilty-plea-and-superseding-indictment-announced-social-engineering-scheme-stole-263"},{"credibility":1,"name":"Party's over for crypto scammers who went on a spending spree after $240 million bitcoin theft — ABC News","type":"news_article","url":"https://abcnews.com/Business/wireStory/partys-crypto-scammers-spending-spree-after-240-million-136251423"},{"credibility":2,"name":"Cryptocurrency scam ringleader pleads guilty to defrauding victims of $250 million — Courthouse News","type":"news_article","url":"https://www.courthousenews.com/cryptocurrency-scam-ringleader-pleads-guilty-to-defrauding-victims-of-250-million/"}]},{"content":"The broader enterprise charged in the case involved 18 defendants and extended well beyond the August 2024 theft. According to the DOJ, the enterprise ran from no later than October 2023 through at least March 2025 and targeted multiple victims. A July 2024 theft of approximately $14 million from a separate victim is also attributed to Lam and others in court filings. Total theft attributed to the enterprise across all victims is alleged to exceed $263 million, according to a superseding indictment. Named co-conspirators include Jeandiel Serrano (who met Lam through the online game Minecraft), Veer Chetal, Danish Zulfiqar, Nicholas Dellecave, Mustafa Ibrahim, Marlon Ferro (alleged to have conducted physical home invasions), Hamza Doost, and Kunal Mehta, among others. Roles within the enterprise were divided among database hackers, target identifiers, phone callers, money launderers, and residential burglars. A week after the August 2024 theft, masked men from Miami abducted Veer Chetal's parents in Danbury, Connecticut, beating them and demanding cryptocurrency as ransom; witnesses contacted police and the kidnappers were apprehended, according to news reporting. This kidnapping is described as connected to the broader criminal network, though it does not form part of Lam's guilty plea. As of September 2026, Lam's guilty plea was the eleventh in the case; other co-conspirators' proceedings remain ongoing.","heading":"Broader Criminal Enterprise and Co-Conspirators","severity":"critical","sources":[{"credibility":1,"name":"DOJ: Additional 12 Defendants Charged in RICO Conspiracy for over $263 Million Cryptocurrency Thefts","type":"regulatory","url":"https://www.justice.gov/usao-dc/pr/additional-12-defendants-charged-rico-conspiracy-over-263-million-cryptocurrency-thefts"},{"credibility":1,"name":"Party's over for crypto scammers — ABC News","type":"news_article","url":"https://abcnews.com/Business/wireStory/partys-crypto-scammers-spending-spree-after-240-million-136251423"},{"credibility":2,"name":"19-year-old linked to Danbury couple kidnapped in $230M crypto heist is in custody — Newstimes","type":"news_article","url":"https://www.newstimes.com/news/article/danbury-veer-chetal-crypto-theft-kidnapping-arrest-20243479.php"},{"credibility":2,"name":"First they met as teen gamers, then they ran $263m Bitcoin racket, feds say — DL News","type":"news_article","url":"https://dlnews.com/articles/people-culture/bitcoin-thieves-smuggled-bulk-cash-in-squishmallows-toys/"}]},{"content":"Following the August 2024 theft, Lam and his associates engaged in a documented spending spree over approximately one month. According to reporting by ABC News and NBC News, Lam spent over $569,000 in a single evening at a Los Angeles nightclub, purchased a watch valued at approximately $2 million, and acquired more than 30 luxury vehicles including custom Lamborghinis, Ferraris, and Porsches, with some vehicles priced as high as $3.8 million. The group collectively spent approximately $4 million at nightclubs within one month and rented mansions in Miami and the Hamptons, as well as properties in Los Angeles. Private jets and personal security guards were also reported expenditures. Co-conspirator Veer Chetal gifted a Lamborghini to his parents and was found with approximately $37 million in stolen cryptocurrency when arrested. Jeandiel Serrano was arrested at Los Angeles International Airport wearing a watch valued at approximately $500,000. On-chain investigator ZachXBT, who operates under a pseudonym, publicly identified Lam and other conspirators and posted a private audio recording