Self-exposure: a scammer complained to ZachXBT about frozen bitcoins and revealed the entire scheme
One of the most ironic cases of self-exposure has occurred in the world of cryptocurrency analytics. Renowned on-chain detective ZachXBT received a complaint from a user under the pseudonym AmanKesar11, who demanded "justice" regarding the freezing of 5.73 BTC (approximately $475,000) on the Changelly platform. However, checking the transaction led to a shocking discovery: these funds were directly linked to a series of thefts from American citizens.
Upon receiving the message, like any professional analyst, I first checked the origin of the funds. Using tools for tracking blockchain transactions, ZachXBT determined that the deposits traced back to illegal sources. This involves an entire network of social engineering targeting US residents, including retirees. The funds were withdrawn through American exchanges and Bitcoin ATMs.
How the Scammer Exposed Himself
The linked chain of thefts brought the attackers over $1 million since the beginning of 2025. The 5.73 BTC themselves were frozen on Changelly back in March 2025 — which is precisely why the individual sought help, naively believing his "problem" would be resolved.
AmanKesar11's explanations for the origin of the money kept changing: at times he claimed it was a loan, then money sent by a boss, then supposedly a "boss's" investment in Bitcoin "in 2014 and 2015" through an acquaintance in the US. The most curious part: in December 2025, the individual, by his own account, even filed a complaint with the Indian police due to the freeze.
Who the Individual Worked For
In the correspondence, AmanKesar11 sent screenshots of emails, and from these, ZachXBT managed to reconstruct the structure of the entire group. As it turned out, the individual is merely an intermediary through whom money is laundered for a boss using the pseudonym "Mr Parveen." This conclusion was confirmed by the "evidence" the individual himself sent: bank statements turned out to be issued in someone else's name and a different address.
This case is a stark reminder that even the most sophisticated scammers sometimes make fatal mistakes. Turning to on-chain detectives with complaints about frozen stolen funds is like asking the police to return a stolen car while sitting behind its wheel.
My professional opinion: This incident underscores the critical importance of blockchain transparency and the work of independent analysts. Scammers relying on the anonymity of cryptocurrencies often forget that every trace on the blockchain is an indelible record. Platforms like Changelly should strengthen their KYC/AML procedures to nip such "complaints" in the bud. For investors, this is a lesson: you can only entrust your funds to verified services with an impeccable reputation.