Self-doxxing: A scammer complained to ZachXBT about frozen BTC and exposed his own network
A curious incident occurred in the crypto community, once again demonstrating that criminals often fall victim to their own overconfidence. Renowned on-chain detective ZachXBT received a message from a user under the nickname AmanKesar11, who complained about the "unfair" freezing of 5.73 BTC (approximately $475,000) on the Changelly platform. Instead of sympathy, the detective conducted his own investigation, which turned out to be a complete fiasco for the person who reached out.
How a Complaint Revealed a Crime
By checking the transaction through his analytical tools, ZachXBT determined that the frozen funds were directly linked to a series of thefts carried out using social engineering methods. The victims of the criminals were US citizens, including retirees, whose assets were stolen through American exchanges and Bitcoin ATMs. According to the detective's estimates, the total damage from this entire chain of thefts has exceeded $1 million since the beginning of 2025.
The 5.73 BTC themselves were frozen on Changelly back in March 2025. This is precisely what prompted the individual to seek help, unaware that he was essentially turning himself and his accomplices over to law enforcement.
The Scheme and the Main Figure
During the correspondence, AmanKesar11 provided ZachXBT with screenshots and documents that, in his view, were supposed to prove the legitimate origin of the funds. However, these "proofs" only strengthened the detective's suspicions. The bank statements sent by the scammer were made out in someone else's name and contained an incorrect address. ZachXBT concluded that the person who reached out was merely an intermediary through whom funds were being laundered for a boss hiding under the pseudonym "Mr Parveen."
This story is a vivid example of how a lack of technical literacy and the desire to recover "stuck" funds can lead to the complete collapse of a criminal scheme. ZachXBT has repeatedly warned his audience: his channels are for helping victims of fraud, not for recovering stolen assets. This incident is the best confirmation of that.
Analyst's Comment: This situation is a classic case of an "operational error" in cryptocurrency crime. Scammers often underestimate the capabilities of blockchain analytics and consider themselves invulnerable. But as practice shows, one mistake is enough for the entire scheme to collapse, and the perpetrator's name becomes public knowledge. For the market, this is a good signal: transparency tools are working effectively.