capturing the group's reaction immediately after the theft. When asked by Judge Kollar-Kotelly to identify which vehicles he personally purchased, Lam replied that he 'would need some time,' according to NBC News.","heading":"Post-Theft Spending and Asset Dissipation","severity":"high","sources":[{"credibility":1,"name":"Party's over for crypto scammers who went on a spending spree after $240 million bitcoin theft — ABC News","type":"news_article","url":"https://abcnews.com/Business/wireStory/partys-crypto-scammers-spending-spree-after-240-million-136251423"},{"credibility":1,"name":"Singapore man in U.S. pleads guilty to orchestrating $240 million bitcoin theft — NBC News","type":"news_article","url":"https://www.nbcnews.com/news/us-news/singapore-man-us-pleads-guilty-orchestrating-240-million-bitcoin-theft-rcna596761"},{"credibility":1,"name":"Party's over for scammers who went on spending spree after $240M bitcoin theft — NBC Washington","type":"news_article","url":"https://www.nbcwashington.com/news/local/partys-over-for-scammers-who-went-on-a-spending-spree-after-a-240m-bitcoin-theft/4151017/"}]},{"content":"Malone Lam was arrested on September 18, 2024, at a Miami mansion he had been renting. According to reporting by NBC News and ABC News, an off-duty law enforcement officer allegedly tipped Lam off about his impending arrest, though this did not prevent his apprehension. Jeandiel Serrano was arrested on the same day at Los Angeles International Airport. Lam was initially charged with conspiracy to commit wire fraud and conspiracy to launder money. He was held pending trial after his initial arrest.","heading":"Arrest","severity":"high","sources":[{"credibility":1,"name":"Party's over for crypto scammers — ABC News","type":"news_article","url":"https://abcnews.com/Business/wireStory/partys-crypto-scammers-spending-spree-after-240-million-136251423"},{"credibility":1,"name":"Singapore man in U.S. pleads guilty — NBC News","type":"news_article","url":"https://www.nbcnews.com/news/us-news/singapore-man-us-pleads-guilty-orchestrating-240-million-bitcoin-theft-rcna596761"}]},{"content":"The August 2024 theft attributed to Lam's enterprise is a documented example of a high-value social engineering attack targeting cryptocurrency holders. The attack combined impersonation of legitimate support channels (Google, Gemini), coercion via fraudulent security notifications, and exploitation of remote access tools. The enterprise also reportedly leveraged iCloud tracking to physically locate victims and used physical home invasions in some cases. The victim of the August 2024 theft was specifically selected because of known substantial cryptocurrency holdings. This case is widely cited by security researchers and news outlets as illustrating the acute risk faced by high-net-worth Bitcoin holders from support impersonation and account takeover attacks. Lam's enterprise is described by prosecutors as having divided labor among specialized roles, indicating an organized and repeatable attack methodology rather than an opportunistic one-off event.","heading":"Social Engineering Risk: Attack Pattern","severity":"high","sources":[{"credibility":2,"name":"Cryptocurrency scam ringleader pleads guilty to defrauding victims of $250 million — Courthouse News","type":"news_article","url":"https://www.courthousenews.com/cryptocurrency-scam-ringleader-pleads-guilty-to-defrauding-victims-of-250-million/"},{"credibility":1,"name":"The first Bitcoin RICO case — Fortune","type":"news_article","url":"https://fortune.com/2026/09/07/malone-lam-bitcoin-rico-plea-doj-crypto-unit/"},{"credibility":2,"name":"Scammer behind $245 million crypto heist pleads guilty to RICO charges — The Record","type":"news_article","url":"https://therecord.media/scammer-behind-245-million-crypto-heist-pleads-guilty-rico"}]},{"content":"As of September 12, 2026, Lam has pleaded guilty but has not yet been sentenced. A status hearing is scheduled for December 8, 2026 before U.S. District Judge Colleen Kollar-Kotelly. The plea agreement's sentencing guidelines recommend at least 14 years, and the statutory maximum is 20 years, according to court documents reviewed by Fox News and reporting by NBC News. Lam also faces potential