Man pleads guilty in a $263 million stolen crypto laundering

A man in California has pleaded guilty to laundering crypto tied to a national social engineering group that stole roughly 4,100 BTC. The 22-year-old man, Evan Tangeman, admitted to participating in a Racketeer Influenced and Corrupt Organization in a plea deal before U.S. District Court Judge Colleen Kollar-Kotelly. 

According to the prosecutors in the case, the stolen crypto, 4,100 BTC, was worth approximately $263 million at the time of the theft and has since increased in value to roughly $368.5 million. The federal prosecutors revealed that Tangeman laundered approximately $3.5 million on behalf of the organization. Tangeman used false identities to acquire rental properties for the members of the social engineering group. 

Tangeman becomes the ninth defendant to enter a guilty plea

Evan Tangeman is the ninth defendant to plead guilty in the investigation into the crypto laundering scheme, which has so far revealed a network of hackers, target identifiers, and residential burglars operating since October 2023. The court filings revealed that the scheme originated as a small group of acquaintances on an online gaming platform, which evolved into a coordinated criminal network operating across California, New York, Florida, Connecticut, and other locations outside America. 

According to court documents, the hackers utilized a stolen database to target victims with substantial cryptocurrency holdings. The organization then used callers to contact the identified victims directly by luring them into giving compromising information about their accounts. The prosecutors stated that callers told victims their accounts had been compromised and that they needed to take immediate action to safeguard their assets. The scheme relied heavily on social engineering tricks rather than sophisticated technical exploits. 

The hackers were also allegedly involved with a group of individuals who planned and made physical break-ins to target hardware wallets. The residential burglars targeted victims who store digital wallets or seed phrases in their homes. 

The group’s stolen proceeds have been linked to several expenditures, including nightclub services, luxury handbags, watches, rental properties, private jet rentals, and private security guards. The purchases were distributed across multiple states and internationally to conceal their identity.

Tangeman used a bulk cash converter to convert crypto into cash, which he used to secure rental homes for the group. He used a false name on the lease documents, preventing property owners and authorities from identifying the true occupants. 

The Court unseals a second superseding indictment 

Three additional defenders, including Nicholas Dellecave, Mustafa Ibrahim, and Danish Zulfiqar, have been arrested and charged after Tangeman’s plea deal. The court unsealed the second superseding indictment charging the three additional defendants with participation in the social engineering enterprise. The U.S. government Department of Justice revealed that the case is part of a broad effort to target crypto-related fraud operations that rely on social engineering rather than technical hacking methods. 

Prosecutors have revealed that the hacker group has newly unsealed charges that were not previously included in the trial dates for the newly identified defendants. The court filings revealed that the stolen cryptocurrency transactions, rental agreements, communication logs, and bulk cash conversion activity were used to trace the identities of the defendants. 

So far, Tangeman remains free pending sentencing on April 24, 2026. However, the range of penalties he may face under the federal sentencing guidelines for RICO conspiracy and money laundering is yet to be determined. The Justice Department also revealed that the additional defendants may be charged as the investigation continues. The court has also not revealed whether it has recovered the stolen BTC or any part of it, and whether restitution will be sought as part of the sentencing.

Don’t just read crypto news. Understand it. Subscribe to our newsletter. It's free.