Fake Google, Gemini Staff Tricked Victim in $245M BTC Heist
Security teams can dissect a high-impact social engineering attack where impersonators of Google and Gemini extracted Google Drive access and security codes to steal 4,100 bitcoin.
Cybersecurity entity
Malone Lam
PersonOf the tracked stories, 3 of 4 also mention Bitcoin, the most common co-covered peer. Coverage clusters in threat-intel, which accounts for 3 of those 4, with the remainder spread across 1 other category. Malone Lam appears in 4 tracked Cybersecurity stories published from September 7, 2026 through September 11, 2026.
Last mentioned: Sep 11, 2026
Entity pulse
Recent coverage · Malone Lam
↑
4 stories
avg impact
0% positive
75% negative
Coverage balance Negative coverage leads. Negative coverage exceeds positive coverage by 75 percentage points.
Figures are computed live from our source-verified story record — see our methodology for how impact and sentiment are derived.
What the coverage shows about Malone Lam
Of the tracked stories, 3 of 4 also mention Bitcoin, the most common co-covered peer. Coverage clusters in threat-intel, which accounts for 3 of those 4, with the remainder spread across 1 other category. Malone Lam appears in 4 tracked Cybersecurity stories published from September 7, 2026 through September 11, 2026. The tracked stories average 2 original sources each.
- Stories tracked
- 4
- Sources per story
- 2
Computed from the 4 stories linked to this entity, with beat comparisons drawn from all 19 Cybersecurity stories published in the same date window. Shares are omitted below five stories and comparisons below a twenty-story baseline.
Coverage cohort
Appears alongside
Other entities that clear the same relevance threshold in stories also covering Malone Lam. Shared-story counts are live from our verified record — not editorial picks.
Timeline
-
Status hearing scheduled
A status hearing is scheduled for December 8, 2026; no sentencing date has been announced.
-
Guilty plea entered
Lam pleaded guilty to one count of RICO conspiracy before Judge Colleen Kollar-Kotelly in the U.S. District Court for the District of Columbia.
-
Lam pleads guilty to racketeering conspiracy
Malone Lam pleaded guilty before Judge Colleen Kollar-Kotelly, becoming the 11th of 18 defendants to do so. Sentencing was not immediately scheduled; he faces a maximum of 20 years.
-
Enterprise operation window ends
Court documents indicate the operation continued through at least May 2025.
-
FBI arrests Lam in Miami
After a month-long spending spree on cars, mansions, watches, and nightclubs, FBI agents arrested Lam in Miami. An off-duty officer had tipped him off that authorities were coming.
-
4,100 BTC stolen from Washington, DC resident
Lam and Jeandiel Serrano allegedly defrauded a Washington, DC resident of more than 4,100 Bitcoin, worth over $230 million at the time.
-
Victim duped out of 4,100 bitcoin
Co-conspirators posed as Google and Gemini representatives to trick a Washington, DC man into granting Google Drive access and revealing security codes, allowing Lam to siphon off more than 4,100 bitcoin worth over $245 million.
-
Victim identified as Genesis creditor
Blockchain investigator ZachXBT identified the victim as a Genesis creditor, connecting the theft to the crypto lender's collapse.
-
Operation begins and Lam moves to the US
Court documents say the enterprise operated from no later than October 2023; Lam moved to the US the same month under the Visa Waiver Program.
-
Crypto scam network begins operating
Prosecutors say Lam and a network of young men carried out a string of crypto scams starting in 2023.
Stories mentioning Malone Lam 4
Crypto theft ring used social engineering to steal 4,100 BTC
The Lam case shows a mature threat model blending social engineering, online community recruitment, and physical home invasions to steal $245M–$265M in cryptocurrency. Security teams can extract direct lessons about high-net-worth targeting and the limits of technical controls.
Social Engineering Led $245M Bitcoin Theft; Guilty Plea Shows Human Risk
Cybersecurity teams get a high-loss case study in how social engineering, not technical exploitation, enabled a network of young attackers to steal $245 million in Bitcoin from a D.C. resident. The guilty plea underscores the need for identity verification and transaction confirmation controls.
$240M Bitcoin Heist Suspects' Spending Spree Broke Their OpSec
Attackers socially engineered a victim into surrendering bitcoin keys worth more than $240 million, then burned their anonymity on luxury purchases. The FBI arrest within a month shows how spend-out behavior, rather than blockchain laundering alone, can expose cybercriminals. Cybersecurity teams can extract lessons in identity obfuscation, transaction tracing, and social engineering defense.
Malone Lam is linked from 4 stories on this site, each scored at or above our 35% relevance threshold — see how these pages are built.
See something wrong on this page — a misattributed entity, a wrong stat, a broken source link? Report a data issue.