BTC $77,752.64 -3.29%
ETH $2,443.11 -2.84%
BNB $691.23 -3.15%
XRP $1.38 -4.49%
SOL $104.02 -5.03%
TRX $0.3410 +0.93%
DOGE $0.0851 -4.47%
ADA $0.2027 -5.37%
BCH $246.21 -8.74%
LINK $11.45 -4.39%
HYPE $80.31 -4.52%
AAVE $122.04 -5.74%
SUI $0.7432 -5.07%
XLM $0.1790 -4.24%
ZEC $801.84 -1.21%
BTC $77,752.64 -3.29%
ETH $2,443.11 -2.84%
BNB $691.23 -3.15%
XRP $1.38 -4.49%
SOL $104.02 -5.03%
TRX $0.3410 +0.93%
DOGE $0.0851 -4.47%
ADA $0.2027 -5.37%
BCH $246.21 -8.74%
LINK $11.45 -4.39%
HYPE $80.31 -4.52%
AAVE $122.04 -5.74%
SUI $0.7432 -5.07%
XLM $0.1790 -4.24%
ZEC $801.84 -1.21%

trace

All
Article
Flash

ZachXBT: Indian scam gang suspected of social engineering to steal coins and self-reported to the police to trace and freeze funds

"On-chain detective" ZachXBT published a case analysis stating that in a cryptocurrency asset case involving an Indian scam gang, the relevant individuals reported the case to law enforcement after their assets were frozen, drawing attention. The incident began when a user sought help, claiming that approximately 5.73 BTC (about $475,000) was frozen on Changelly in March 2025.Subsequent on-chain analysis revealed that these funds could be traced back to multiple social engineering attacks and theft cases related to Bitcoin ATMs targeting U.S. users, with a total amount involved exceeding $1 million and several elderly victims. The investigation showed that the individual provided multiple changing explanations for the source of the funds, including "loan," "boss transfer," and "investment from 2014-2015," and there were significant contradictions in the evidence chain.More concerning is that this user had previously filed a police report in India in December 2025, attempting to recover the frozen funds (case number 3207-P/2025). Subsequent on-chain evidence collection and email data analysis indicated that they might be a "mule" for transferring funds, with some bank documents inconsistent with their identity information. ZachXBT noted that such cases demonstrate that social engineering attacks and cross-border fund transfers continue to occur and remind users to avoid interacting with funds from suspicious sources to prevent triggering compliance freezes or legal risks.
app_icon
ChainCatcher Building the Web3 world with innovations.