Skip to main content
AVOID.NET
Sign in

Vkevin

avoid.net/vkevin→2/100·100% conf.
[AI-DRAFTED · AWAITING VERIFICATION][src:zachxbt][2022_discord][2025_telegram][discord_phishing][doxxed][fake_bot][mee6_spoof][new_york][nft_theft][powershell][rat_malware][safeguard_spoof][telegram_phishing][zachxbt_investigation]

Auto-generated score, not yet verified against the scoring model. Under review — treat as indicative, not a verdict.

anchored·442aXR…DVCL

Summary

Vkevin is a pseudonymous threat actor known for operating fake Safeguard Telegram bot phishing campaigns that have allegedly drained seven figures from victims' cryptocurrency wallets. On January 23, 2025, blockchain investigator ZachXBT published a 31-minute video exposing Vkevin in the act of running these scams from what was described as a New York school, and confirmed the individual had been doxxed. Vkevin is additionally alleged to have conducted a 2022 Discord attack against DigikongNFT using a spoofed MEE6 bot, resulting in over $300,000 in NFT losses.

Connected Entities

2 entities · 60 linked investigations
Organizations
□Vkevin□ZachXBT82
Relationships
  • Vkevin→mentioned with→ZachXBT(70%)
Also appears in
StableMagnet·2Dean Daghita / CMDSS (Command Services and Support)·0Nexera·32SafePal·42BearnFi·12Gurhan Kiziloz·0PAAL AI·28JUDAO·18Ansem / $ANSEM ("Black Bull") creator-coin controversy·38Wonderland Finance·8+ 50 more

Connected Through

1 shared actor · 447 investigations

Distinct actors this investigation shares with others — holders, traders, and named parties. Shared infrastructure (exchanges, pools) is excluded.

Have evidence about Vkevin?

Timeline(3 events)

14 August 2022

Vkevin allegedly attacks DigikongNFT's Discord server using a fake MEE6 bot webhook, exfiltrating Discord authentication tokens via a bookmarklet phishing site at mee6.ca/verify. NFT holders lose over $300,000.

23 January 2025

ZachXBT publishes a 31-minute video on X secretly recording Vkevin running fake Safeguard Telegram bot phishing operations across multiple Telegram channels, with seven figures in victim losses alleged. ZachXBT confirms Vkevin has been doxxed.

23 January 2025

Multiple crypto media outlets including Cryptopolitan, CryptoNews.net, and blockchain.news report on ZachXBT's exposure of Vkevin. Leviathan News characterizes losses as 'draining millions via Telegram.'

Provenance & Audit Trail
Anchored on SolanaVerify on-chainsrc:zachxbt

Decision Log

This investigation is cryptographically anchored to the Solana blockchain (1 event).

full audit log →version history →

model: claude-sonnet

generated: 5/4/2026, 4:05:02 PM

last updated: 8/29/2026, 1:35:57 AM

16 views

avoid.net — verified advice for a post-truth world