Verify a decision

{"actor":"system:backfill","investigation_id":"b25ece9e-564b-4b4c-ad8c-98410fd7b404","kind":"publish","page_slug":"gamer-crew-263m-social-engineering-ring-new-defendants","published_at":"2026-06-15T23:21:23.128Z","sequence_num":1,"snapshot":{"content_type":"investigation","entity_name":"Gamer Crew $263M Social Engineering Ring (New Defendants)","sections":[{"content":"Federal prosecutors in the U.S. Attorney's Office for the District of Columbia have designated this criminal network the 'Social Engineering Enterprise' (SE Enterprise). The DOJ applied the Racketeer Influenced and Corrupt Organizations Act (RICO) — a statute historically reserved for organized crime syndicates — to prosecute the group as a unified criminal enterprise. The IRS Criminal Investigation division and FBI jointly investigated the case. The enterprise began no later than October 2023 and continued through at least May 2025, with membership drawn primarily from individuals who met through online gaming platforms. Members were based in California, Connecticut, New York, Florida, and abroad. The enterprise's activities spanned at least two superseding indictments, the most recent of which was announced in June 2026.","heading":"Overview and Designations","severity":"critical","sources":[{"credibility":1,"name":"DOJ USAO-DC: Guilty Plea and Superseding Indictment Announced","type":"regulatory","url":"https://www.justice.gov/usao-dc/pr/guilty-plea-and-superseding-indictment-announced-social-engineering-scheme-stole-263"},{"credibility":1,"name":"IRS Criminal Investigation: Guilty Plea and Superseding Indictment","type":"regulatory","url":"https://www.irs.gov/compliance/criminal-investigation/guilty-plea-and-superseding-indictment-announced-in-social-engineering-scheme-that-stole-263-million-in-cryptocurrency"},{"credibility":2,"name":"TRM Labs: DOJ Uses Organized Crime Statute in $263M Cryptocurrency Case","type":"research","url":"https://www.trmlabs.com/resources/blog/doj-uses-organized-crime-statute-in-263-million-cryptocurrency-theft-money-laundering-and-home-invasion-conspiracy"}]},{"content":"On August 18, 2024, Malone Lam, Danish Zulfiqar, and others contacted a victim in Washington, D.C. and, through fraudulent communications impersonating support staff at major technology and financial companies, obtained over 4,100 Bitcoin. At the time of the theft, those Bitcoin were valued at approximately $263 million; they were valued at over $368 million as of late 2025 and over $383 million in early 2026. The theft from this single victim constitutes the largest documented instance within the SE Enterprise. A separate theft totaling over $14 million from a second victim occurred in July 2024. Additional thefts from other U.S. victims brought the total losses to hundreds of millions of dollars. In February 2024, the first documented theft involved 100 BTC (approximately $5 million) from a victim in Winnsboro, Texas.","heading":"Primary Theft: 4,100 BTC from Washington D.C. Victim","severity":"critical","sources":[{"credibility":1,"name":"DOJ USAO-DC: Guilty Plea and Superseding Indictment Announced","type":"regulatory","url":"https://www.justice.gov/usao-dc/pr/guilty-plea-and-superseding-indictment-announced-social-engineering-scheme-stole-263"},{"credibility":2,"name":"Decrypt: Ninth Defendant Pleads Guilty in $263M Crypto Social-Engineering Scheme","type":"news_article","url":"https://decrypt.co/351576/ninth-defendant-pleads-guilty-263m-crypto-scheme"},{"credibility":2,"name":"The Register: $250M Crypto-Robbing Gang Member Sentenced","type":"news_article","url":"https://www.theregister.com/cyber-crime/2026/05/07/250m-crypto-robbing-gangs-dirty-work-guy-sentenced-to-65-years-behind-bars/5234787"}]},{"content":"The SE Enterprise operated through a structured division of labor with at least six defined roles. Database hackers breached websites and servers to obtain cryptocurrency users' personal information and account data. Organizers used the stolen databases to identify high-net-worth cryptocurrency holders as targets. Callers — at least six individuals — conducted voice phishing attacks, impersonating support representatives from major cryptocurrency exchanges, email providers, and technology companies such as Google, to convince victims that their accounts were under attack and to induce them to transfer funds or reveal private