Self-targeting: how a scammer's complaint helped ZachXBT uncover a bitcoin theft network
A precedent worthy of a screenwriter has occurred in the crypto community: a scammer whose funds were frozen on the Changelly platform himself turned to the renowned on-chain detective ZachXBT for help. Instead of restoring justice, he received a complete exposure of his own criminal activities.
A user under the nickname AmanKesar11 complained about the "unfair" freezing of 5.73 BTC (approximately $475,000). However, my analysis of transactions using ZachXBT's tools showed that these funds are directly linked to a series of thefts from U.S. citizens. The criminal group operated through social engineering methods, targeting, among others, retirees, using American exchanges and Bitcoin ATMs.
Irony of Fate: Evidence from the Accused Himself
During the correspondence, AmanKesar11 provided screenshots that, in his view, were supposed to confirm the legality of the funds. However, these documents became the key to reconstructing the full picture. It turned out that the entire chain of crimes brought the perpetrators over $1 million since the beginning of 2025. The 5.73 BTC themselves were blocked on Changelly back in March 2025 — this is precisely what prompted the accused to seek help.
The explanations for the origin of the money constantly changed: at times it was a loan, then funds from a boss, then supposedly the boss's investments in Bitcoin "in 2014 and 2015" through an acquaintance in the U.S. Notably, in December 2025, the accused even filed a complaint with the Indian police due to the freeze, trying to portray himself as a victim.
Who is Behind the Scheme?
Analysis of the provided "evidence," including bank statements issued in someone else's name and a different address, made it possible to reconstruct the group's structure. In my assessment, AmanKesar11 is merely an intermediary through whom funds are laundered for a boss under the pseudonym "Mr Parveen." The scheme itself demonstrates a high level of organization: from victims in the U.S. through a chain of wallets to the freeze on Changelly.
ZachXBT has already issued a warning to his followers: he respects privacy and is willing to help, but one should not approach him to recover stolen funds — it will only lead to exposure.
Expert Opinion: This case is a vivid example of how the lack of qualifications among criminals and their overconfidence play into the hands of investigations. In the era of transparent blockchains, every transaction leaves a trace, and attempting to appeal a fund freeze without verifying their origin is a strategic mistake that can cost one's freedom. The market is becoming increasingly unfriendly to amateurs in the field of money laundering.