Crypto news

21.06.2026
15:18

A scammer accidentally turned himself in by complaining to ZachXBT about the freezing of 5.73 BTC.

A story worthy of a crypto-thriller script: a figure under the alias AmanKesar11 personally reached out to on-chain detective ZachXBT, complaining about the "unfair" freezing of 5.73 BTC (approximately $475,000) on the Changelly platform. After conducting a thorough analysis, ZachXBT determined that these funds are directly linked to a series of thefts from U.S. citizens, including retirees, through social engineering manipulations, hacks of American exchanges, and the use of Bitcoin ATMs.

How the Scammer Exposed Himself

Upon receiving the message, ZachXBT traced the entire chain of transactions using his own tools. It turned out that the incoming funds originated from illegal sources—thefts carried out via social engineering targeting U.S. residents. According to the detective, the entire linked chain of thefts has netted the perpetrators over $1 million since the start of 2025. The 5.73 BTC themselves were frozen on Changelly back in March 2025—which is precisely why the figure decided to seek help.

Diagram of the movement of stolen bitcoins: from U.S. exchanges and ATMs through group wallets to freezing on Changelly
Diagram of the movement of stolen funds: from U.S. exchanges and ATMs to freezing on Changelly.

In his correspondence with ZachXBT, the figure constantly changed his explanations for the origin of the money: at times it was a loan, then funds sent by a boss, or supposedly the boss's investment in Bitcoin "in 2014 and 2015" through an acquaintance in the U.S. Most curiously, in December 2025, according to his own words, he even filed a complaint with the Indian police over the freeze, attempting to legitimize his status.

Who the Figure Worked For

Screenshots of emails sent by AmanKesar11 himself allowed ZachXBT to reconstruct the structure of the entire group. The detective suggests that the figure is merely an intermediary through whom money is laundered for a boss under the pseudonym "Mr Parveen." This conclusion is supported by "evidence" provided by the figure himself: bank statements turned out to be issued under a different name and address.

ZachXBT addressed his followers with a warning: he respects privacy and is willing to help, but one should not contact him with the aim of recovering stolen funds. This case is a vivid example of how even experienced scammers can make a fatal mistake when trying to regain control over criminal capital.

Expert Opinion: This incident underscores the critical importance of on-chain analytics in combating crypto fraud. Even when attempting to legitimize through complaints, traces in the blockchain cannot be hidden. Market players should remember: blockchain transparency is not an enemy, but a tool for maintaining trust in the industry.