A crypto scammer turned himself in by complaining to ZachXBT about the blocking of 5.73 BTC
A major failure in the world of cybersecurity: an attacker who lost access to 5.73 BTC (approximately $475,000) on the Changelly platform himself sought help from the well-known on-chain detective ZachXBT, unaware that he would thereby expose his criminal activity.
The incident, already dubbed one of the most bizarre in the crypto community, began with a complaint from a user under the nickname AmanKesar11. He claimed that his funds had been "unfairly" frozen by the Changelly service. However, ZachXBT, upon receiving this request, conducted a standard transaction check using his own analytical tools. The results were shocking: the chain of incoming funds led to a series of thefts carried out through social engineering.
How the scammer exposed himself
The analysis showed that the victims of the attacks were U.S. citizens, including retirees. The attackers used American exchanges and Bitcoin ATMs to withdraw funds. According to ZachXBT's estimates, the total damage from this group's activities, starting in 2025, exceeds $1 million. The 5.73 BTC themselves were blocked on Changelly back in March 2025 — which is precisely what prompted the individual to seek help.
During the correspondence, AmanKesar11 constantly changed versions of the funds' origin: at times it was a loan, then money from a boss, then "the boss's investment in Bitcoin in 2014-2015" through an acquaintance in the U.S. Most notably, in December 2025, the individual, by his own account, even filed a complaint with the Indian police over the block, attempting to lend legitimacy to his demands.
Who the individual worked for
In an attempt to prove his innocence, AmanKesar11 sent ZachXBT screenshots of correspondence and bank statements. However, these "proofs" became his downfall. The statements turned out to be issued in someone else's name and at a different address. Cross-referencing the data, the detective reconstructed the structure of the entire group and concluded that AmanKesar11 was merely an intermediary (a drop) through whom funds were laundered for a major crypto boss under the pseudonym "Mr Parveen."
This story is a vivid example of how greed and stupidity ruin even well-thought-out schemes. For the community, it is yet another reminder: you can turn to ZachXBT for help, but only if you are truly a victim, not a criminal trying to recover stolen goods.
Expert opinion: This case demonstrates a critical vulnerability in modern money laundering schemes: the use of unprepared drops who are unable to control their emotions and actions. While major players like "Mr Parveen" remain in the shadows, it is these small fry who become the "weak link," allowing on-chain analysts to unravel entire criminal networks.