The scammer turned himself in: complained to ZachXBT about the freezing of 5.73 BTC and revealed the entire chain of thefts.
A story worthy of a movie script: one participant in a cryptocurrency scam scheme became so careless that he turned to the most famous blockchain detective, ZachXBT, complaining about an "unfair" freeze of funds. The truth that emerged proved fatal for him.
A user under the nickname AmanKesar11 wrote to ZachXBT asking him to look into a situation: 5.73 BTC, worth about $475,000 at the time, had been frozen on the Changelly platform. Motivating his request, he claimed the funds belonged to him and the freeze was unlawful. However, as soon as the detective began his investigation, a shocking detail came to light: the origin of these bitcoins was criminal.
Using his tools for transaction chain analysis, ZachXBT determined that the 5.73 BTC were part of a larger criminal scheme. The funds had been stolen from U.S. citizens, including retirees, through social engineering methods. The attacks were carried out via American exchanges and Bitcoin ATMs. According to ZachXBT's estimates, the total damage caused by the group's activities exceeded $1 million since the beginning of 2025.
The 5.73 BTC themselves had been frozen on Changelly back in March 2025. It was this freeze that forced the scammer to seek help, unaware that he was thereby giving himself away completely. During the correspondence, AmanKesar11 tried to explain the origin of the money: first he mentioned a loan, then funds from a boss, and later even claimed it was "the boss's investments in Bitcoin in 2014 and 2015" through an acquaintance in the U.S. His explanations lacked logic, and the lies became increasingly obvious.
Structure of the Criminal Group
In an attempt to prove his innocence, the individual sent ZachXBT screenshots of correspondence and bank statements. However, these "proofs" worked against him. Analysis showed that he was merely an intermediary through whom funds were laundered for a larger organizer hiding under the pseudonym "Mr Parveen." The bank statements were made out to another name and a different address, which finally confirmed his involvement in the scam scheme.
ZachXBT addressed the community with a warning: he respects user privacy and is willing to help, but contacting him with the aim of recovering stolen funds is not a good idea. This story is a vivid example of how greed and stupidity lead to exposure. In my opinion, this incident underscores the critical importance of blockchain analytics tools in the fight against crypto crime: even the most cunning schemes collapse when scammers start acting impulsively.