SPY +0.04%
BND -0.14%
QQQ -0.49%
DIA +0.16%
VNQ +0.22%
GLD -0.71%
BTC -1.97%
AAPL +1.57%
GOOGL +3.60%
NVDA -2.69%
MSFT +1.04%
META +4.01%
AMZN +0.69%
TSLA -1.91%
UBER -1.27%
GS -4.20%
BAC -4.84%
JPM -0.20%
BRK.A +1.65%
COST +0.05%
XOM +2.25%
BABA +0.77%
WMT +2.24%
SPCX -3.13%
DIS -0.46%
F -2.59%
  • Discounts and special offers
  • Subscriber-only articles and interviews
  • Breaking news and trending topics

Already a subscriber?

By signing up, you accept Moneywise's Terms of Use, Subscription Agreement, and Privacy Policy.

Not interested ?

Top Stories
Person holding phone with Google Verification code messages wisely/Shutterstock

A 22-year-old eighth-grade dropout stole $245 million in a Google impersonation scheme — then blew $569,000 at a club in one night

A 22-year-old man who dropped out of school in the eighth grade pleaded guilty on Sept. 8 to helping steal more than $245 million in cryptocurrency after teaming up with friends.

According to the Associated Press, Malone Lam used proceeds from the theft to buy luxury cars, rent Miami mansions and spend millions at nightclubs. One night at a Los Angeles club, he reportedly spent $569,000.

Advertisement

The money didn’t come from a lucky crypto investment, either. Prosecutors say it was stolen from a Washington, D.C., resident in August 2024, in one of the largest cryptocurrency thefts in U.S. history. The group allegedly posed as representatives of Google and the Gemini crypto exchange, and the victim lost a staggering $245 million in digital assets.

The money news that actually matters.

By signing up, you accept Moneywise Terms of Use, Subscription Agreement, and Privacy Policy.

How the group allegedly got hold of the money is another part of the story. A scam doesn’t always begin with a suspicious-looking email or an obvious fake website.

What happened?

Lam, a Singaporean citizen who had been living in Miami, pleaded guilty to participating in a federal racketeering conspiracy.

The Justice Department says the international cybercrime operation began around October 2023 and continued until approximately May 2025. The group allegedly used social engineering to steal cryptocurrency and move the money around to hide where it came from. Prosecutors say the group formed through connections made on online gaming platforms and included people based in California, Connecticut, New York, Florida and abroad.

Lam and his associates allegedly posed as representatives of Google and the Gemini cryptocurrency exchange. They convinced the victim to give them access to his Google Drive and reveal security codes, according to prosecutors.

That gave the group access to more than 4,100 bitcoin, worth over $245 million at the time. The money was then laundered and converted into cash. Prosecutors say Lam used some of it to buy more than 30 luxury cars, including custom Porsches, Lamborghinis and Ferraris. He also bought a $2 million watch and spent millions at clubs.

Lam is one of 18 defendants charged in the case and the 11th to plead guilty, according to the Associated Press. He faces a maximum sentence of 20 years in prison. A status hearing is scheduled for Dec. 8, 2026.

Must Read

How scammers can trick you into giving up your crypto

You don’t have to be sitting on millions in crypto to become a target.

Advertisement

The FBI’s Internet Crime Complaint Center reported a record $16.6 billion in losses from internet crime and scams in 2024. Cryptocurrency-related fraud accounted for at least $9.3 billion of that total, with the FBI reporting that crypto fraud increased sharply from the previous year.

Those numbers include everything from investment scams to account takeovers. But many of these schemes start in a familiar way — someone reaches out claiming there is a problem with your account.

The person might say they’re from a crypto exchange, a bank or a technology company. They could tell you there’s suspicious activity, ask you to verify your identity or say you need to secure your account..

In Lam’s case, prosecutors say the scammers posed as representatives of Google and Gemini and convinced the victim to provide access to his Google Drive and security codes.

Advertisement

For anyone with a crypto account, it’s worth slowing down when an unexpected message asks for information that could give someone access to your money.

Don’t click on a link in the message or hand over a password, security code or private key. Instead, go directly to the company’s website or app and contact it through a phone number or support channel you know is legitimate.

The same goes for anyone telling you to move your crypto to another wallet to “protect” it. If the person contacted you out of the blue and is asking you to move your money, stop before doing anything.

The FBI recommends reporting suspected internet scams through its Internet Crime Complaint Center. Even if you aren’t sure whether you’ve been scammed, filing a report can give investigators information about how these schemes are operating.

With cryptocurrency, once you’ve handed over control of your money, getting it back can be extremely difficult, if not outright impossible.

You May Also Like

Share this:
Laura Grande Contributor

Laura Grande is a freelance contributor with nearly 15 years of industry experience. Throughout her career she's written about and edited a range of topics, from personal finance and politics to health and pop culture.

more from Laura Grande

Explore the latest

Disclaimer

The content provided on Moneywise is information to help users become financially literate. It is neither investment, tax nor legal advice, is not intended to be relied upon as a forecast, research or investment advice, and is not a recommendation, offer or solicitation to buy or sell any securities, enter into any loan, mortgage or insurance agreements or to adopt any investment strategy. Tax, investment and all other decisions should be made, as appropriate, only with guidance from a qualified professional. We make no representation or warranty of any kind, either express or implied, with respect to the data provided, the timeliness thereof, the results to be obtained by the use thereof or any other matter. Advertisers are not responsible for the content of this site, including any editorials or reviews that may appear on this site. For complete and current information on any advertiser product, please visit their website.

†Terms and Conditions apply.