Caution in the network: a scammer accidentally revealed himself by asking ZachXBT for help
In the world of cryptocurrency analytics, a telling incident has occurred, once again demonstrating how dangerous attempts to bypass security systems can be. Renowned on-chain detective ZachXBT inadvertently witnessed a scammer giving himself away while trying to recover his funds.
A user under the nickname AmanKesar11 contacted ZachXBT with a complaint about the "unfair" freezing of 5.73 BTC (approximately $475,000) on the Changelly platform. At first glance, the situation looked like a typical dispute between a user and a service. However, as the investigation conducted by ZachXBT revealed, things were much more complicated.
How the Scammer Gave Himself Away
Upon detailed analysis of the transactions, it turned out that the funds in question were directly linked to a series of thefts carried out through social engineering. The victims of these attacks were U.S. citizens, including retirees. The scammers used American exchanges and Bitcoin ATMs to withdraw the stolen funds. According to ZachXBT's estimates, the total damage from this criminal scheme since 2025 exceeds $1 million.
The 5.73 BTC themselves were frozen on Changelly back in March 2025. This is what prompted the individual to seek help from the famous detective. However, during the correspondence, his explanations of the funds' origin kept changing: at times he mentioned a loan, then money from a boss, then the boss's investments in Bitcoin in 2014-2015 through an acquaintance in the U.S.
Most notably, in December 2025, AmanKesar11, by his own account, even filed a complaint with the Indian police over the freeze. This only worsened his situation, as the "evidence" he provided—bank statements—turned out to be in someone else's name and at a different address.
Who the Individual Worked For
Analysis of the screenshots that the individual himself sent allowed ZachXBT to reconstruct the structure of an entire criminal group. The detective suggests that AmanKesar11 is merely an intermediary through whom funds are laundered for a boss known by the pseudonym "Mr Parveen." This is also confirmed by the fact that the provided "evidence" turned out to be falsified.
This incident serves as an important reminder for all members of the crypto community: contacting ZachXBT for help is not a way to recover stolen assets. His tools are designed to uncover crimes, not to conceal them. Scammers trying to use him for their own purposes risk being exposed.
Analyst's comment: This case is a vivid example of how a lack of technical literacy and overconfidence lead to the failure of even the most well-thought-out schemes. In the modern world of cryptocurrencies, anonymity is an illusion that can be easily shattered with competent on-chain analysis. Scammers should remember: every step leaves a digital trace, and sooner or later it will lead to exposure.