deportation to Singapore following any prison term. Asset forfeiture of vehicles and other proceeds has been ordered. Proceedings against the remaining co-defendants are ongoing.","heading":"Pending Proceedings","severity":"critical","sources":[{"credibility":1,"name":"DOJ press release: Singaporean Ringleader pleads guilty","type":"regulatory","url":"https://www.justice.gov/usao-dc/pr/singaporean-ringleader-245-million-cryptocurrency-racketeering-enterprise-pleads-guilty"},{"credibility":2,"name":"Scammer behind $245 million crypto heist pleads guilty to RICO charges — The Record","type":"news_article","url":"https://therecord.media/scammer-behind-245-million-crypto-heist-pleads-guilty-rico"},{"credibility":2,"name":"Cryptocurrency scam ringleader pleads guilty — Courthouse News","type":"news_article","url":"https://www.courthousenews.com/cryptocurrency-scam-ringleader-pleads-guilty-to-defrauding-victims-of-250-million/"}]}],"sources_used":[{"credibility":1,"name":"DOJ: Singaporean Ringleader of $245 Million Cryptocurrency Racketeering Enterprise Pleads Guilty","type":"regulatory","url":"https://www.justice.gov/usao-dc/pr/singaporean-ringleader-245-million-cryptocurrency-racketeering-enterprise-pleads-guilty"},{"credibility":1,"name":"DOJ: Guilty Plea and Superseding Indictment Announced in Social Engineering Scheme that Stole $263 Million","type":"regulatory","url":"https://www.justice.gov/usao-dc/pr/guilty-plea-and-superseding-indictment-announced-social-engineering-scheme-stole-263"},{"credibility":1,"name":"DOJ: Additional 12 Defendants Charged in RICO Conspiracy for over $263 Million Cryptocurrency Thefts","type":"regulatory","url":"https://www.justice.gov/usao-dc/pr/additional-12-defendants-charged-rico-conspiracy-over-263-million-cryptocurrency-thefts"},{"credibility":1,"name":"Singapore man in U.S. pleads guilty to orchestrating $240 million bitcoin theft — NBC News","type":"news_article","url":"https://www.nbcnews.com/news/us-news/singapore-man-us-pleads-guilty-orchestrating-240-million-bitcoin-theft-rcna596761"},{"credibility":1,"name":"Man pleads guilty to orchestrating $240 million bitcoin theft from DC resident — ABC News","type":"news_article","url":"https://abcnews.com/Business/wireStory/singapore-man-pleads-guilty-orchestrating-240-million-bitcoin-136279302"},{"credibility":1,"name":"Party's over for crypto scammers who went on a spending spree after a $240 million bitcoin theft — ABC News","type":"news_article","url":"https://abcnews.com/Business/wireStory/partys-crypto-scammers-spending-spree-after-240-million-136251423"},{"credibility":1,"name":"Party's over for scammers who went on spending spree after $240M bitcoin theft — NBC Washington","type":"news_article","url":"https://www.nbcwashington.com/news/local/partys-over-for-scammers-who-went-on-a-spending-spree-after-a-240m-bitcoin-theft/4151017/"},{"credibility":1,"name":"The first Bitcoin RICO case comes for a DOJ that gutted its ability to build it — Fortune","type":"news_article","url":"https://fortune.com/2026/09/07/malone-lam-bitcoin-rico-plea-doj-crypto-unit/"},{"credibility":2,"name":"Scammer behind $245 million crypto heist pleads guilty to RICO charges — The Record (Recorded Future News)","type":"news_article","url":"https://therecord.media/scammer-behind-245-million-crypto-heist-pleads-guilty-rico"},{"credibility":2,"name":"Cryptocurrency scam ringleader pleads guilty to defrauding victims of $250 million — Courthouse News Service","type":"news_article","url":"https://www.courthousenews.com/cryptocurrency-scam-ringleader-pleads-guilty-to-defrauding-victims-of-250-million/"},{"credibility":2,"name":"Malone Lam pleads guilty to $245 million bitcoin theft conspiracy — Quartz","type":"news_article","url":"https://qz.com/malone-lam-guilty-plea-bitcoin-theft-racketeering-090926"},{"credibility":2,"name":"19-year-old linked to Danbury couple kidnapped in $230M crypto heist is in custody — Newstimes","type":"news_article","url":"https://www.newstimes.com/news/article/danbury-veer-chetal-crypto-theft-kidnapping-arrest-20243479.php"},{"credibility":2,"name":"First they met as teen gamers, then they ran $263m Bitcoin racket, feds say — DL