In August 2024, a cryptocurrency investor in Washington, D.C., lost more than $240 million in Bitcoin — without a single breach of an exchange or any malware. The scheme was a carefully orchestrated social engineering attack that netted over 4,100 BTC and led to charges against 18 people.
Impersonating Google and Gemini
The scammers reportedly posed as employees of Google and Gemini, a major cryptocurrency exchange. They convinced the victim that something was wrong with his accounts and needed urgent fixing. By building false trust, they gained access to his Google Drive and security codes, unlocking the crypto wallet.
A 22-Year-Old Mastermind?
Malone Lam, a 22-year-old school dropout from Singapore, was found guilty for his role, marking the 11th conviction among 18 people tied to the case. The stolen Bitcoin was laundered through multiple crypto exchanges in an attempt to cover the group’s tracks.
The case cracked open when another suspect, Jeandiel Serrano, failed to hide his IP address while creating an exchange account intended to hold nearly $30 million in stolen cryptocurrency. Serrano was later arrested on September 18, 2024, at Los Angeles International Airport wearing a watch worth about $500,000. He initially denied involvement but ultimately admitted to the scheme.
No Hacking Required
The group didn’t rely on advanced software or brute-force techniques. Instead, they created a fake security emergency and manipulated the victim into voluntarily handing over sensitive information. This ‘simple trick’ continues to prove effective as crypto scams grow more sophisticated on the human side.
Lavish Spending and Other Crimes
Prosecutors noted the group used similar scams in other crypto thefts, with some members meeting through online gaming forums. Proceeds were spent on luxury vehicles, high-end homes, and pricey nights out. Lam allegedly purchased more than 30 luxury cars and was known for heavy nightclub spending.
Authorities are also warning that crypto theft is increasingly physical. In a separate U.S. case, criminals kidnapped the parents of a Bitcoin holder to pressure him into revealing his wallet access. In another New York case, a crypto holder was reportedly kidnapped and tortured for his password.