keys and seed phrases. Money launderers converted stolen cryptocurrency into fiat currency through privacy coins such as Monero, crypto-to-cash conversion services, and unlicensed exchange brokers; proceeds were also routed through peel chains, cross-chain DeFi swaps, and high-risk Asian exchanges. Residential burglars — the enterprise's 'instrument of last resort' when remote fraud failed — physically broke into victims' homes to steal hardware cryptocurrency wallets. Cash shipments were concealed inside Squishmallow stuffed animals sent through the U.S. mail, according to court documents cited in news coverage.","heading":"Criminal Methods: Multi-Role Social Engineering Operation","severity":"critical","sources":[{"credibility":1,"name":"IRS Criminal Investigation: Guilty Plea and Superseding Indictment","type":"regulatory","url":"https://www.irs.gov/compliance/criminal-investigation/guilty-plea-and-superseding-indictment-announced-in-social-engineering-scheme-that-stole-263-million-in-cryptocurrency"},{"credibility":2,"name":"TRM Labs: DOJ Uses Organized Crime Statute in $263M Cryptocurrency Case","type":"research","url":"https://www.trmlabs.com/resources/blog/doj-uses-organized-crime-statute-in-263-million-cryptocurrency-theft-money-laundering-and-home-invasion-conspiracy"},{"credibility":2,"name":"DL News: Gamer Crew Member Pleads Guilty in $263 Million Bitcoin Heist","type":"news_article","url":"https://www.dlnews.com/articles/web3/gamer-crew-steals-263-million-bitcoin-for-parties-cars-clothes/"},{"credibility":2,"name":"WUSA9: 14 Young Men Who Met Through Online Gaming Stole $263M","type":"news_article","url":"https://www.wusa9.com/article/news/crime/rico-conspiracy-cryptocurrency-bitcoin-scheme-criminal-enterprise-luxury-squishmallow/65-7f94ba2b-5a32-4bd9-87ad-a9ef77ec76d8"}]},{"content":"The initial indictment, filed September 19, 2024, named Malone Lam (aliases 'Anne Hathaway,' '$$$,' 'King Greavys'), a 20-year-old Singapore citizen who lived in Miami and Los Angeles, as a primary organizer and alleged ringleader. Lam was arrested by the FBI on September 18, 2024 in Miami; he allegedly discarded his mobile phone into Biscayne Bay before his arrest, reportedly after being warned by an off-duty police officer. Jeandiel Serrano was also charged in the initial indictment. Veer Chetal, 19, of Danbury, Connecticut, was among the early defendants and alleged to have participated in the August 2024 D.C. theft alongside Lam. Chetal pleaded guilty to fraud and money laundering conspiracy and agreed to testify against co-defendants. Notably, approximately one week after the August 2024 theft, Chetal's parents were assaulted and kidnapped in a ransom plot in Danbury, Connecticut, by individuals seeking to recover cryptocurrency believed to be in Chetal's possession — an attack later linked to Adam Iza (alias 'The Godfather'), a California cryptocurrency businessman who separately pleaded guilty to conspiracy charges in June 2026.","heading":"Defendants: Original Indictment (September 2024)","severity":"critical","sources":[{"credibility":1,"name":"DOJ USAO-DC: Indictment Charges Two in $230 Million Cryptocurrency Scam","type":"regulatory","url":"https://www.justice.gov/usao-dc/pr/indictment-charges-two-230-million-cryptocurrency-scam"},{"credibility":2,"name":"NBC Connecticut: CT Man Whose Parents Were Kidnapped After $245M Bitcoin Theft Pleads Guilty","type":"news_article","url":"https://www.nbcconnecticut.com/news/local/ct-man-parents-kidnapped-bitcoin-theft-pleads-guilty-federal-charges/3593599/"},{"credibility":2,"name":"FOX 11 Los Angeles: California Crypto 'Godfather' Pleads Guilty in Bold Kidnapping Plot","type":"news_article","url":"https://www.foxla.com/news/california-crypto-godfather-adam-iza-guilty-connecticut-kidnapping"},{"credibility":2,"name":"Malay Mail: How 20-Year-Old Singaporean Malone Lam Allegedly Stole $230M in Cryptocurrency","type":"news_article","url":"https://www.malaymail.com/news/singapore/2024/10/24/how-20-year-old-singaporean-malone-lam-and-his-co-conspirators-allegedly-stole-us230-million-in-cryptocurrency-and-went-on-a-spending-spree/154706"}]},{"content":"On May 16, 2025, prosecutors unsealed a first superseding indictment adding 12 defendants and expanding the alleged total losses to over $263 million. Among the newly charged: Kunal Mehta (aliases 'Shrek,' 'Papa,' 'The Accountant'), 