Scandalous blunder: scammer turned himself in by asking ZachXBT to unlock bitcoins
A story that could serve as the plot of a detective series unfolded in the cryptocurrency space. On-chain detective ZachXBT received a message from a user under the nickname AmanKesar11 complaining about the "unfair" freezing of 5.73 BTC (approximately $475,000) on the Changelly platform. However, the investigation revealed something far more serious: these funds were directly linked to a series of thefts targeting U.S. citizens.
How the Scammer Exposed His Network
By tracing the transaction through his own tools, ZachXBT discovered that the origin of the bitcoins traced back to illegal activity. The funds were stolen using social engineering methods targeting American users, including retirees, through local exchanges and Bitcoin ATMs. According to the analysis, the total damage from this criminal chain has exceeded $1 million since the beginning of 2025.
The 5.73 BTC themselves were frozen on Changelly back in March 2025. This is precisely what prompted the hapless scammer to seek help from the renowned detective. During the correspondence, the suspect constantly changed his story about the origin of the funds: at times he called them a loan, then money from his boss, then claimed they were his boss's investments in Bitcoin "in 2014 and 2015" through an acquaintance in the U.S. Moreover, in December 2025, he even stated that he had filed a complaint with the Indian police over the freeze, trying to give his actions an appearance of legality.
Structure of the Criminal Group
The screenshots of correspondence sent by AmanKesar11 became a goldmine for ZachXBT. He reconstructed the full structure of the group. The detective concluded that AmanKesar11 was not the main organizer, but merely an intermediary through whom funds were laundered for a boss hiding under the pseudonym "Mr Parveen". The key evidence was the bank statements provided by the suspect himself: they were issued in someone else's name and at a different address.
ZachXBT addressed the community with a warning: he respects privacy and is willing to help victims, but one should not try to use him to regain access to stolen funds. This story is a vivid example of how overconfidence and incompetence lead criminals to exposure.
My professional opinion: This incident underscores the critical importance of on-chain analytics and community vigilance. Scammers who believe that cryptocurrency provides complete anonymity are deeply mistaken. Every transaction leaves an indelible trace, and professionals like ZachXBT know how to read these traces. For investors, this is another signal: do not blindly trust promises of quick profits and always verify counterparties through public blockchain tools.