A complaint about frozen bitcoins turned into an exposure: the scammer himself gave himself away to an on-chain detective.
In the cryptocurrency world, stories where criminals expose themselves are not uncommon, but this one is particularly striking. Renowned independent on-chain detective ZachXBT received a message from a user under the pseudonym AmanKesar11, who complained about the "unfair" freezing of 5.73 BTC (approximately $475,000) on the Changelly platform. The complainant demanded help in unlocking the funds, but as the investigation revealed, these bitcoins were part of a chain of major thefts targeting American citizens.
How the Scammer Exposed Himself
Upon receiving the request, ZachXBT launched his own investigation using blockchain analysis tools. The results were predictably unfavorable for the sender: the transactions led to illegal sources. The funds were stolen through social engineering schemes targeting U.S. residents, including retirees. Victims were deceived via American exchanges and Bitcoin ATMs.
The total damage from the entire chain of thefts linked to this group exceeded $1 million since the start of 2025. The 5.73 BTC themselves were frozen on Changelly back in March—which is precisely why the individual sought help, unaware that he would expose himself.
AmanKesar11's explanations for the origin of the money kept changing. Initially, he claimed it was a loan, then that the funds were sent by his boss, and later that they were supposedly the boss's investments in Bitcoin "in 2014 and 2015" through an acquaintance in the U.S. Most notably, in December 2025, the individual, by his own account, even filed a complaint with the Indian police over the freeze.
Who the Individual Worked For
In the correspondence, AmanKesar11 sent screenshots of emails, and from these, ZachXBT was able to reconstruct the structure of the entire group. The detective concluded that the individual was merely an intermediary through whom money was laundered for a boss using the pseudonym "Mr Parveen." This conclusion was drawn from the "evidence" the individual himself provided: bank statements turned out to be in someone else's name and at a different address.
ZachXBT issued a warning to his followers: he can be asked for help, he respects privacy, but it is not worth contacting him to recover stolen funds. This story is a clear example of how incompetence and greed among fraudsters lead to their exposure.
Analyst's Comment: This case underscores the critical importance of blockchain transparency. Even if criminals try to cover their tracks, on-chain analysis and the vigilance of platforms like Changelly can not only freeze assets but also bring fraudsters to light. The market is becoming increasingly hostile to malicious actors.