45, who pleaded guilty to RICO conspiracy and admitted to laundering at least $25 million through shell companies, crypto-to-cash conversions, and wire transfers. Mehta became the eighth defendant to enter a guilty plea. Marlon Ferro (alias 'GothFerrari'), 20, of Santa Ana, California, served as the enterprise's primary residential burglar; he pleaded guilty on October 17, 2025, and was sentenced to 78 months in prison on May 7, 2026, and ordered to pay $2.5 million in restitution. Ferro broke into homes in multiple states and stole hardware wallets while associates including Malone Lam — operating from pretrial detention — monitored victims' iCloud locations in real time. Hamza Doost, Joel Cortez, and Evan Tangeman were also among those alleged to have operated unlicensed crypto-to-cash conversion services for the enterprise. Other defendants are alleged to have served as target identifiers, callers, and money launderers. At least two defendants named in this superseding indictment were believed at the time to be fugitives in Dubai.","heading":"Defendants: First Superseding Indictment (May 2025) — 12 Additional Defendants","severity":"critical","sources":[{"credibility":1,"name":"DOJ USAO-DC: Additional 12 Defendants Charged in RICO Conspiracy","type":"regulatory","url":"https://www.justice.gov/usao-dc/pr/additional-12-defendants-charged-rico-conspiracy-over-263-million-cryptocurrency-thefts"},{"credibility":1,"name":"DOJ USAO-DC: GothFerrari Sentenced to 78 Months in Prison","type":"regulatory","url":"https://www.justice.gov/usao-dc/pr/gothferrari-sentenced-78-months-prison-role-massive-cryptocurrency-heist"},{"credibility":2,"name":"DL News: Shrek Pleads Guilty Over Role in $263M Crypto Theft","type":"news_article","url":"https://www.dlnews.com/articles/regulation/shrek-pleads-guilty-ove-role-in-263-million-usd-crypto-theft/"},{"credibility":2,"name":"BleepingComputer: California Man Admits to Laundering Crypto Stolen in $230M Heist","type":"news_article","url":"https://www.bleepingcomputer.com/news/security/california-man-admits-to-laundering-crypto-stolen-in-230m-heist/"},{"credibility":2,"name":"The Register: $250M Crypto-Robbing Gang Member Sentenced","type":"news_article","url":"https://www.theregister.com/cyber-crime/2026/05/07/250m-crypto-robbing-gangs-dirty-work-guy-sentenced-to-65-years-behind-bars/5234787"}]},{"content":"A second superseding indictment, announced in June 2026, added three defendants: Nicholas Dellecave (aliases 'Nic,' 'Souja'), arrested in Miami on December 3, 2025; Mustafa Ibrahim (alias 'Krust'), arrested in Dubai on related charges; and Danish Zulfiqar (aliases 'Danny,' 'Meech'), arrested in Dubai on related charges. All three are charged with RICO conspiracy. The second superseding indictment also identifies Danish Zulfiqar as an alleged participant in the August 18, 2024 theft of 4,100 BTC from the D.C. victim, naming him alongside Malone Lam. The arrests of Ibrahim and Zulfiqar in Dubai represent continued international law enforcement cooperation in the case. As of June 2026, nine defendants have entered guilty pleas in the overall investigation.","heading":"Defendants: Second Superseding Indictment (June 2026) — Three New Defendants","severity":"critical","sources":[{"credibility":1,"name":"DOJ USAO-DC: Guilty Plea and Superseding Indictment Announced","type":"regulatory","url":"https://www.justice.gov/usao-dc/pr/guilty-plea-and-superseding-indictment-announced-social-engineering-scheme-stole-263"},{"credibility":1,"name":"IRS Criminal Investigation: Guilty Plea and Superseding Indictment","type":"regulatory","url":"https://www.irs.gov/compliance/criminal-investigation/guilty-plea-and-superseding-indictment-announced-in-social-engineering-scheme-that-stole-263-million-in-cryptocurrency"},{"credibility":2,"name":"Decrypt: Ninth Defendant Pleads Guilty in $263M Crypto Social-Engineering Scheme","type":"news_article","url":"https://decrypt.co/351576/ninth-defendant-pleads-guilty-263m-crypto-scheme"}]},{"content":"As of June 2026, nine defendants have pleaded guilty in the case, all to RICO conspiracy charges before U.S. District Court Judge Colleen Kollar-Kotelly in the District of Columbia. Key resolutions include: Veer Chetal (Connecticut; participant in August 2024 D.C. theft; pleaded guilty and agreed to cooperate); Marlon Ferro ('GothFerrari'; sentenced May 7, 2026 to 