"Social Engineering Enterprise" Group - crime story series

In the history of cybercrime, it is rare to find cases where staggering sums of money, technical audacity, and a pathological need to flaunt wealth mix in such a dramatic fashion. The case of the group operating under the banner "Social Engineering Enterprise" demonstrates how a band of teenagers managed to execute one of the largest single cryptocurrency thefts in global history, only to lose everything in a matter of weeks.
Through a combination of video footage and the latest official court documents from the U.S. Department of Justice (DOJ), a complete and chilling picture of this case emerges-from innocent skirmishes in Minecraft to a federal racketeering prosecution under the RICO Act.

Born in the Minecraft Universe

It all started in the community centered around a Minecraft server called Cosmic PvP. It was there that teenage players competed, connected on Discord, and looked for ways to make a quick buck. Over time, an extremely antisocial moral compass evolved among some of them.
The group's leader was a Singaporean national, Malone Lam (known online as Graves, born 2004). Lam started out by harassing peers (swatting, ordering cash-on-delivery food to other people's addresses) and trading stolen gaming accounts and rare usernames (so-called "OG handles") on Instagram and X. When hackers within the same community stumbled upon the world of cryptocurrency, they decided to join forces in the real world.
In October 2023, Lam dropped out of school in Singapore and moved to the US. In Texas, along with Conor Flansburg and an Indian student named Veer Chetal (known as Wiz), he rented a house, laying the groundwork for a syndicate that federal prosecutors would later charge with organized criminal activity.

The Manipulation Factory: How They Hunted "Whales"

The group created a precise division of labor that allowed them to flawlessly rob so-called cryptocurrency "whales" (individuals with multi-million dollar wallet balances).
Division of Roles within the Criminal Structure:
·       Target Scouting: Conor Flansburg broke into the databases of companies offering services to the crypto industry or purchased ready-made leaks on the darknet. He filtered lists for email addresses, phone numbers, and balance sizes.
·       Social Engineering: The main "talkers" of the group were Veer Chetal (Wiz) and Jeandiel Serrano (Jax). Serrano perfected the art of fear-based psychological manipulation. He would call victims pretending to be technical support, forcing them to install AnyDesk or TeamViewer software to gain control of their computers. Most strikingly, Serrano and Lam would live-stream the process of duping victims on private Discord channels for their friends to watch.
·       Physical Support: When it turned out that a victim kept their crypto on a secure physical hardware wallet (Cold Wallet), Marlon Ferro (GothFerrari) stepped into action. In one Miami case, while Lam monitored the victim's location via a hacked iCloud account, Ferro physically broke into the home by throwing a brick through a window and stole the device containing millions of dollars.
·       Money Laundering: Kunal Mehta and "Dust" were responsible for the network of exchange offices and logistics. Charging a 10% commission, they exchanged crypto for cash (delivered in bags or stitched inside plush toys) and used straw buyers to register luxury goods under fake identities.

The Heist of the Century: 4,064 Bitcoins in One Day

The group's greatest success also proved to be the nail in their coffin. On August 19, 2024, the teenagers targeted one of the wealthiest private investors in the US.
The attack was carried out in multiple stages:
1.    Psychological Onslaught: The victim was bombarded with notifications about login attempts from IP addresses in Russia and China (using VPNs).
2.    Phishing for Access: Next, Serrano called pretending to be a Google security employee, offering assistance and tricking the victim out of 2FA codes. He thereby seized access to the victim's email inboxes and cloud drives.
3.    The Gemini Theft: In the next step, posing as the Gemini exchange, the teenagers convinced the victim that his funds were at risk. Terrified, the man transferred the first $3 million to the group's alleged "technical wallet."
4.    The Deadly Backup: Seeing via AnyDesk that the victim had a hidden wallet containing a massive fortune on his computer, Serrano suggested making an immediate backup of the wallet to OneDrive for "safety." As soon as the file hit the cloud drive, Lam downloaded it to his own computer.
In a matter of just a few hours, "Social Engineering Enterprise" seized 4,064 Bitcoins worth approximately $240 million. The funds were immediately funneled through mixers and exchanged for Monero and Litecoin using a method known as chain hopping on exchanges without Know Your Customer (KYC) verification.

Living Like a Music Video and the Brutal Retaliation

Having acquired a quarter of a billion dollars, the teenagers completely lost touch with reality. They moved into a massive mansion in Los Angeles and flew on private jets to Miami. Malone Lam bought, among other things, an ultra-rare Pagani Huayra supercar for $3.8 million and a Lamborghini Revuelto for $1 million.
In nightclubs, they could spend $500,000 in a single evening, ordering over 350 bottles of the most expensive alcohol for random strangers and handing out designer handbags worth tens of thousands of dollars to influencers.
However, their ostentation drew the attention of not only the FBI, but also ruthless, real-world criminals. Just a week after the massive heist, a brutal kidnapping took place in the town of Derry. Armed, masked assailants driving a white van intentionally rammed a Lamborghini Urus carrying the parents of 19-year-old Wiz (Veer Chetal). The parents were dragged from the car, severely beaten, and tied up. The kidnappers planned to extort a multi-million dollar cryptocurrency ransom from the teenager.
Only by an incredible stroke of luck—an off-duty FBI agent happened to witness the incident—was the van tracked by police and the parents rescued. The event left Chetal paranoid; his father lost his position as a director at Morgan Stanley due to the scandal, and the teenager himself realized that the noose was tightening around them.

The Great Crash and Betrayal From Within

The end of the organization came in September 2024. On September 18, Malone Lam received information from a paid informant that the FBI was moving in. In a panic, seconds before his arrest, he only managed to throw his phone into Miami's Biscayne Bay. Coordinated raids in California and Florida led to the arrest of the leaders and the seizure of a massive fleet of over 30 luxury vehicles and jewelry.
Facing decades in prison, the solidarity of a group born in a video game quickly shattered:

Most of the money stolen from the victim's wallet vanished into a complex web of cryptocurrency mixers. However, the story of the "Social Engineering Enterprise" remains one of the most spe
ctacular, yet pathetic tales of modern cyber-heists—proving that even the most technically sophisticated plan will collapse when entrusted to emotionally immature teenagers.

Resources:
https://www.justice.gov/usao-dc/pr/indictment-charges-two-230-million-cryptocurrency-scam
https://www.courthousenews.com/230-million-crypto-scam-one-of-largest-single-victim-thefts-in-history-prosecutors-say/
https://www.channelnewsasia.com/world/burglar-jail-us-crypto-heist-250m-malone-lam-6105636
https://www.channelnewsasia.com/world/malone-lam-veer-chetal-bitcoin-theft-crypto-heist-stole-online-scam-charges-jeandiel-serrano-5195071
https://en.wikipedia.org/wiki/Malone_Lam
https://youtu.be/0dtaxkCE0ms?is=wvsTvGG0KNwmjhNy