A random complaint led to exposure: how a scammer turned himself in to ZachXBT
An incident worthy of a detective novel has occurred in the world of cryptocurrency intelligence. Renowned on-chain detective ZachXBT received an unusual request from a user under the pseudonym AmanKesar11. The user complained about the "unfair" freezing of 5.73 BTC (approximately $475,000) on the Changelly platform. However, upon investigation, it turned out that these funds were nothing other than stolen assets belonging to American citizens.
The irony of the situation is that, in trying to regain access to the funds, the individual actually provided ZachXBT with all the necessary evidence. Using his transaction tracking tools, the detective quickly determined that the deposits into AmanKesar11's wallet originated from illegal sources. This involved a whole series of thefts carried out using social engineering methods, targeting US residents, including retirees. The victims were deceived through American exchanges and Bitcoin ATMs.
How the Scammer Exposed Himself
According to ZachXBT, the entire chain of these crimes has netted the perpetrators over $1 million since the beginning of 2025. The 5.73 BTC themselves were frozen on Changelly back in March 2025 — which is precisely why the individual sought help, unaware of who he was dealing with.
AmanKesar11's explanations for the origin of the money kept changing: sometimes it was a loan, sometimes funds sent by a boss, or supposedly the boss's investments in Bitcoin "in 2014 and 2015" through an acquaintance in the US. Most notably, in December 2025, the individual claimed to have even filed a police report in India regarding the freeze, attempting to give his story an appearance of legality.
Who the Individual Worked For
In the correspondence, AmanKesar11 sent screenshots of emails that allowed ZachXBT to reconstruct the structure of the entire group. The detective concluded that the individual is merely an intermediary through whom money is laundered for a boss using the pseudonym "Mr Parveen." This conclusion was reached based on the "evidence" provided by the individual himself: bank statements turned out to be issued under a different name and address.
This case serves as a stark reminder that cryptocurrency transparency does not forgive mistakes. In his message to subscribers, ZachXBT warned: you can ask him for help, and he respects privacy, but it is not worth turning to him to recover stolen funds. My analysis shows that this situation is a classic example of how a lack of basic knowledge about blockchain operation and an attempt to deceive a professional lead to the complete collapse of a criminal scheme.