78 months in prison, $2.5 million restitution); Kunal Mehta ('Shrek'/'Papa'/'The Accountant'; admitted laundering at least $25 million; eighth defendant to plead guilty); and Evan Tangeman (Newport Beach, California; admitted laundering at least $3.5 million; pleaded guilty December 8, 2025; ninth defendant to plead guilty; sentenced April 24, 2026 to 70 months in prison). Tangeman additionally monitored security camera feeds during FBI searches of Malone Lam's Miami residence following Lam's arrest, and instructed associates to destroy digital devices. Malone Lam, as the alleged ringleader, had a trial date set for October 6, 2025; as of early 2026 plea negotiations were ongoing, with a trial outcome not yet publicly resolved as of the knowledge available for this report.","heading":"Guilty Pleas and Sentencings","severity":"critical","sources":[{"credibility":1,"name":"DOJ USAO-DC: California Money Launderer Sentenced to 70 Months","type":"regulatory","url":"https://www.justice.gov/usao-dc/pr/california-money-launderer-sentenced-dc-70-months-role-scheme-stole-263-million"},{"credibility":1,"name":"DOJ USAO-DC: GothFerrari Sentenced to 78 Months in Prison","type":"regulatory","url":"https://www.justice.gov/usao-dc/pr/gothferrari-sentenced-78-months-prison-role-massive-cryptocurrency-heist"},{"credibility":1,"name":"IRS Criminal Investigation: California Money Launderer Sentenced","type":"regulatory","url":"https://www.irs.gov/compliance/criminal-investigation/california-money-launderer-sentenced-in-dc-to-70-months-for-role-in-scheme-that-stole-263-million"},{"credibility":2,"name":"Decrypt: Money Launderer Sentenced to 70 Months Over $263M Crypto Social-Engineering Scheme","type":"news_article","url":"https://decrypt.co/365606/money-launderer-sentenced-to-70-months-over-263m-crypto-social-engineering-scheme"},{"credibility":2,"name":"Malay Mail: US Court Sets Oct 6 Trial for Singaporean Man in Massive Crypto Theft","type":"news_article","url":"https://www.malaymail.com/news/singapore/2025/03/09/us-court-sets-oct-6-trial-for-singaporean-man-in-massive-us230m-crypto-theft-case/169021"}]},{"content":"Court documents and law enforcement press releases detail extensive luxury spending from stolen proceeds. Documented expenditures include nightclub services at up to $500,000 per evening; exotic cars numbering at least 28 vehicles, ranging in value from approximately $100,000 to $3.8 million each; luxury watches valued between $100,000 and over $500,000 each; designer handbags valued in the tens of thousands of dollars; luxury rental properties in Los Angeles, the Hamptons, and Miami, with monthly rents of $40,000 to $80,000, obtained using false names on leases; private jet rentals; and private security teams. Cash generated from cryptocurrency liquidations was shipped through the U.S. mail concealed inside Squishmallow stuffed animals, according to news coverage of court filings. At least $18.5 million was seized by authorities in connection with the Dubai arrests. Evan Tangeman collected approximately $3 million in cash following the August 2024 theft. Marlon Ferro spent over $255,000 on designer goods for enterprise members.","heading":"Proceeds: Luxury Spending and Asset Profile","severity":"high","sources":[{"credibility":1,"name":"IRS Criminal Investigation: Guilty Plea and Superseding Indictment","type":"regulatory","url":"https://www.irs.gov/compliance/criminal-investigation/guilty-plea-and-superseding-indictment-announced-in-social-engineering-scheme-that-stole-263-million-in-cryptocurrency"},{"credibility":2,"name":"TRM Labs: DOJ Uses Organized Crime Statute in $263M Cryptocurrency Case","type":"research","url":"https://www.trmlabs.com/resources/blog/doj-uses-organized-crime-statute-in-263-million-cryptocurrency-theft-money-laundering-and-home-invasion-conspiracy"},{"credibility":2,"name":"WUSA9: 14 Young Men Who Met Through Online Gaming Stole $263M","type":"news_article","url":"https://www.wusa9.com/article/news/crime/rico-conspiracy-cryptocurrency-bitcoin-scheme-criminal-enterprise-luxury-squishmallow/65-7f94ba2b-5a32-4bd9-87ad-a9ef77ec76d8"},{"credibility":2,"name":"KTLA: SoCal Man Who Laundered $263 Million Sentenced to Prison","type":"news_article","url":"https://ktla.com/news/local-news/socal-man-who-laundered-263-million-in-stolen-cryptocurrency-lived-fantastically-extravagant-lifestyle-sentenced-to-prison/"}]},{"content":"Enterprise