20-Year-Old Stole $230M in Bitcoin, Bought Her a Lamborghini and Funded Her Luxury Lifestyle. Now Facing Decades in Prison.
A 20-year-old Singaporean stole more than 230 million dollars in Bitcoin through social engineering, used part of the proceeds to buy a woman a pink Lamborghini Urus and fund an extravagant lifestyle complete with luxury gifts, and now faces the possibility of decades in federal prison.
Malone Lam Yu Xuan, now 21, and his accomplice Jeandiel Serrano, 21, allegedly targeted a high-net-worth cryptocurrency investor in Washington, D.C. On August 18, 2024, they posed as Google support staff, gained remote access to the victim’s devices, and drained over 4,100 Bitcoin. Federal prosecutors say the pair laundered the funds through exchanges and mixers before embarking on a rapid spending spree that included more than 30 exotic cars, Miami and Los Angeles mansions rented for tens of thousands of dollars per month, nightclub tabs reaching hundreds of thousands in a single evening, high end watches, and designer handbags.
One notable element of the spending involved gifts to women. In a widely circulated video, a woman describes a young man approaching her in a club, handing her an authentic Hermès Birkin bag still in its box, and simply walking away after she questioned its legitimacy. Reports tie similar gestures, including the pink Lamborghini Urus, to Lam’s efforts to impress acquaintances.
Lam, who used online monikers such as “Anne Hathaway” and “$$$”, and Serrano operated as part of a larger social engineering enterprise that authorities later charged under RICO statutes, similar to other high-profile cases involving alleged organized activity in the hip-hop and entertainment world. The scheme allegedly continued even after their September 2024 arrests. As recently as May 2026, Lam appeared in federal court where progress toward resolving the case was reported. He returns to court on June 18.
The case highlights vulnerabilities in cryptocurrency security and the speed with which stolen digital assets can convert into tangible luxury. Social engineering remains one of the most effective attack vectors because it exploits human trust rather than technical weaknesses. This incident echoes other recent crypto-related thefts that have drawn significant law enforcement attention.
Federal authorities have recovered only a portion of the stolen Bitcoin. The broader enterprise involved young adults who used proceeds for lifestyles far beyond legitimate means. Lam’s story serves as a cautionary tale about the intersection of digital crime and real world excess, much like other high-profile crime stories covered on HypeFresh.
For full details on the original charges, see the U.S. Department of Justice announcement. Court records for the ongoing case are accessible via PACER under United States v. Lam, 1:24-cr-00417.
