The U.S. Department of Justice (DOJ) has charged 12 more individuals in connection with a major cryptocurrency theft operation that netted more than $263 million, deepening a case that already named alleged ringleader Malone Lam as a defendant. The charges, outlined in a superseding indictment, reveal a complex web of digital fraud, identity theft, and money laundering spanning multiple states and countries.

The newly accused individuals are part of a group that reportedly evolved from online gaming circles into a full-fledged cybercrime ring. According to the DOJ, the suspects — mostly from California and aged between 18 and 22 — used their technical skills and online connections to orchestrate a sophisticated criminal enterprise targeting high-net-worth cryptocurrency holders.

Targeted Hacking and Social Engineering

The indictment details how members of the group used SIM-swapping, phishing, and social engineering techniques to gain control of victims’ mobile numbers, emails, and crypto exchange accounts. In some cases, they even burglarized homes to steal physical crypto hardware wallets, often after tracking victims through their online accounts.

The largest single theft occurred on August 18, 2024, when Lam allegedly defrauded a Genesis creditor by stealing 4,100 Bitcoin, valued at over $230 million at the time. Authorities say he accessed the victim’s iCloud to monitor their movements before coordinating a break-in to steal their crypto assets.

To conceal their activity, the group used Virtual Private Networks (VPNs), crypto mixers, and peel chains — a method of breaking down and transferring stolen funds across multiple wallets to obscure the transaction trail.

Lavish Lifestyles Funded by Crypto Theft

Prosecutors revealed that the stolen crypto was used to fund a lavish and reckless lifestyle. Defendants allegedly purchased 28 luxury vehicles, spent hundreds of thousands on nightclub outings, and rented private jets and high-end properties using fake IDs. Some nights reportedly included expenses of up to $500,000.

The DOJ noted that some of the suspects operated under aliases such as “The Accountant” and “Goth Ferrari”, maintaining a low profile in the real world while flaunting wealth online.

Global Reach and Ongoing Investigation

While several of the accused have already been arrested in the United States, authorities believe at least two suspects are residing in Dubai. The DOJ emphasized that the case remains active, with further arrests and charges possible as investigators work with international law enforcement agencies to trace remaining stolen funds.

The defendants now face charges under the Racketeer Influenced and Corrupt Organizations (RICO) Act, along with multiple counts of wire fraud, identity theft, computer intrusion, and money laundering.

“This case underscores how cybercriminals are evolving,” a DOJ spokesperson said. “What began as a group of online gamers turned into an organized and highly damaging cybercrime syndicate.”

logo

blockto.io

info@blockto.io

Blockto.io Copyright © 2025, All rights reserved

News
Rates
Buy
More
We use cookies to personalize content and ads, provide social media features, and analyze our traffic. In accordance with GDPR/AVG and EU cookie regulations, data is processed only with your consent. We may share information about your use of our website with our social media, advertising, and analytics partners, and you can manage or withdraw your consent at any time. View more
Cookies settings
Accept
Privacy & Cookie policy
Privacy & Cookies policy
Cookie name Active

Privacy Policy

At BitxJournal.com, we respect your privacy and are committed to protecting your personal data. This Privacy Policy explains how we collect, process, store, and protect personal information in accordance with the General Data Protection Regulation (GDPR) and AVG (EU privacy legislation).

1. Data Controller

BitxJournal.com acts as the data controller for all personal data processed through this website.

2. Personal Data We Collect

We may collect and process the following categories of data:

Personal Data

  • Name and email address (when you subscribe to newsletters or contact us)

Technical & Usage Data

  • IP address, browser type, operating system

  • Device information

  • Pages visited, referral sources, and interaction data

This data is collected via cookies, log files, and analytics technologies.

3. Legal Basis for Processing

We process personal data only when a lawful basis exists, including:

  • Consent – when you explicitly agree (e.g., cookies, newsletter sign-up)

  • Legitimate interest – to operate, secure, and improve our website

  • Legal obligation – when required by applicable laws

You may withdraw your consent at any time.

4. Purpose of Data Processing

Your data is processed for the following purposes:

  • Operating and maintaining the website

  • Improving content, usability, and performance

  • Sending newsletters or updates (only with consent)

  • Analyzing traffic and user behavior

  • Responding to inquiries or support requests

5. Cookies & Consent Management

We use cookies and similar technologies in compliance with EU Cookie Law.

  • Non-essential cookies are placed only after explicit user consent

  • Users may accept, reject, or manage cookie preferences at any time

  • Consent can be withdrawn without affecting prior lawful processing

Detailed cookie information is available in our Cookie Settings panel.

6. Third-Party Data Processing

We may share limited data with trusted third-party service providers, including:

  • Analytics providers (e.g., Google Analytics)

  • Advertising partners (for personalized or non-personalized ads)

These third parties act as data processors and process data only under contractual obligations compliant with GDPR/AVG.

7. International Data Transfers

Where data is transferred outside the European Economic Area (EEA), we ensure appropriate safeguards are in place, such as Standard Contractual Clauses (SCCs) or equivalent legal mechanisms.

8. Data Retention

We retain personal data only for as long as necessary to fulfill the purposes outlined in this policy or as required by law.

9. Data Security

We implement appropriate technical and organizational security measures to protect personal data against unauthorized access, alteration, disclosure, or destruction.

10. Your GDPR Rights

Under GDPR/AVG, you have the right to:

  • Access your personal data

  • Rectify inaccurate or incomplete data

  • Request data erasure (“right to be forgotten”)

  • Restrict or object to processing

  • Data portability

  • Withdraw consent at any time

  • Lodge a complaint with a supervisory authority

11. Changes to This Privacy Policy

We reserve the right to update this Privacy Policy at any time. Any changes will be posted on this page with a revised effective date.

12. Contact Information

For privacy-related inquiries or GDPR requests, contact:

📧 Email: support@blockto.io
🌐 Website: https://blockto.io

Save settings
Cookies settings