Key Highlights
- A gaming-based group used social engineering to steal more than 4,100 Bitcoin from crypto investors across the U.S.
- The stolen funds were spent on luxury mansions, exotic cars, private jets, and high-end nightclub outings.
- Perpetrator Tangeman’s guilty plea marks the ninth conviction in the $263M case, with additional suspects recently arrested.
A massive social engineering scheme that began as friendships on online gaming platforms has led to one of the biggest cryptocurrency theft prosecutions in recent years.
On Tuesday, 22-year-old Evan Tangeman of Newport Beach, California, pleaded guilty in a federal court to laundering millions of dollars in stolen cryptocurrency. He is now the ninth person to plead guilty in the case.
The U.S. Justice Department said Tangeman appeared before U.S. District Court Judge Colleen Kollar-Kotelly, where he acknowledged participating in a Racketeer Influenced and Corrupt Organizations (RICO) conspiracy.
He admitted he helped the group convert more than $3.5 million in stolen virtual currency into cash. The court has scheduled his sentencing for April 24, 2026.
Gaming friends turned criminal syndicate
According to the Second Superseding Indictment, the criminal enterprise began no later than October 2023 and continued through May 2025. What started as a group of young friends who met on gaming platforms evolved into a coordinated network operating inside and outside the country. Members were based in California, Connecticut, New York, Florida, and overseas.
Investigators said the group used stolen databases from compromised websites and servers to identify wealthy cryptocurrency holders. Once they found their targets, callers posing as cybersecurity personnel would phone the victims and claim their accounts were under attack. Believing they were being helped, victims were manipulated into revealing access to their digital wallets.
During the operation, the group managed to steal over 4,100 Bitcoin — worth about $263 million at the time, and valued at more than $370 million today.
Lavish spending and hidden identities
The syndicate did not hide its desire to live extravagantly. Prosecutors explained that the stolen cryptocurrency funded nights in elite nightclubs costing up to half a million dollars, along with luxury handbags worth tens of thousands of dollars, handed out at parties.
The group bought high-end watches priced between $100,000 and $500,000, designer clothing, private jet travel, and even hired private security guards. They rented mansions in some of the most expensive neighborhoods of Los Angeles, the Hamptons, and Miami. Federal investigators later found a fleet of at least 28 exotic cars tied to the group, one of which was valued at $3.8 million.
Tangeman’s involvement began when several group members moved to Los Angeles in late 2023. They needed help turning stolen digital currency into cash and securing luxury rentals.
He used a bulk-cash converter to exchange the cryptocurrency, and then used fake identities on property leases so the true occupants could not be traced. One conversion of stolen funds after a major theft in August 2024 helped the group obtain nearly $3 million in cash for a Miami rental property.
A major theft and attempts to obstruct the FBI
On August 18, 2024, members of the group contacted a victim in Washington, D.C. By pretending to help with a security problem, they convinced the victim to give them access to their cryptocurrency. In that one scam, they were able to steal more than 4,100 Bitcoin.
After Tangeman’s co-conspirator, Malone Lam, was arrested in Miami on September 18, 2024, Tangeman tried to help the group avoid further law-enforcement scrutiny. He accessed Lam’s home security feed to view screenshots of Federal Bureau of Investigation (FBI) agents searching the residence.
He also asked another member of the enterprise to retrieve and destroy digital devices from a Los Angeles home linked to the group.
More arrests as case grows
With Tangeman’s guilty plea, the court unsealed new charges against three additional individuals — Nicholas Dellecave, also known as “Nic” and “Souja,” along with Mustafa Ibrahim and Danish Zulfiqar, who are known by the nicknames “Krust,” “Danny,” and “Meech.” Dellecave was arrested in Miami on December 3, 2025. Ibrahim and Zulfiqar were arrested in Dubai and are accused of helping lead the operation.
The case is being jointly investigated by the U.S. Attorney’s Office for the District of Columbia, the FBI’s Washington Field Office, and IRS-Criminal Investigation in Washington, D.C., with support from several other field offices and federal prosecutors across the country.
Tangeman now awaits sentencing, while the investigation continues to expand — a reminder of how a digital world and a few online friendships can escalate into a criminal empire on a staggering scale.
Also Read: US Seizes Domain Linked to Burma Crypto Scam Compound
