A fake phone call just cost one man $245 million — and the 22-year-old kid who took it from him spent $569,000 in a single night at a Los Angeles nightclub before the FBI finally caught up.
Malone Lam, a Singaporean eighth-grade dropout, pleaded guilty this week in Washington, D.C. to federal racketeering charges in one of the largest single-victim Bitcoin thefts in U.S. history. His score: more than 4,100 Bitcoin — worth over $245 million — lifted from ONE man’s wallet in August 2024.
And he didn’t hack anything. No malware. No exchange exploit. No 51% attack. He made a phone call.
Prosecutors say Lam’s crew posed as representatives of Google and the Gemini exchange in a social-engineering con, convincing the victim to hand over access to his Google Drive and reveal the security codes that let them drain his stack. The victim self-custodied. He did everything right by the book. And it still wasn’t enough — because the attack wasn’t on his wallet, it was on his trust.
Then the money went the way you’d expect from a kid who struck gold he never earned: a $2 million watch, over 30 cars including custom Porsches, Lamborghinis and Ferraris, rented mansions in Miami, and one legendary $569,000 night on the town. The FBI says Lam’s crew was live-streaming parts of the heist to friends online while they did it.
The party lasted exactly one month. Lam was arrested in Miami on September 18, 2024 — after an off-duty cop tipped him off that agents were coming, he threw his phone into Biscayne Bay. From jail, he told associates on a recorded call: “We always talked about what it would be like if I were to go down, but never thought it would be this crazy.”
Here’s the part that should make you angry — and then make you think.
Lam was one of 18 people charged in this case and the 11th to plead guilty. He faces a maximum of 20 years on a federal racketeering conspiracy count — the first Bitcoin-related RICO case in history. Meanwhile the victims watched a kid who never held a real job blow through other people’s money like confetti.
The mainstream takeaway will be “crypto is dangerous, see?” That’s backwards. Bitcoin did what it was supposed to do: the theft was traced on-chain, the FBI caught the thieves, and the justice system is grinding them up. The real lesson is that your stack is only as safe as your weakest human moment — one convincing phone call, one fake login page, one moment of trust, and it’s gone.
Self-custody isn’t a hardware purchase. It’s a lifestyle. We’ve said it before: don’t leave your Bitcoin on exchanges, and choose your wallet like your life depends on it — because one wrong trust decision and your whole stack is somebody else’s nightclub tab.
Want to buy Bitcoin without handing your keys to a stranger? Get started with Bull Bitcoin — the exchange that respects self-custody. Use coupon code LOVEISBITCOIN at https://loveisbitcoin.com/bull and stack in your own wallet, not theirs.
Your wallet is safe from hackers. But is it safe from one convincing phone call? Could you spot a fake Google support rep before handing over your seeds? Tell us in the comments. — And be honest: when’s the last time you actually verified who you were talking to before moving a sat?
HE STOLE $245 MILLION IN BITCOIN WITH ONE FAKE GOOGLE CALL — THEN BLEW $569,000 IN A SINGLE NIGHT AT A CLUB
