Turned to ZachXBT for help and exposed himself: scammer accidentally revealed theft of $475,000 in bitcoins
A story worthy of a crime drama unfolded in the crypto community. One user, hiding under the nickname AmanKesar11, naively reached out to the well-known on-chain detective ZachXBT with a complaint about the "unfair" freezing of his funds on the Changelly platform. The amount in question was 5.73 BTC — nearly $475,000. However, instead of sympathy, he received a full exposure of his own criminal activities.
As shown by the transaction analysis conducted by ZachXBT through his tracking tools, the origin of these funds was far from legal. The chain of receipts led directly to a series of thefts carried out using social engineering methods. The victims were U.S. residents, including retirees. The attacks were conducted through American exchanges and Bitcoin ATMs.
How the Scammer Turned Himself In
ZachXBT determined that the entire chain of interconnected thefts brought the perpetrators over $1 million since the beginning of 2025. Those same 5.73 BTC were frozen on Changelly back in March 2025 — it was this circumstance that forced the individual to seek help from the detective, whom he obviously did not consider a threat.
Throughout the correspondence, the suspect constantly changed versions of the money's origin: at times it was a loan, then funds from a boss, then supposedly the boss's investments in Bitcoin "in 2014 and 2015" through an acquaintance in the U.S. But the most absurd detail — in December 2025, AmanKesar11, by his own account, even filed a complaint with the Indian police over this freeze.
Who Was Really Behind the Individual
During the correspondence, AmanKesar11 sent screenshots of emails that became a real find for the investigation. Based on them, ZachXBT reconstructed the structure of the entire group. The analyst concluded that AmanKesar11 was merely a middleman (drops) through whom funds were laundered for a boss hiding under the pseudonym "Mr Parveen."
The key evidence turned out to be the "proof" provided by the individual himself: bank statements issued in someone else's name and a completely different address. ZachXBT addressed his followers with a warning: he respects privacy, but it is not worth contacting him with requests to restore access to stolen funds.
Expert opinion: This case is an excellent illustration of how dangerous public blockchains are for scammers. One wrong step, an attempt to "restore justice" through someone who sees the entire chain through, and the entire criminal scheme collapses. Cryptocurrency does not forgive stupidity, especially when it is mixed with crime.