Scandalous blunder: scammer turned himself in by asking ZachXBT for help
Sometimes justice finds the guilty in the most unexpected ways. One recent incident in the world of cryptocurrency has become a true illustration of how arrogance and greed can lead to downfall. An attacker who tried to launder stolen funds himself sought help from a well-known on-chain detective, thereby giving himself away completely.
It all began when a user under the nickname AmanKesar11 wrote to ZachXBT complaining about the "unfair" freezing of 5.73 BTC (at that time about $475,000) on the Changelly platform. The scammer claimed the funds were blocked without justification and asked for assistance in unlocking them.
However, ZachXBT, known for his experience in tracking cryptocurrency crimes, did not take his word for it. He conducted his own investigation and determined that these bitcoins were part of a larger scheme. It turned out that the funds came from illegal sources — thefts carried out through social engineering targeting US residents, including retirees. The attacks were conducted via American exchanges and Bitcoin ATMs.
How the scammer exposed himself
During the correspondence, AmanKesar11 provided ZachXBT with screenshots that, in his opinion, were supposed to confirm the legitimacy of the funds' origin. However, these "proofs" only worsened his situation. The detective reconstructed the entire transaction chain and found that the total amount of thefts linked to this group exceeded $1 million since the beginning of 2025.
The 5.73 BTC themselves were frozen on Changelly back in March 2025. The scammer tried to convince ZachXBT that these were his personal savings, supposedly invested in Bitcoin in 2014-2015 through an acquaintance in the US. However, his versions constantly changed: sometimes it was a loan, sometimes money from a boss, sometimes "the boss's investments." In December 2025, AmanKesar11 even filed a complaint with the Indian police, attempting to legitimize his actions.
Who the suspect worked for
Thanks to the screenshots sent by the scammer himself, ZachXBT was able to reconstruct the structure of the entire group. It turned out that AmanKesar11 was merely an intermediary through whom funds were laundered for a boss hiding under the pseudonym "Mr Parveen." The bank statements that the suspect provided as "evidence" were issued in someone else's name and at a different address.
ZachXBT addressed his followers with a warning: he respects privacy and is willing to help, but contacting him with requests to recover stolen funds is not a good idea. This case is a vivid example of how criminals, confident in their impunity, give themselves away.
Expert opinion: This story is a powerful signal for the entire crypto community. Even the most sophisticated money laundering schemes can collapse due to a single mistake. On-chain analytics is becoming increasingly accessible and effective, and it is getting harder for scammers to stay in the shadows. I strongly recommend that all market participants pay closer attention to the origin of funds and not try to deceive the system — this can lead to the most unexpected consequences.