members employed multiple laundering layers to obscure the origin of stolen cryptocurrency. Documented techniques include conversion of Bitcoin to Monero (a privacy coin designed to prevent blockchain tracing), routing through opaque cryptocurrency exchanges and crypto-to-cash brokers, peel chains (sending funds through many intermediary addresses), cross-chain swaps via decentralized finance (DeFi) platforms, bulk-cash conversion through unlicensed money services businesses, wire transfers through shell companies established by Kunal Mehta, and cash shipments concealed inside consumer goods mailed through the U.S. Postal Service. On-chain investigator ZachXBT assisted law enforcement in tracing laundering paths, helping freeze approximately $9 million and contributing to early arrests.","heading":"Money Laundering Techniques","severity":"high","sources":[{"credibility":2,"name":"TRM Labs: DOJ Uses Organized Crime Statute in $263M Cryptocurrency Case","type":"research","url":"https://www.trmlabs.com/resources/blog/doj-uses-organized-crime-statute-in-263-million-cryptocurrency-theft-money-laundering-and-home-invasion-conspiracy"},{"credibility":2,"name":"BleepingComputer: US Charges 12 More Suspects Linked to $230 Million Crypto Theft","type":"news_article","url":"https://www.bleepingcomputer.com/news/security/us-charges-12-more-suspects-linked-to-230-million-crypto-theft/"},{"credibility":2,"name":"DL News: Gamer Crew Member Pleads Guilty in $263 Million Bitcoin Heist","type":"news_article","url":"https://www.dlnews.com/articles/web3/gamer-crew-steals-263-million-bitcoin-for-parties-cars-clothes/"}]},{"content":"A violent kidnapping directly linked to the enterprise took place on August 25, 2024, approximately one week after the primary Bitcoin theft. Sushil and Radhika Chetal — parents of defendant Veer Chetal — were rear-ended in their vehicle near Danbury High School in Danbury, Connecticut. Armed attackers forced the couple into a van, beat Sushil Chetal with a baseball bat, dragged Radhika Chetal by her hair, and bound them with duct tape in a ransom attempt targeting cryptocurrency believed to be in Veer Chetal's possession. Adam Iza (alias 'The Godfather,' also identified as Ahmed Faiq), a 25-year-old California cryptocurrency businessman, was charged in connection with orchestrating the kidnapping, along with his brother Saif Faiq and co-conspirator Schwab, who recruited six Florida men to travel to Connecticut for the abduction. Iza pleaded guilty to conspiracy to interfere with commerce by robbery and faced up to 14 years in federal prison at sentencing. While Iza's charges are in a separate prosecution, the kidnapping arose directly from the SE Enterprise's August 2024 theft.","heading":"Related Violent Crimes: Kidnapping","severity":"critical","sources":[{"credibility":2,"name":"NBC Connecticut: CT Man Whose Parents Were Kidnapped After $245M Bitcoin Theft Pleads Guilty","type":"news_article","url":"https://www.nbcconnecticut.com/news/local/ct-man-parents-kidnapped-bitcoin-theft-pleads-guilty-federal-charges/3593599/"},{"credibility":2,"name":"FOX 11 Los Angeles: California Crypto 'Godfather' Pleads Guilty in Bold Kidnapping Plot","type":"news_article","url":"https://www.foxla.com/news/california-crypto-godfather-adam-iza-guilty-connecticut-kidnapping"},{"credibility":2,"name":"Fortune: Bitcoin Heist Led Police to a 'Godfather' Who Hired Sheriff's Deputies as Enforcers","type":"news_article","url":"https://fortune.com/2026/06/03/adam-iza-godfather-bitcoin-heist-kidnapping-deputies-guilty/"}]},{"content":"The DOJ's use of RICO statutes — originally designed to prosecute mafia and cartel organizations — to charge a cryptocurrency theft network is considered a significant legal development by law enforcement analysts. By charging the SE Enterprise as a unified RICO conspiracy rather than as a series of individual fraud cases, prosecutors have enabled broader liability for all members regardless of their specific role in each theft, and have imposed the enhanced penalties associated with organized crime prosecution. TRM Labs characterized the RICO application as illustrative of law enforcement's 'expanding use' of organized crime law 'to prosecute structured cryptocurrency crime networks as unified criminal enterprises.' The case is being prosecuted in the U.S. District