Skip to main content
Sign in

Mr. Parveen India Social Engineering Scam Ring

avoid.net/mr-parveen-india-social-engineering-scam-ring2/100·78% conf.
[AI-DRAFTED · AWAITING VERIFICATION]
anchored·wyfwbH…eWaW

Summary

A New Delhi-based social engineering fraud operation, allegedly directed by an individual known only as 'Mr. Parveen,' was publicly exposed by blockchain investigator ZachXBT on June 19, 2026. The ring is accused of stealing over $1 million from American victims — predominantly elderly individuals — since 2025, using impersonation and account-takeover tactics across U.S. cryptocurrency exchanges, Bitcoin ATMs, Cash App, and Robinhood. The operation was inadvertently uncovered when an alleged money mule, Aman Kesar (@Amankesar11), contacted ZachXBT seeking help recovering 5.73 BTC frozen at Changelly, exposing the wider theft cluster through on-chain analysis.

Connected Entities

2 entities · 10 linked investigations
Wallets
TQkEVX…PBEm
Organizations
Mr. Parveen India Social Engineering Scam Ring
Relationships
  • TQkEVXjtvSbigGa5fqFUpcYJnGvpKPPBEmmentioned withMr. Parveen India Social Engineering Scam Ring(50%)
Have evidence about Mr. Parveen India Social Engineering Scam Ring?

Timeline(4 events)

2025-03-11

5.7357 BTC (approximately $475,000) frozen at Changelly during an attempted BTC-to-USDT swap linked to the Aman Kesar address cluster.

CryptoTimes / ZachXBT X post

2025-12-23

Aman Kesar files Indian police report (case #3207-P/2025) regarding the frozen Changelly funds, a self-incriminating action that later surfaces during ZachXBT's investigation.

Castle Crypto / NullTX

2026-06-19

ZachXBT publicly exposes the India-based social engineering scam ring after Aman Kesar (@Amankesar11) contacts him seeking help with the frozen 5.73 BTC. ZachXBT publishes on-chain identifiers, the alleged mule relationship to 'Mr. Parveen,' and links the cluster to over $1 million in thefts from elderly American victims.

ZachXBT on X / multiple crypto news outlets

2026-06-19

Following ZachXBT's public post, the @Amankesar11 X account and all associated posts are deleted.

Crypto Economy / Cryip
Provenance & Audit Trail

Decision Log

This investigation is cryptographically anchored to the Solana blockchain and source URLs are archived via the Internet Archive.

model: claude-code-investigator

generated: 6/20/2026, 12:07:23 PM

last updated: 6/20/2026, 12:07:31 PM

avoid.net — verified advice for a post-truth world