This 20-year-old executed one of the largest personal thefts in history.

His name is Lin Malong.

In August 2024, he defrauded a victim of 4,100 bitcoins and used the money to purchase 31 supercars.

This is the simple method he used:

20-year-old Singaporean Lin Malong and his accomplice Jandil Serrano stole $230 million worth of cryptocurrency from an anonymous victim months ago, and both were subsequently arrested.

How did this happen?

The scammer first triggered a notification of 'unauthorized Google account access' through technical means, alerting the victim to the anomaly.

A few days later, Lin Malong, impersonating a Google employee, called the victim to inquire about the details of the 'unauthorized accesses'.

After multiple communications, he gradually manipulated the victim, obtaining enough information to successfully access the victim's Google Drive.

In Google Drive, they discovered the victim's personal information, including details of their cryptocurrency assets on the Gemini platform.

Then, his accomplice Jandil impersonated an employee of the Gemini platform and contacted the victim again.

Jandil successfully convinced the victim to download a software that supposedly could 'protect cryptocurrency assets'.

The scammer used this software to steal the victim's private keys and took as many as 4,100 bitcoins.

At that time, the total value of these bitcoins reached $230 million.

The two then laundered the stolen funds through multiple cryptocurrency exchanges and mixing services.

So how were they caught?

Lin Malong began his reckless spending with his share of the stolen funds.

He spent recklessly on the streets of Los Angeles, splurging $569,000 in one night at a nightclub!

He even gifted several women five Hermès Birkin bags at the nightclub.

Court documents show he purchased 31 supercars, a $2 million watch, and rented multiple luxury apartments in Los Angeles and Miami.

Eventually, he was arrested while flying on a private jet from Los Angeles to Miami.

Lin Malong's theft case demonstrates how social engineering attacks can easily lead to the loss of one's cryptocurrency assets.

Source: