A complaint about frozen bitcoins turned into an exposure: how a scammer turned himself in to ZachXBT
The crypto community has once again witnessed criminals making the work of detectives easier. The incident on the Changelly platform vividly demonstrates that greed and overconfidence often become the main enemies of wrongdoers. One of them, operating under the nickname AmanKesar11, tried to complain about the "unfair" freezing of 5.73 BTC (about $475,000), but instead of help, he received a full exposure.
Contacting the well-known on-chain detective ZachXBT, user AmanKesar11 claimed that his funds were blocked without justification. However, a professional transaction analysis conducted by ZachXBT instantly revealed the true nature of these bitcoins. It turned out that the funds were obtained through a series of thefts carried out using social engineering methods. The victims were U.S. citizens, including retirees, and the thefts were executed through American exchanges and Bitcoin ATMs.
The Theft Scheme and "Evidence" of Innocence
Further investigation showed that the entire chain of criminal operations, which began in 2025, brought the attackers over $1 million. The 5.73 BTC themselves were frozen on Changelly back in March 2025 — this is precisely what prompted the fraudster to seek help. In an attempt to justify himself, the suspect constantly changed his story: at times claiming it was a loan, then his boss's money, or supposedly the boss's investment in Bitcoin made back in 2014-2015 through an acquaintance in the U.S. Moreover, in December 2025, he even filed a complaint with the Indian police due to the freeze.
However, the real "bombshell" was the screenshots that AmanKesar11 himself sent to ZachXBT. Analysis of these documents made it possible to reconstruct the structure of an entire criminal group. It turned out that the bank statements provided as evidence were issued in someone else's name and to a different address. According to ZachXBT, the suspect himself is merely an intermediary through whom funds are laundered for a boss hiding under the pseudonym "Mr Parveen."
This case serves as a powerful reminder: in the crypto world, anonymity is an illusion, and every step leaves an indelible digital footprint. The professionalism and tools of ZachXBT have once again proven that even the most sophisticated schemes do not guarantee impunity. My professional assessment: this incident underscores the critical importance for exchanges and platforms to implement advanced AML (Anti-Money Laundering) systems and collaborate with on-chain analysts. This not only protects honest users but also dismantles the infrastructure of crypto crime.