How ZachXBT Traced a $2M Coinbase Impersonation Scam

[etfs]

ZachXBT linked the alleged scammer to the impersonation campaign by combining multiple signals rather than relying on a single onchain transaction. His analysis cross-referenced wallet movements, Telegram screenshots, social media posts, and even a leaked video that appeared to show the scammer speaking with a victim while offering fake support.

Despite attempts to hide activity—such as deleting accounts or purchasing expensive Telegram usernames—the suspect’s own online behavior reportedly made attribution easier. Frequent public posts and poor operational security helped connect the dots, reinforcing how digital footprints often undermine even well-planned fraud schemes.

[JanEmil]

ZachXBT is a killer. Always.

[96f402f86e]

spending money on fancy usernames while leaking ur own trail is kinda ironic