Scandalous blunder: scammer turns himself in by asking ZachXBT for help
In the world of cryptocurrency security, a curious but instructive incident has occurred. One of the attackers, operating under the nickname AmanKesar11, was so convinced of his impunity that he turned to the well-known on-chain detective ZachXBT for help. The reason was a complaint about the "unfair" freezing of 5.73 BTC (about $475,000) on the Changelly platform.
ZachXBT, upon receiving the request, conducted a standard check of the origin of the funds. The results were revealing: it turned out that these bitcoins are directly linked to a series of thefts from US citizens. The criminal scheme included social engineering methods targeting retirees and other vulnerable individuals, using American crypto exchanges and Bitcoin ATMs.
How the scammer gave himself away
During the investigation, ZachXBT established that the overall chain of thefts involving AmanKesar11 had brought the criminals over $1 million since the beginning of 2025. The 5.73 BTC themselves were frozen on Changelly back in March 2025, which prompted the individual to seek "justice." His explanations for the origin of the funds constantly changed: from a loan to "the boss's investment in Bitcoin in 2014-2015" through an acquaintance in the US. Notably, in December 2025, he even filed a complaint with the Indian police over the block, trying to portray himself as the victim.
Who is behind the individual
Analysis of the screenshots and documents that AmanKesar11 himself sent to ZachXBT as "evidence" made it possible to reconstruct the structure of the entire group. It turned out that the bank statements were issued in someone else's name and a different address. According to the detective's version, AmanKesar11 is merely an intermediary through whom funds are laundered for a boss known by the pseudonym "Mr Parveen."
This case is a classic example of how greed and stupidity outweigh caution. The scammer, confident in his cunning, provided all the evidence himself by turning to someone who professionally searches for it. My expert assessment: such incidents highlight the critical importance of promptly blocking suspicious funds on centralized platforms. Changelly acted flawlessly, stopping the transaction before the stolen assets could be irretrievably lost. This also serves as a stern warning to all participants in illegal schemes: even the most sophisticated attempt to "recover" blocked funds can lead to complete exposure.