Self-guidance: a scammer complained to a detective about frozen bitcoins and turned himself in.
In the world of cryptocurrency security, a curious yet instructive incident has occurred. Renowned on-chain detective ZachXBT received a direct appeal from a user under the nickname AmanKesar11, who complained about the "unfair" freezing of 5.73 BTC (approximately $475,000) on the Changelly platform. The complainant clearly did not expect that his "savior" would turn out to be the one who best knows how to read the blockchain.
Instead of simply offering sympathy, ZachXBT launched his own investigation. Using standard blockchain analysis tools, he traced the origin of these funds. The result was predictable for a professional but shocking for the claimant himself: the bitcoins were directly linked to a series of thefts carried out through social engineering. The victims were U.S. citizens, including retirees, who lost their savings through American exchanges and Bitcoin ATMs.
How the Scammer Exposed Himself
During the correspondence, AmanKesar11, trying to prove his "innocence," sent ZachXBT screenshots that were supposed to confirm the legitimacy of his income. However, these "proofs" became his downfall. The on-chain detective established that the entire chain of thefts, starting from 2025, had brought the perpetrators over $1 million. The 5.73 BTC themselves had been frozen back in March 2025 — this is precisely what forced the scammer to seek help from someone he considered an ally.
Interestingly, the explanations for the origin of the funds kept changing: from a personal loan to an investment from a boss, and even Bitcoin investments "in 2014-2015" through an acquaintance in the U.S. The climax was AmanKesar11's claim that he had filed a complaint with the Indian police due to the freezing of his assets. This bravado only confirmed his connection to the criminal scheme.
The Group Structure and the Role of "Mr. Parveen"
Thanks to the provided screenshots, ZachXBT was able to reconstruct the entire group's structure. In his opinion, AmanKesar11 is not the main organizer but merely an intermediary through whom funds were laundered for a boss hiding under the pseudonym "Mr Parveen." The bank statements that the individual himself sent turned out to be issued in someone else's name and at a different address, completely destroying his cover story.
This story is a vivid example of how a lack of basic crypto security knowledge and an attempt to deceive an expert lead to complete collapse. The scammer, seeking help from ZachXBT, essentially provided him with all the necessary evidence himself. The detective, in turn, warned the community: he respects privacy but is not a support service for recovering stolen funds.
Analytical Commentary from Cryptalist: This case is a clear demonstration that anonymity in cryptocurrency is an illusion. Scammers who believe they can operate with impunity on the network forget that every step leaves an indelible digital footprint. Turning to ZachXBT was not just a mistake but an act of desperation that exposed the entire criminal infrastructure. The market must remember: on-chain analytics is not just a tool; it is a new form of justice.