Skip to main content
AVOID.NET

Mr. Parveen India Social Engineering Scam Ring

avoid.net/mr-parveen-india-social-engineering-scam-ring→0/100·78% conf.
[AI-DRAFTED · AWAITING FACT-CHECK]

Last changed 2026-11-02 · Fact-check review — Fact-check review (verdict: revise): the reviewer checked the page's claims against its sources; the judge moved the trust score from 2 to 0. Version history →

Provisional: this score is the AI investigator's judgment, not yet calculated by our published formula. Treat it as indicative. How scoring works →

anchored·wyfwbH…eWaW

Summary

An alleged New Delhi-based social engineering fraud ring, said to be directed by an individual known only as 'Mr. Parveen,' was publicly exposed by blockchain investigator ZachXBT on June 19, 2026 and is accused of stealing over $1 million since 2025 from American victims, predominantly elderly, through impersonation and account-takeover tactics routed via U.S. Bitcoin ATMs, exchanges and payment apps. The ring came to light when an alleged money mule, Aman Kesar (@Amankesar11), asked ZachXBT for help recovering 5.73 BTC (about $475,000) frozen at Changelly since March 2025; on-chain tracing linked the funds to the wider theft cluster, and Kesar deleted his X account after the exposure. No law enforcement charges against Kesar or 'Mr. Parveen' had been reported as of June 2026.

Connected Entities

8 entities · 60 linked investigations
Organizations
□Aman Kesar India Crypto Scam Ring□Mr. Parveen India Social Engineering Scam Ring□ZachXBT82
Tokens
Wallets
◇TQkEVX…PBEm
Relationships
  • TQkEVX…PBEm→mentioned with→Mr. Parveen India Social Engineering Scam Ring(50%)
  • TQkEVX…PBEm→mentioned with→Aman Kesar India Crypto Scam Ring(50%)
  • Athena Bitcoin→mentioned with→Bitcoin(70%)
  • Aman Kesar India Crypto Scam Ring→mentioned with→Coinbase(60%)
  • Aman Kesar India Crypto Scam Ring→mentioned with→ZachXBT(70%)
  • ZachXBT→mentioned with→Bitcoin(65%)
  • Aman Kesar India Crypto Scam Ring→mentioned with→Bitcoin(70%)
  • Aman Kesar India Crypto Scam Ring→mentioned with→CoinDCX(60%)
  • CoinDCX→mentioned with→Coinbase(70%)
  • CoinDCX→mentioned with→ZachXBT(70%)
  • + 8 more
Have evidence about Mr. Parveen India Social Engineering Scam Ring?
0
Accepted
2
Under review
0
Rejected / revoked

2 submissions awaiting moderator review.

Timeline(6 events)

March 2025

Changelly freezes 5.7357 BTC (approximately $475,000) under AML review during an attempted BTC-to-USDT swap linked to the Aman Kesar address cluster (on or around March 11, 2025).

ZachXBT Connects Changelly Freeze Case to $475K in Elderly Scam Proceeds — CryptoTimes

December 2025

Aman Kesar files an Indian police complaint (case #3207-P/2025) on December 23, 2025 seeking to recover the frozen Bitcoin, creating a law enforcement record that later surfaces in ZachXBT's investigation.

Indian Crypto Scammer Unwittingly Exposes $1M Syndicate to On-Chain Investigator — Castle Crypto

December 2025

Kesar posts his first public complaint on X (December 31, 2025) about the Changelly freeze, claiming the funds were unjustly seized.

ZachXBT spots $475K in fraud-related Bitcoin after user calls out frozen Changelly funds

June 2026

Kesar posts on X (June 15, 2026) claiming full KYC cooperation with Changelly's compliance team, days before ZachXBT's exposure.

ZachXBT spots $475K in fraud-related Bitcoin after user calls out frozen Changelly funds

June 2026

ZachXBT publishes his on-chain investigation (June 19, 2026) linking Kesar's frozen 5.73 BTC to a wallet cluster with over $1 million in alleged social engineering thefts from elderly American victims, identifying Kesar as an alleged money mule for 'Mr. Parveen' of New Delhi.

ZachXBT (@zachxbt) on X — original investigation post

June 2026

Following ZachXBT's post (June 19, 2026), Kesar deletes all public posts and deactivates the @Amankesar11 X account.

ZachXBT Connects Changelly Freeze Case to $475K in Elderly Scam Proceeds — CryptoTimes
Provenance & Audit Trail

Decision Log

  • #3review revise-20Recorded on Solana ✓11/2/2026, 12:30:12 AM
    slot 464294265 · hash 9qgiBCJw7wMHSZscKkorc7i6yYv2nSndeno7d9gpGqjJ
  • #2reviewRecorded on Solana ✓11/2/2026, 12:30:12 AM
    slot 464294260 · hash KhvQApXHZ5qr74S6YghuQQ3oAKgJqBh3WgtjVsw9Njp
  • #1publishRecorded on Solana ✓6/20/2026, 12:07:31 PM
    slot 427720426 · hash FjitbMjQSNBqepBnLUWhVnpYQacMyu31mLwGdNk3HmLH

This investigation is cryptographically anchored to the Solana blockchain (3 decisions). 14 of 15 cited source URLs have an Internet Archive snapshot.

Fact-checked 2026-11-0213 claims checked0 corrections pending0 applied⛓ anchoredSee findings →

model: claude-code-merge-writer

generated: 6/20/2026, 12:07:23 PM

last updated: 11/2/2026, 12:30:13 AM

2 views

avoid.net — verified advice for a post-truth world