Shocking: Teen Bitcoin Scammer Stole $243M, Exposed Identity on Livestream

The world of cryptocurrency often feels like the Wild West, filled with innovation but also rife with risks. One recent case highlights just how vulnerable even experienced users can be to a sophisticated Bitcoin scam, particularly one orchestrated by surprisingly young individuals. This story involves a massive theft, careless mistakes, a famous crypto investigator, and a teen who couldn’t stop scamming.
Unpacking the $243 Million Social Engineering Attack
At the heart of this staggering theft was a carefully planned social engineering attack. Scammers manipulated a victim into revealing sensitive information, bypassing security measures designed to protect significant crypto holdings. Here’s a breakdown of how the attack unfolded:
- **Initial Contact:** The victim received calls spoofed to appear from legitimate companies like Google support.
- **Building Deception:** A follow-up call, this time pretending to be Gemini support, convinced the victim their account was compromised.
- **Bypassing Security:** Believing their account was under attack, the victim was persuaded to reset their 2-factor authentication (2FA).
- **Gaining Access:** The scammers then tricked the victim into using remote access software (AnyDesk) to share their screen, leading to the accidental exposure of their Bitcoin private key.
This multi-step process allowed the attackers to gain full control and drain approximately 4,100 BTC, valued at $243 million at the time, from a single account in August 2024. The culprits? Three self-taught hackers, including 19-year-old Veer Chetal, also known as “Wiz.”
How the Teen Hacker and His Crew Were Caught
Despite pulling off a massive crypto scam, the hackers made crucial errors that led to their downfall. Their undoing began almost immediately after the theft.
Crypto sleuth ZachXBT played a significant role in unraveling the case. Known for his work tracing illicit crypto funds, ZachXBT was aided by an astonishing piece of evidence: the hackers recorded their live reaction to receiving the 4,064 BTC.
Key mistakes included:
- **Livestream Leak:** During the recording, Veer Chetal accidentally revealed his name.
- **Verbal Identification:** Accomplices repeatedly referred to Chetal as “Veer” in recordings and chats.
- **Flaunting Wealth:** Malone Lam, another accomplice, openly flaunted large sums of stolen money on platforms like Discord and Instagram, posting pictures that revealed his location.
- **Reused Identity:** Jeandiel Serrano, who made the spoofed calls, used the same profile picture across multiple platforms, linking his online presence to the scam recordings.
These careless actions, combined with blockchain transaction tracing that followed the movement of funds (which were split and swapped across numerous exchanges and different cryptocurrencies like LTC, ETH, and XMR), allowed ZachXBT and investigators to connect the individuals to the massive Bitcoin scam. Veer Chetal’s share was quickly linked to luxury purchases like cars, jewelry, and watches.
A Second Crypto Scam While Out on Bail?
In a bizarre turn, Veer Chetal agreed to cooperate with authorities after his initial arrest, pleading guilty to the $243 million theft. He forfeited assets, including 30 luxury watches and millions in ETH. He was released on bond in October 2024.
However, while out of jail and supposedly cooperating, Chetal allegedly engaged in another social engineering scam. This time, a New Jersey resident was tricked by fake support calls (again, impersonating Gemini and Google) into revealing a crypto wallet seed phrase. Approximately $2 million in cryptocurrency was stolen.
Investigators traced a portion of these funds ($200,000) to an online gambling platform. A VPN failure during one session exposed the user’s real IP address, which traced back to Chetal’s residence. Chetal admitted receiving the $200,000, acknowledging he knew it was likely tied to illegal activity. A judge highlighted that this amount was so insignificant to Chetal that he gambled and lost it all within minutes, using this as a reason to deny his request for re-release on bond.
Lessons from the Teen Hacker Case
The Veer Chetal case offers stark warnings for everyone in the crypto space, particularly parents. It demonstrates how easily tech-savvy young people can fall into high-stakes digital crime and the devastating consequences that follow. This Bitcoin scam wasn’t just about financial loss; Chetal’s parents were targeted in a kidnapping attempt linked to the stolen funds.
Key takeaways include:
- **Social Engineering Risks:** Be highly skeptical of unsolicited calls or messages asking for sensitive information or access to your devices/accounts, even if they seem to be from legitimate companies.
- **Protecting Private Keys and 2FA:** Never share private keys or seed phrases. Be extremely cautious when asked to disable or reset 2FA.
- **Parental Vigilance:** Parents need to be aware of the risks in the digital economy, including how teens might get involved in crypto trading or illicit activities. Open communication and monitoring digital behavior are crucial.
- **The Power of On-Chain Analysis:** Cases like this show the effectiveness of blockchain tracing tools and investigators like ZachXBT in following stolen funds.
This story serves as a compelling reminder that in the fast-evolving world of crypto, vigilance, security awareness, and open communication are not just optional – they are essential defenses against sophisticated threats.