Investigation

Blockchain tracing analysis reportedly identified the funds as originating from a broader cluster associated with social-engineering theft operations targeting victims in the United States. According to the investigation, the traced activity involved cryptocurrency acquired through U.S.-based exchanges and Bitcoin ATMs.

The wider cluster was linked to thefts exceeding $1 million since 2025, with several reported victims described as elderly individuals.

Conflicting Claims

During communications with investigators, different explanations were allegedly provided regarding the source of the Bitcoin, including:

• The funds were the result of a loan.
• The funds had been sent by an employer.
• The funds originated from Bitcoin investments made by the employer during 2014–2015 through a contact in the United States.

These explanations reportedly changed over the course of the discussion.

Police Report

The individual claimed to have filed a police complaint in India regarding the frozen cryptocurrency. The reported complaint number was:

3207-P/2025

The filing concerned the freezing of the 5.73 BTC held by Changelly.

Additional Findings

Investigators analyzed screenshots and email records voluntarily shared during communications. These data points were used to identify additional individuals and entities potentially connected to the activity.

According to the investigator’s assessment, AmanKesar11 may have been acting as a cryptocurrency mule on behalf of an individual identified as “Mr. Parveen.” This conclusion was reportedly based in part on documentation submitted as proof of ownership that contained bank statements associated with a different name and geographic location.

No public court findings or law-enforcement determinations confirming these allegations have been identified.

Known Cryptocurrency Addresses

Frozen transaction associated with the case:

fb931baac66bfc116deb10fa81417fb3da61e4362cd2997ee1eaa577e96272f3

Bitcoin address:

bc1q5yjxzcvfswvyx9y6cvlc3xe4laqqnqsjp3f9t2

Tron address:

TQkEVXjtvSbigGa5fqFUpcYJnGvpKPPBEm

Status

As of the latest publicly available information, the funds remained frozen, and no evidence has been presented publicly demonstrating a legitimate source for the cryptocurrency. The allegations regarding the origin of the funds and the involvement of specific individuals remain based on blockchain analysis and investigative findings rather than publicly disclosed criminal convictions.