Aman Kesar India Crypto Scam Ring
Summary
A New Delhi-based cryptocurrency fraud ring, identified through on-chain analysis by blockchain investigator ZachXBT in June 2026, is alleged to have stolen over $1 million from American victims since 2025, primarily targeting elderly individuals via social engineering. The ring was exposed when a suspected money mule, Aman Kesar (X: @Amankesar11), contacted ZachXBT seeking help unfreezing 5.73 BTC (~$475,000) held by Changelly under anti-money laundering review. On-chain tracing linked the frozen funds to a cluster of confirmed social engineering thefts; Kesar subsequently deleted his X account and all public posts following the exposure.
Connected Entities
2 entities · 10 linked investigations- TQkEVXjtvSbigGa5fqFUpcYJnGvpKPPBEm→mentioned with→Aman Kesar India Crypto Scam Ring(50%)
Connected Through
1 shared actor · 1 investigationDistinct actors this investigation shares with others — holders, traders, and named parties. Shared infrastructure (exchanges, pools) is excluded.
- ◇TQkEVX…PBEmwallet
Community submissions
- Under reviewincriminatingWayback pending6/26/2026, 10:08:36 PM
“ZachXBT published findings on June 19, 2026 exposing Aman Kesar (@Amankesar11), an Indian Bitcoin mule who contacted ZachXBT complaining about 5.73 BTC (~$475K) frozen by Changelly since March 2025. ZachXBT traced the BTC inflows to multiple social engineering thefts targeting elderly American victims. The broader cluster was estimated to have stolen over $1M from victims since 2025.”
— avoid-scout
- Under reviewincriminatingWayback pending6/25/2026, 10:06:44 PM
“New ZachXBT reporting from June 19, 2026, provides expanded on-chain evidence for the Aman Kesar case already in the AVOID.NET corpus. ZachXBT connected Kesar's frozen 5.73 BTC (~$475,000) held by Changelly to a broader cluster of elderly-targeting social engineering thefts totaling over $1 million from U.S. victims since 2025. The investigation also identified 'Mr. Parveen' as the likely orchestrator above Kesar, who appears to be acting as a money mule. This reporting meaningfully expands the known scope and adds a named superior in the network.”
— avoid-scout
Timeline(6 events)
2025-03-11
Changelly freezes 5.73 BTC (~$475,000) belonging to Aman Kesar's account under AML review during an attempted BTC-to-USDT swap.
Cryptopolitan2025-12-23
Aman Kesar files a police complaint in India (case #3207-P/2025) attempting to recover the frozen Bitcoin from Changelly, inadvertently creating a law enforcement record.
Castle Crypto2025-12-31
Kesar posts first public complaint on X about the Changelly freeze, claiming funds were unjustly seized.
Cryptopolitan2026-06-15
Kesar posts on X claiming full KYC cooperation with Changelly compliance team, days before ZachXBT's exposure.
Cryptopolitan2026-06-19
ZachXBT publishes on-chain investigation linking Kesar's frozen 5.73 BTC to a wallet cluster with over $1 million in alleged social engineering thefts from elderly American victims. Kesar is identified as an alleged money mule for operator 'Mr. Parveen' based in New Delhi.
Crypto Times2026-06-19
Aman Kesar deletes all public posts and deactivates his X account (@Amankesar11) following ZachXBT's publication.
Crypto TimesDecision Log
- hash: 2rXdd6oUWvpNxRe6sPZoDHmGDvFkF9wMMtGUPbha9b43
This investigation is cryptographically anchored to the Solana blockchain (1 event). 9 of 10 cited source URLs have an Internet Archive snapshot.
model: claude-sonnet-4-6
generated: 6/25/2026, 12:16:58 PM
last updated: 7/27/2026, 2:17:28 PM
avoid.net — verified advice for a post-truth world