Court for the District of Columbia before Judge Colleen Kollar-Kotelly.","heading":"RICO Application and Legal Significance","severity":"medium","sources":[{"credibility":2,"name":"TRM Labs: DOJ Uses Organized Crime Statute in $263M Cryptocurrency Case","type":"research","url":"https://www.trmlabs.com/resources/blog/doj-uses-organized-crime-statute-in-263-million-cryptocurrency-theft-money-laundering-and-home-invasion-conspiracy"},{"credibility":1,"name":"DOJ USAO-DC: Guilty Plea and Superseding Indictment Announced","type":"regulatory","url":"https://www.justice.gov/usao-dc/pr/guilty-plea-and-superseding-indictment-announced-social-engineering-scheme-stole-263"}]}],"sources_used":[{"credibility":1,"name":"DOJ USAO-DC: Guilty Plea and Superseding Indictment Announced in Social Engineering Scheme that Stole $263 Million","type":"regulatory","url":"https://www.justice.gov/usao-dc/pr/guilty-plea-and-superseding-indictment-announced-social-engineering-scheme-stole-263"},{"credibility":1,"name":"IRS Criminal Investigation: Guilty Plea and Superseding Indictment Announced","type":"regulatory","url":"https://www.irs.gov/compliance/criminal-investigation/guilty-plea-and-superseding-indictment-announced-in-social-engineering-scheme-that-stole-263-million-in-cryptocurrency"},{"credibility":1,"name":"IRS Criminal Investigation: California Money Launderer Sentenced","type":"regulatory","url":"https://www.irs.gov/compliance/criminal-investigation/california-money-launderer-sentenced-in-dc-to-70-months-for-role-in-scheme-that-stole-263-million"},{"credibility":1,"name":"DOJ USAO-DC: Additional 12 Defendants Charged in RICO Conspiracy","type":"regulatory","url":"https://www.justice.gov/usao-dc/pr/additional-12-defendants-charged-rico-conspiracy-over-263-million-cryptocurrency-thefts"},{"credibility":1,"name":"DOJ USAO-DC: Indictment Charges Two in $230 Million Cryptocurrency Scam","type":"regulatory","url":"https://www.justice.gov/usao-dc/pr/indictment-charges-two-230-million-cryptocurrency-scam"},{"credibility":1,"name":"DOJ USAO-DC: California Money Launderer Sentenced in D.C. to 70 Months","type":"regulatory","url":"https://www.justice.gov/usao-dc/pr/california-money-launderer-sentenced-dc-70-months-role-scheme-stole-263-million"},{"credibility":1,"name":"DOJ USAO-DC: GothFerrari Sentenced to 78 Months in Prison","type":"regulatory","url":"https://www.justice.gov/usao-dc/pr/gothferrari-sentenced-78-months-prison-role-massive-cryptocurrency-heist"},{"credibility":2,"name":"Decrypt: Ninth Defendant Pleads Guilty in $263M Crypto Social-Engineering Scheme","type":"news_article","url":"https://decrypt.co/351576/ninth-defendant-pleads-guilty-263m-crypto-scheme"},{"credibility":2,"name":"Decrypt: Money Launderer Sentenced to 70 Months Over $263M Crypto Social-Engineering Scheme","type":"news_article","url":"https://decrypt.co/365606/money-launderer-sentenced-to-70-months-over-263m-crypto-social-engineering-scheme"},{"credibility":2,"name":"Bitcoin Magazine: 22-Year-Old Pleads Guilty in Crypto Theft","type":"news_article","url":"https://bitcoinmagazine.com/news/22-year-old-pleads-guilty-in-crypto-theft"},{"credibility":2,"name":"The Block: 22-Year-Old Sentenced to 70 Months for Money Laundering","type":"news_article","url":"https://www.theblock.co/post/398899/22-year-old-sentenced-to-70-months-for-money-laundering-tied-to-263-million-crypto-syndicate"},{"credibility":2,"name":"DL News: Gamer Crew Member Pleads Guilty in $263 Million Bitcoin Heist","type":"news_article","url":"https://www.dlnews.com/articles/web3/gamer-crew-steals-263-million-bitcoin-for-parties-cars-clothes/"},{"credibility":2,"name":"DL News: Shrek Pleads Guilty Over Role in $263M Crypto Theft","type":"news_article","url":"https://www.dlnews.com/articles/regulation/shrek-pleads-guilty-ove-role-in-263-million-usd-crypto-theft/"},{"credibility":2,"name":"TRM Labs: DOJ Uses Organized Crime Statute in $263M Cryptocurrency Case","type":"research","url":"https://www.trmlabs.com/resources/blog/doj-uses-organized-crime-statute-in-263-million-cryptocurrency-theft-money-laundering-and-home-invasion-conspiracy"},{"credibility":2,"name":"BleepingComputer: US Charges 12 More Suspects Linked to $230 Million Crypto Theft","type":"news_article","url":"https://www.bleepingcomputer.com/news/security/us-charges-12-more-suspects-linked-to-230-million-crypto-theft/"},{"credibility":2,"name":"BleepingComputer: