US Marshals arrest Veer Chetal ‘Wiz,’ third suspect in $240M Genesis creditor crypto scam

US Marshalls have reportedly arrested Wiz (Veer Chetal), the third of the hacker trio of Greavys (Malone Iam) and Box (Jeandiel Serrano), who performed a 2024 $243 million crypto heist that targeted a single victim, a Genesis creditor, via social engineering tactics.

The trio used spoofed phone numbers and fake support calls to impersonate Google and Gemini representatives, manipulating the victim into transferring funds and resetting their two-factor authentication.

The largest transaction happened at 4:05 am UTC when they transferred 4064 BTC, valued at $238 million, in a single transaction. The moment it happened was captured on a screen share Zach included his revelation.

Veer Chetal played a major role in the heist

According to Zach, Wiz (Veer) received a large cut from the loot but made the mistake of leaking his full name during the theft which was captured on the screenshare.

He was also referred to by his Veer name in multiple recordings by his accomplices. Zach shared a mugshot of him on X as an update to the thread, pending an official update from the appropriate authorities.

Veer, who is 19, was apprehended by US Marshals and faces years of imprisonment if convicted in court.

Update: Wiz (Veer Chetal) was arrested by US Marshall’s and here is his mug shot. pic.twitter.com/O25UU25VhR

— ZachXBT (@zachxbt) March 25, 2025

His arrest comes months after Greaves and Box were apprehended

According to an unsealed indictment, Greavys’ real identity is Malone Lam, a citizen of Singapore who lives in Miami and Los Angeles, while Box was identified as Jeandiel Serrano of Los Angeles.

The indictment revealed both were arrested sometime in September 2024 and charged with conspiring to steal and launder cryptocurrency. They were set to appear in separate federal courts in California and Florida on Thursday, September 19, 2024 according to the Justice Department.

According to Zach’s investigation, a cluster of the stolen funds was allegedly used to purchase luxury goods including cars, watches, jewelry and designer clothes. Unlike the other two, Malone had not revealed his identity during the heist but his flashy lifestyle gave him away.

With his loot, Lam allegedly purchased a fleet of luxury vehicles, including a Pagani Huayra worth $3.8 million, a Lamborghini Revuelto worth $1 million, and custom Porsches and Ferraris.

Authorities have reported that 22 luxury vehicles belonging to Lam are still missing, including a white Lamborghini with his name on it.

Aside from the luxury cars, Malone also rented multiple mansions and acquired luxury watches, purchasing one of the watches for about $1.8 million.

Within the short period of time that he got the loot, Malone quickly built himself a reputation in the Los Angeles nightlife scenes because of how he spent. He would give out handbags to strangers, including influencers, many of whom would recount their experience in Instagram videos.

Malone was linked to the loot after accidentally sharing an address used to purchase luxury clothing.

Greavys was the first to be arrested. He was located via OSINT in LA/Miami because his friends kept posting his location on social media every night.

He also had an Instagram account where he shared photos of himself using his name in 2024. Greavys’ partner tried to warn Malone of the trouble headed his way after her boyfriend’s arrest, and he tried to flee but was apprehended in the process.

Box and Wiz converted most of the funds to XMR, but they slipped up by accidentally linking the laundered funds with the dirty funds in multiple instances.

11/ While most of the funds were converted to XMR both Box and Wiz accidentally linked the laundered funds with the dirty funds on multiple instances.

a) Wiz during screenshare showed an address he sent funds to for designer clothes which had millions in exposure to the cluster… pic.twitter.com/L0e2zzguyG

— ZachXBT (@zachxbt) September 19, 2024

CFInvestigators, zeroshadow, ZachXBT and Binance Security were able to use this information to freeze over $9 million, with $500,000 returned to the victim.

Lam is currently facing two counts of indictment in the District of Columbia for conspiracy to commit wire fraud and conspiracy to launder monetary instruments. Each charge he’s accused of carries a maximum term of 20 years.

He is presently being held in Virginia, with his lawyer Scott Armstrong noting that his trial will occur in October 2025. The lawyer also said Lam wants to file other legal attacks, with most of them being suppressive motions that require the US government to provide meaningful discovery in the case against him.

The crypto fraudster, who is considered a flight risk, is also reportedly calling for the search warrant affidavits and reports relevant to the searches that were carried out in his case.

According to prosecutors, Lam could be looking at between 168 and 210 months in jail due to the gravity of the crime, with about $100 million in stolen Bitcoin still missing.

Cryptopolitan Academy: Want to grow your money in 2025? Learn how to do it with DeFi in our upcoming webclass. Save Your Spot