Crypto detective ZachXBT exposed a scammer who came to him with a complaint about frozen bitcoins.
In the world of cryptocurrency security, a curious yet instructive incident has occurred. Renowned on-chain detective ZachXBT received a message from a user under the nickname AmanKesar11, who complained about the "unfair" freezing of 5.73 BTC (approximately $475,000) on the Changelly platform. However, instead of receiving help, the scammer himself provided all the evidence of his involvement in the thefts.
How the Scammer Exposed Himself
Conducting a standard transaction check, ZachXBT determined that the funds in AmanKesar11's account had a criminal origin. The chain of deposits led to a series of thefts carried out using social engineering. The victims were U.S. citizens, including retirees, from whom the attackers stole funds from American exchanges and through Bitcoin ATMs. According to the detective, the total damage from this activity has exceeded $1 million since the beginning of 2025.
The 5.73 BTC themselves were frozen on Changelly back in March 2025. This is precisely what prompted the individual to seek help. His explanations for the origin of the funds constantly changed: at times it was a loan, then money from a boss, then "the boss's investment in Bitcoin in 2014-2015" through an acquaintance in the U.S. Notably, in December 2025, AmanKesar11 even filed a complaint with the Indian police regarding the blocking of the funds, attempting to portray himself as a victim.
Who the Individual Worked For
During the correspondence, AmanKesar11 sent ZachXBT screenshots of emails and bank statements. Analysis of these documents made it possible to reconstruct the structure of the entire criminal group. It turned out that the bank statements were issued in someone else's name and at a different address. According to ZachXBT, AmanKesar11 is not the main organizer, but merely an intermediary through whom funds were laundered for a boss hiding under the pseudonym "Mr Parveen."
This case is a vivid illustration of how modern crypto fraud schemes operate. Attackers often use drops and intermediaries to launder funds, but, as practice shows, even such "pawns" can make fatal mistakes.
Expert Opinion
This incident is an excellent example that there is no anonymity in the blockchain, only pseudonymity. Scammers often rely on the ignorance of their victims and intermediaries, but forget that every step they take leaves an indelible digital trail. Contacting ZachXBT was not just stupidity, but an act of desperation that, fortunately, led to exposure. For the community, this is an important signal: even if you consider yourself a "small fry" in the criminal chain, sooner or later you will be found.