22-Year-Old Pleads Guilty in $263 Million Social Engineering Crypto Theft

22-Year-Old Pleads Guilty in $263 Million Social Engineering Crypto Theft

N
News Editor 01
2026-07-03 01:00:14
Evan Tangeman, 22, from Newport Beach, California, has pleaded guilty to participating in a RICO conspiracy involving a multi-state social engineering scheme that stole approximately $263 million in cryptocurrency. Tangeman admitted to laundering $3.5 million in stolen crypto. The group used stolen databases, fake exchange staff calls, and residential burglaries to obtain hardware wallets. Tangeman converted crypto to cash and leased high-end properties. He is the ninth defendant to plead guilty. A superseding indictment has added three more defendants, including individuals arrested in Miami and Dubai. The stolen funds funded lavish lifestyles including $500K per night nightclubs, luxury goods, and a fleet of 28 exotic cars.
social engineeringRICO conspiracycrypto theftmoney launderingBitcoinhardware wallet22-year-old guilty plea263 million

A 22-year-old California resident, Evan Tangeman, has pleaded guilty to his role in a multi-state social engineering scheme that stole roughly $263 million in cryptocurrency. Tangeman, of Newport Beach, admitted to laundering $3.5 million in stolen crypto for the criminal enterprise, the U.S. Attorney’s Office announced Monday.

Tangeman pleaded guilty to participating in a Racketeer Influenced and Corrupt Organizations (RICO) conspiracy before U.S. District Court Judge Colleen Kollar-Kotelly. Sentencing is scheduled for April 24, 2026. He is the ninth defendant to enter a guilty plea in this specific investigation.

The court also unsealed the Second Superseding Indictment, adding three more defendants: Nicholas Dellecave (“Nic” or “Souja”), Mustafa Ibrahim (“Krust”), and Danish Zulfiqar (“Danny” or “Meech”), facing charges of RICO conspiracy along with other members of the Social Engineering Enterprise (SE Enterprise). Dellecave was arrested in Miami on Dec. 3, 2025; Ibrahim and Zulfiqar were recently arrested in Dubai.

According to prosecutors, the enterprise began in October 2023 and continued through at least May 2025. It originated from friendships formed on online gaming platforms, with members in California, Connecticut, New York, Florida, and abroad.

Details of the rampant crypto crime

The scheme involved database hackers, organizers, target identifiers, callers, and residential burglars who targeted hardware wallets containing cryptocurrency. Hackers used stolen databases to identify high-value targets; callers impersonated crypto exchange staff or email providers to trick victims into revealing credentials; burglars physically broke into homes to steal hardware wallets.

Tangeman acted as a money launderer. He converted stolen cryptocurrency into cash using a bulk-cash converter, then used the cash to obtain rental homes for group members, often listing false names on leases. Some properties rented for $40,000 to $80,000 per month; he secured homes in Los Angeles and Miami.

The largest known theft occurred on Aug. 18, 2024. Tangeman’s co-conspirators, including Malone Lam and Danish Zulfiqar, deceived a victim in Washington, D.C., into transferring over 4,100 Bitcoin. At the time, the crypto was valued at $263 million; the same amount is now worth more than $368 million.

Tangeman also helped Lam obtain roughly $3 million in cash from stolen cryptocurrency to secure a rental property. After Lam’s arrest on Sept. 18, 2024, Tangeman accessed home security systems to screenshot FBI agents during searches and asked another member to retrieve and destroy digital devices from Lam’s Los Angeles residence.

Prosecutors said the enterprise spent stolen funds on a lavish lifestyle: nightclub services up to $500,000 per night, luxury handbags, watches valued between $100,000 and $500,000, designer clothing, rental homes, private jets, security guards, and a fleet of at least 28 exotic cars ranging from $100,000 to $3.8 million.

Three additional defendants unsealed

With Tangeman’s guilty plea, prosecutors have unsealed charges against three additional defendants. The Second Superseding Indictment shows the investigation is ongoing. Authorities have not disclosed whether any of the stolen Bitcoin has been recovered or whether restitution will be sought.

The SE Enterprise relied on social engineering rather than sophisticated hacking techniques. The group’s operations originated from online friendships, but the stolen funds funded high-profile purchases and drew attention. Authorities said the defendants’ extravagant spending played a role in exposing their activities.

Tangeman remains free pending sentencing. Federal penalties for RICO conspiracy and money laundering carry significant prison terms. The Justice Department has indicated that additional charges may follow as the investigation continues.

A RICO conspiracy occurs when individuals agree to take part in a pattern of criminal activity, or racketeering, through an ‘enterprise.’ Under the Racketeer Influenced and Corrupt Organizations Act (RICO), prosecutors can connect separate crimes and individuals under a single charge, focusing on proving a shared criminal objective, not that every participant committed every act.

This article was originally published by Bit.Fan. For more cryptocurrency news and market insights, visit www.bit.fan.
300

Disclaimer:

The market information, project data, and third-party content displayed on this platform are for industry information sharing only and do not constitute any form of investment advice or return commitment.

Cryptocurrency trading carries high risks. Users should fully assess their risk tolerance and make independent decisions. All profits, losses, and legal responsibilities are borne by the users themselves.