Aman Kesar India Crypto Scam Ring
Summary
A New Delhi-based cryptocurrency fraud ring, identified through on-chain analysis by blockchain investigator ZachXBT in June 2026, is alleged to have stolen over $1 million from American victims since 2025, primarily targeting elderly individuals via social engineering. The ring was exposed when a suspected money mule, Aman Kesar (X: @Amankesar11), contacted ZachXBT seeking help unfreezing 5.73 BTC (~$475,000) held by Changelly under anti-money laundering review. On-chain tracing linked the frozen funds to a cluster of confirmed social engineering thefts; Kesar subsequently deleted his X account and all public posts following the exposure.
Connected Entities
2 entities · 10 linked investigations- TQkEVXjtvSbigGa5fqFUpcYJnGvpKPPBEm→mentioned with→Aman Kesar India Crypto Scam Ring(50%)
Connected Through
1 shared actor · 1 investigationDistinct actors this investigation shares with others — holders, traders, and named parties. Shared infrastructure (exchanges, pools) is excluded.
- ◇TQkEVX…PBEmwallet
Timeline(6 events)
2025-03-11
Changelly freezes 5.73 BTC (~$475,000) belonging to Aman Kesar's account under AML review during an attempted BTC-to-USDT swap.
Cryptopolitan2025-12-23
Aman Kesar files a police complaint in India (case #3207-P/2025) attempting to recover the frozen Bitcoin from Changelly, inadvertently creating a law enforcement record.
Castle Crypto2025-12-31
Kesar posts first public complaint on X about the Changelly freeze, claiming funds were unjustly seized.
Cryptopolitan2026-06-15
Kesar posts on X claiming full KYC cooperation with Changelly compliance team, days before ZachXBT's exposure.
Cryptopolitan2026-06-19
ZachXBT publishes on-chain investigation linking Kesar's frozen 5.73 BTC to a wallet cluster with over $1 million in alleged social engineering thefts from elderly American victims. Kesar is identified as an alleged money mule for operator 'Mr. Parveen' based in New Delhi.
Crypto Times2026-06-19
Aman Kesar deletes all public posts and deactivates his X account (@Amankesar11) following ZachXBT's publication.
Crypto TimesDecision Log
- hash: 2rXdd6oUWvpNxRe6sPZoDHmGDvFkF9wMMtGUPbha9b43
This investigation is cryptographically anchored to the Solana blockchain and source URLs are archived via the Internet Archive.
model: claude-sonnet-4-6
generated: 6/25/2026, 12:16:58 PM
last updated: 6/25/2026, 12:17:07 PM
avoid.net — verified advice for a post-truth world