A naive scammer turned himself in by complaining to ZachXBT about his bitcoins being frozen.
In the world of cryptocurrency investigations, a blatant case has occurred that once again confirms: the stupidity of scammers knows no bounds. On-chain detective ZachXBT encountered a situation where the attacker himself provided all the evidence by asking for help. A user under the alias AmanKesar11 complained about the "unfair" freezing of 5.73 BTC (approximately $475,000) on the Changelly platform. However, an investigation revealed that these funds were stolen from U.S. citizens.
After receiving the message, ZachXBT, using his blockchain analysis tools, traced the origin of the transaction. It turned out that the funds came from illegal sources — thefts carried out through social engineering. The victims were U.S. residents, including retirees, and the funds were withdrawn through American exchanges and Bitcoin ATMs.
How the Scammer Gave Himself Away
According to ZachXBT's analysis, the entire chain of thefts related to this incident has netted the attackers over $1 million since the start of 2025. The 5.73 BTC themselves were frozen on Changelly back in March 2025. This is precisely what prompted the individual to seek help.
Interestingly, AmanKesar11's explanations for the origin of the funds kept changing: sometimes it was a loan, sometimes money from a boss, and sometimes supposedly the boss's investments in Bitcoin "in 2014 and 2015" through an acquaintance in the U.S. Moreover, in December 2025, the individual even filed a complaint with the Indian police over the freeze, trying to portray himself as a victim.
Who Was the Individual Working For?
In the correspondence, AmanKesar11 sent screenshots of emails that allowed ZachXBT to reconstruct the structure of the entire group. The detective concluded that the individual is merely an intermediary through whom money is laundered for a boss using the alias "Mr Parveen."
This conclusion was reached thanks to the "evidence" that the individual himself provided: bank statements turned out to be in someone else's name and at a different address. ZachXBT issued a warning to his followers: he can be asked for help, and he respects privacy, but seeking him out to recover stolen funds is not advisable — it is a path to exposure.
Expert opinion: This case is a classic example of how criminal incompetence and greed lead to failure. Scammers, accustomed to operating in the shadows, often forget that the blockchain is a public ledger. Contacting ZachXBT was a fatal mistake that not only revealed the intermediary's identity but also shed light on the entire criminal network. For the community, this is a reminder: on-chain analytics remains one of the most powerful tools in the fight against crypto crime.