Self-snitching: scammer turned himself in by asking ZachXBT to unfreeze stolen bitcoins
In the world of crypto analytics, stories sometimes emerge that sound like an anecdote but are actually harsh reality. One such case was recently investigated by on-chain detective ZachXBT. The attacker, operating under the nickname AmanKesar11, contacted him personally to complain about the "unfair" freezing of 5.73 BTC (approximately $475,000) on the Changelly platform. Instead of sympathy, he received a full exposure of his criminal activities.
How the Scammer Exposed Himself
After receiving the appeal, ZachXBT, as a professional should, checked the origin of the funds. The transaction chain quickly led him to illegal sources. It turned out that these bitcoins were part of a larger scheme that had brought scammers over $1 million since the beginning of 2025. The funds were stolen from U.S. citizens, including retirees, through social engineering methods, using American exchanges and Bitcoin ATMs.
The 5.73 BTC themselves were frozen on Changelly back in March 2025. This is precisely what prompted the individual to seek help from the famous detective. During the correspondence, AmanKesar11 constantly changed his explanations: sometimes it was a loan, sometimes the boss's money, sometimes "the boss's Bitcoin investments in 2014 and 2015." Most notably, in December 2025, he claimed to have even filed a report with the Indian police due to the freeze, attempting to legitimize his actions.
Who Was Behind the Individual
During the correspondence, AmanKesar11 sent ZachXBT screenshots that became key evidence. Analysis of these documents allowed the structure of the entire group to be reconstructed. According to ZachXBT, the complainant himself is merely a small intermediary through whom money was laundered for a boss hiding under the pseudonym "Mr Parveen." The "evidence" sent—bank statements—were issued in someone else's name and a different address, which only confirmed his involvement in the fraudulent network.
ZachXBT used this case as a warning to the community: he respects confidentiality and is willing to help, but contacting him with a request to "unfreeze" stolen funds is a surefire way to end up at the center of an exposure.
Expert opinion: This case is a vivid example of how a lack of technical literacy and overconfidence work against attackers. In the era of transparent blockchains, attempting to deceive an on-chain detective using his own tools is not just stupidity, but a guaranteed path to complete exposure. Cryptocurrencies do not forgive mistakes, especially such ones.