Self-snitching: Scammer turned himself in to ZachXBT, complaining about the blocking of 5.73 BTC
A story worthy of a crypto detective series unfolded on the network: a figure hiding under the nickname AmanKesar11 personally provided analyst ZachXBT with all the evidence of his involvement in a large-scale fraudulent scheme. The reason for the appeal was a complaint about what he considered an "unfair" freeze of 5.73 BTC (approximately $475,000) on the Changelly platform. As it turned out, these funds were part of the proceeds from organized thefts targeting U.S. citizens.
How a complaint became a confession
Upon receiving the message, ZachXBT conducted a standard check of the transaction chain. The result was expected for an experienced analyst: the origin of the funds was criminal. The money came from victims of social engineering — mostly elderly Americans whose savings were withdrawn through U.S. exchanges and Bitcoin ATMs. The total damage from this group's activities since the beginning of 2025 has exceeded $1 million.
The 5.73 BTC themselves were frozen on Changelly back in March 2025. It was precisely the inability to access these assets that forced the scammer to seek help from someone who professionally exposes such schemes. In the correspondence, the figure constantly changed versions of the funds' origin: sometimes it was a loan, sometimes money from a boss, sometimes "the boss's investment in Bitcoin in 2014–2015" through an acquaintance in the U.S. Moreover, in December 2025, he even filed a complaint with the police in India, trying to legitimize his claims.
Group structure and the role of "Mr. Parveen"
The key moment was that AmanKesar11 himself sent ZachXBT screenshots of correspondence and bank statements. Analysis of these "pieces of evidence" allowed the hierarchy of the entire group to be reconstructed. It turned out that our "complainant" was merely a small intermediary through whom funds were laundered for the scheme's organizer, known under the pseudonym "Mr Parveen". The bank statements that the figure provided as proof of his innocence were issued in someone else's name and at a different address, which ultimately destroyed his cover story.
This case is a clear example of how a lack of basic knowledge about blockchain forensics and a desperate attempt to recover stolen funds lead to complete collapse. The scammer not only exposed himself but also provided the investigator with a complete map of his criminal network.
Expert opinion: This story is a powerful reminder that anonymity in cryptocurrencies is an illusion, especially for those who do not know how to properly cover their tracks. ZachXBT has once again demonstrated that even the most convoluted scheme cannot withstand professional analysis. For the market, this is a positive signal: tracking tools are becoming increasingly effective, and sooner or later, every scammer will face the consequences of their actions. Investors should remember: if you have been deceived, do not try to resolve the issue through "intermediaries" — this may only worsen the situation.