Self-doxing for $475,000: Scammer wrote to ZachXBT himself complaining about frozen stolen bitcoins
On-chain detective ZachXBT published a cautionary tale about how greed and stupidity led to the exposure of a cybercriminal. A user under the pseudonym AmanKesar11 contacted him with a complaint about the "unfair" freezing of 5.73 BTC (approximately $475,000) on the Changelly platform. The scammer, evidently hoping for help with the unfreezing, instead received a full on-chain analysis that revealed the funds had been stolen from American citizens.
Using his transaction tracking tools, ZachXBT quickly determined that the origin of these bitcoins traced back to a series of thefts carried out through social engineering. The attacks targeted US residents, including retirees, via American crypto exchanges and Bitcoin ATMs. According to the detective's estimates, the total damage from the entire chain of crimes has exceeded $1 million since the beginning of 2025.
How the Scammer Exposed Himself
The 5.73 BTC themselves had been frozen on Changelly back in March 2025. This is precisely what prompted the individual to seek help from the well-known investigator. However, his explanations for the origin of the funds kept changing: from a personal loan to "the boss's investment in Bitcoin in 2014-2015." The most ironic part is that in December 2025, AmanKesar11, by his own account, even filed a complaint with the Indian police over the freeze, likely trying to create an appearance of legality.
During the correspondence, the individual sent ZachXBT screenshots that allowed the structure of the entire criminal group to be reconstructed. The analysis showed that AmanKesar11 is merely an intermediary through whom money is laundered for a boss operating under the pseudonym "Mr Parveen." The key evidence turned out to be bank statements sent by the individual himself: they were issued under a different name and address.
Cryptalist Analysis
This case is a classic example of how a lack of basic knowledge about cryptocurrency transparency destroys criminals. The scammer, accustomed to impunity in the fiat world, did not even realize that his transactions were an open book. Personally, I believe such incidents will occur more and more frequently: with the growing popularity of on-chain analytics and tools like ZachXBT, hiding the origin of funds is becoming nearly impossible. Criminals should remember: do not file complaints with those who can read your criminal history through the blockchain.