California Man Admits to Laundering Crypto Stolen in $230M Heist","type":"news_article","url":"https://www.bleepingcomputer.com/news/security/california-man-admits-to-laundering-crypto-stolen-in-230m-heist/"},{"credibility":2,"name":"The Register: $250M Crypto-Robbing Gang Member Sentenced to 6.5 Years","type":"news_article","url":"https://www.theregister.com/cyber-crime/2026/05/07/250m-crypto-robbing-gangs-dirty-work-guy-sentenced-to-65-years-behind-bars/5234787"},{"credibility":2,"name":"NBC Connecticut: CT Man Whose Parents Were Kidnapped After $245M Bitcoin Theft Pleads Guilty","type":"news_article","url":"https://www.nbcconnecticut.com/news/local/ct-man-parents-kidnapped-bitcoin-theft-pleads-guilty-federal-charges/3593599/"},{"credibility":2,"name":"FOX 11 Los Angeles: California Crypto 'Godfather' Adam Iza Pleads Guilty in Kidnapping Plot","type":"news_article","url":"https://www.foxla.com/news/california-crypto-godfather-adam-iza-guilty-connecticut-kidnapping"},{"credibility":2,"name":"Fortune: Bitcoin Heist Led Police to a 'Godfather' Who Hired Sheriff's Deputies as Enforcers","type":"news_article","url":"https://fortune.com/2026/06/03/adam-iza-godfather-bitcoin-heist-kidnapping-deputies-guilty/"},{"credibility":2,"name":"Malay Mail: How 20-Year-Old Singaporean Malone Lam Allegedly Stole $230M in Cryptocurrency","type":"news_article","url":"https://www.malaymail.com/news/singapore/2024/10/24/how-20-year-old-singaporean-malone-lam-and-his-co-conspirators-allegedly-stole-us230-million-in-cryptocurrency-and-went-on-a-spending-spree/154706"},{"credibility":2,"name":"Malay Mail: US Court Sets Oct 6 Trial for Singaporean Man in Massive Crypto Theft","type":"news_article","url":"https://www.malaymail.com/news/singapore/2025/03/09/us-court-sets-oct-6-trial-for-singaporean-man-in-massive-us230m-crypto-theft-case/169021"},{"credibility":2,"name":"WUSA9: 14 Young Men Who Met Through Online Gaming Stole $263M","type":"news_article","url":"https://www.wusa9.com/article/news/crime/rico-conspiracy-cryptocurrency-bitcoin-scheme-criminal-enterprise-luxury-squishmallow/65-7f94ba2b-5a32-4bd9-87ad-a9ef77ec76d8"},{"credibility":2,"name":"SF Standard: East Bay Teen and America's Largest Crypto Heist","type":"news_article","url":"https://sfstandard.com/2026/05/27/east-bay-teen-laundered-millions-private-jets-nightclubs-ferraris/"},{"credibility":2,"name":"KTLA: SoCal Man Who Laundered $263 Million Sentenced to Prison","type":"news_article","url":"https://ktla.com/news/local-news/socal-man-who-laundered-263-million-in-stolen-cryptocurrency-lived-fantastically-extravagant-lifestyle-sentenced-to-prison/"}],"summary":"The 'Social Engineering Enterprise' (SE Enterprise) is a DOJ-designated RICO criminal organization that stole over $263 million in cryptocurrency — primarily 4,100 BTC from a single Washington, D.C. victim in August 2024 — through a combination of database breaches, impersonation calls, and residential burglaries targeting hardware wallets. The enterprise grew from friendships formed on online gaming platforms and operated from October 2023 through at least May 2025, with at least 17 defendants charged across multiple superseding indictments, nine of whom have pleaded guilty as of early 2026. A second superseding indictment unsealed in June 2026 added three new defendants — Nicholas Dellecave, Mustafa Ibrahim, and Danish Zulfiqar — expanding the prosecution and marking ongoing international coordination with Dubai law enforcement.","timeline":[{"date":"2023-10-01","event":"Social Engineering Enterprise begins operations, per DOJ, no later than October 2023. Members recruited through online gaming platforms.","source":"DOJ USAO-DC Press Release","source_url":"https://www.justice.gov/usao-dc/pr/guilty-plea-and-superseding-indictment-announced-social-engineering-scheme-stole-263"},{"date":"2024-02-01","event":"First documented SE Enterprise theft: 100 BTC (approximately $5 million) stolen from a victim in Winnsboro, Texas.","source":"The Register","source_url":"https://www.theregister.com/cyber-crime/2026/05/07/250m-crypto-robbing-gangs-dirty-work-guy-sentenced-to-65-years-behind-bars/5234787"},{"date":"2024-07-01","event":"Over $14 million stolen from a second victim, per DOJ court filings.","source":"TRM