News","type":"news_article","url":"https://dlnews.com/articles/people-culture/bitcoin-thieves-smuggled-bulk-cash-in-squishmallows-toys/"},{"credibility":2,"name":"Another gamer crew member pleads guilty in $263 million Bitcoin heist — DL News","type":"news_article","url":"https://www.dlnews.com/articles/web3/gamer-crew-steals-263-million-bitcoin-for-parties-cars-clothes/"}],"summary":"Malone Lam, a 22-year-old Singaporean national also known online as 'King Greavys,' pleaded guilty on September 9, 2026 in U.S. District Court in Washington, D.C. to one count of racketeering conspiracy for his role as the alleged ringleader of a social engineering enterprise that stole over $245 million in cryptocurrency from multiple victims beginning no later than October 2023. Lam faces a maximum sentence of 20 years in prison, with sentencing guidelines recommending at least 14 years; a status hearing is scheduled for December 8, 2026.","timeline":[{"date":"2023-10-01","event":"Malone Lam becomes roommates with co-conspirators in Texas; prosecutors allege this marks the formation of the 'Social Engineering Enterprise,' which began no later than October 2023.","source":"The Record (Recorded Future News)","source_url":"https://therecord.media/scammer-behind-245-million-crypto-heist-pleads-guilty-rico"},{"date":"2024-07-01","event":"Lam and others allegedly steal approximately $14 million in cryptocurrency from a separate victim, per superseding indictment allegations.","source":"DOJ superseding indictment / DL News","source_url":"https://dlnews.com/articles/people-culture/bitcoin-thieves-smuggled-bulk-cash-in-squishmallows-toys/"},{"date":"2024-08-18","event":"Lam, Danish Zulfiqar, and co-conspirators call a Washington D.C. resident ('R.W.'), impersonating Google and Gemini support representatives. They obtain security codes and drain over 4,100 BTC valued at approximately $245.9 million from the victim's wallets.","source":"DOJ press release / ABC News","source_url":"https://abcnews.com/Business/wireStory/partys-crypto-scammers-spending-spree-after-240-million-136251423"},{"date":"2024-08-25","event":"Approximately one week after the theft, masked men abduct co-conspirator Veer Chetal's parents in Danbury, Connecticut, beating them and attempting to extort cryptocurrency. Witnesses alert police and the kidnappers are apprehended.","source":"Newstimes","source_url":"https://www.newstimes.com/news/article/danbury-veer-chetal-crypto-theft-kidnapping-arrest-20243479.php"},{"date":"2024-09-18","event":"Malone Lam is arrested by the FBI at a Miami mansion. Jeandiel Serrano is arrested the same day at Los Angeles International Airport. Initial charges include conspiracy to commit wire fraud and conspiracy to launder money.","source":"ABC News / NBC News","source_url":"https://abcnews.com/Business/wireStory/partys-crypto-scammers-spending-spree-after-240-million-136251423"},{"date":"2024-11-01","event":"Co-conspirator Veer Chetal pleads guilty to conspiracy charges.","source":"Fortune / NBC News","source_url":"https://fortune.com/2026/09/07/malone-lam-bitcoin-rico-plea-doj-crypto-unit/"},{"date":"2026-09-04","event":"DOJ files a superseding indictment in the case, expanding the alleged enterprise to include additional defendants including Nicholas Dellecave, Mustafa Ibrahim, and Danish Zulfiqar.","source":"DOJ press release","source_url":"https://www.justice.gov/usao-dc/pr/guilty-plea-and-superseding-indictment-announced-social-engineering-scheme-stole-263"},{"date":"2026-09-09","event":"Malone Lam pleads guilty to one count of racketeering conspiracy (RICO) in U.S. District Court, Washington D.C., before Judge Colleen Kollar-Kotelly. He is the eleventh of 18 defendants to plead guilty.","source":"DOJ press release / NBC News","source_url":"https://www.justice.gov/usao-dc/pr/singaporean-ringleader-245-million-cryptocurrency-racketeering-enterprise-pleads-guilty"},{"date":"2026-12-08","event":"Status hearing scheduled before U.S. District Judge Colleen Kollar-Kotelly. Sentencing date not yet set as of the guilty plea.","source":"DOJ press release / The Record","source_url":"https://therecord.media/scammer-behind-245-million-crypto-heist-pleads-guilty-rico"}]},"v":1}

   Verify offline (run on your own machine)

   python -m src.verify_decision 29010ddf-762a-42ea-89e5-4813aba40717copy