Labs","source_url":"https://www.trmlabs.com/resources/blog/doj-uses-organized-crime-statute-in-263-million-cryptocurrency-theft-money-laundering-and-home-invasion-conspiracy"},{"date":"2024-08-18","event":"Malone Lam, Danish Zulfiqar, and others steal 4,100 BTC ($263 million at the time) from a single victim in Washington, D.C. On-chain investigator ZachXBT traces the funds and assists in freezing approximately $9 million.","source":"DOJ USAO-DC Press Release","source_url":"https://www.justice.gov/usao-dc/pr/guilty-plea-and-superseding-indictment-announced-social-engineering-scheme-stole-263"},{"date":"2024-08-25","event":"Parents of defendant Veer Chetal kidnapped in Danbury, Connecticut by associates of Adam Iza in a ransom plot targeting cryptocurrency.","source":"NBC Connecticut","source_url":"https://www.nbcconnecticut.com/news/local/ct-man-parents-kidnapped-bitcoin-theft-pleads-guilty-federal-charges/3593599/"},{"date":"2024-09-18","event":"Malone Lam arrested in Miami by the FBI. He allegedly discarded his mobile phone into Biscayne Bay before arrest.","source":"Malay Mail","source_url":"https://www.malaymail.com/news/singapore/2024/10/24/how-20-year-old-singaporean-malone-lam-and-his-co-conspirators-allegedly-stole-us230-million-in-cryptocurrency-and-went-on-a-spending-spree/154706"},{"date":"2024-09-19","event":"Initial DOJ indictment filed against Malone Lam and Jeandiel Serrano in the District of Columbia on charges related to stealing over $230 million in cryptocurrency.","source":"DOJ USAO-DC Press Release","source_url":"https://www.justice.gov/usao-dc/pr/indictment-charges-two-230-million-cryptocurrency-scam"},{"date":"2025-03-09","event":"U.S. District Court sets October 6, 2025 as trial date for Malone Lam.","source":"Malay Mail","source_url":"https://www.malaymail.com/news/singapore/2025/03/09/us-court-sets-oct-6-trial-for-singaporean-man-in-massive-us230m-crypto-theft-case/169021"},{"date":"2025-05-16","event":"DOJ unseals first superseding indictment charging 12 additional defendants with RICO conspiracy, expanding total losses to over $263 million.","source":"DOJ USAO-DC Press Release","source_url":"https://www.justice.gov/usao-dc/pr/additional-12-defendants-charged-rico-conspiracy-over-263-million-cryptocurrency-thefts"},{"date":"2025-10-17","event":"Marlon Ferro ('GothFerrari') pleads guilty to RICO conspiracy before Judge Kollar-Kotelly for his role as the enterprise's residential burglar.","source":"DOJ USAO-DC Press Release","source_url":"https://www.justice.gov/usao-dc/pr/gothferrari-sentenced-78-months-prison-role-massive-cryptocurrency-heist"},{"date":"2025-12-03","event":"Nicholas Dellecave (alias 'Souja') arrested in Miami.","source":"IRS Criminal Investigation","source_url":"https://www.irs.gov/compliance/criminal-investigation/guilty-plea-and-superseding-indictment-announced-in-social-engineering-scheme-that-stole-263-million-in-cryptocurrency"},{"date":"2025-12-08","event":"Evan Tangeman, 22, of Newport Beach, California, pleads guilty to RICO conspiracy, becoming the ninth defendant to do so. He admits to laundering at least $3.5 million.","source":"Decrypt","source_url":"https://decrypt.co/351576/ninth-defendant-pleads-guilty-263m-crypto-scheme"},{"date":"2025-12-09","event":"Bitcoin Magazine reports on Evan Tangeman's guilty plea.","source":"Bitcoin Magazine","source_url":"https://bitcoinmagazine.com/news/22-year-old-pleads-guilty-in-crypto-theft"},{"date":"2026-04-24","event":"Evan Tangeman sentenced to 70 months in prison.","source":"DOJ USAO-DC Press Release","source_url":"https://www.justice.gov/usao-dc/pr/california-money-launderer-sentenced-dc-70-months-role-scheme-stole-263-million"},{"date":"2026-05-07","event":"Marlon Ferro ('GothFerrari') sentenced to 78 months in prison and ordered to pay $2.5 million in restitution.","source":"DOJ USAO-DC Press Release","source_url":"https://www.justice.gov/usao-dc/pr/gothferrari-sentenced-78-months-prison-role-massive-cryptocurrency-heist"},{"date":"2026-06-01","event":"Second superseding indictment unsealed, adding Nicholas Dellecave, Mustafa Ibrahim ('Krust'), and Danish Zulfiqar ('Meech') as defendants charged with RICO conspiracy. Ibrahim and Zulfiqar were arrested in Dubai. Total charged defendants reach at least 17; nine have pleaded guilty.","source":"DOJ USAO-DC Press Release","source_url":"https://www.justice.gov/usao-dc/pr/guilty-plea-and-superseding-indictment-announced-social-engineering-scheme-stole-263"}]},"v":1}