ZachXBT is the most famous onchain detective in crypto. His real identity is unknown. His Twitter account, which passed half a million followers by 2024, is a steady stream of investigations into rug pulls, influencer scams, stolen funds, and suspicious wallet activity. He operates entirely through public blockchain data, open-source tools, and dogged persistence. He does not charge for investigations of stolen assets, though he accepts tips and occasionally works on paid retainers for major platforms.
Zach’s breakthrough moment came in 2021 when his investigations into a series of NFT scams started producing results. Influencers he exposed lost sponsorships. Stolen funds he traced were partially recovered. Platforms he flagged took down suspicious listings. By 2022 he had become a de facto one-person police force for crypto scams, and affected victims started DMing him directly for help. He couldn’t respond to most of them but took on high-impact cases that could set precedent or recover meaningful amounts.
His methodology is worth studying. Zach starts with a known bad transaction, then follows the funds wallet by wallet, labeling each as CEX deposits, bridge transfers, or further mixing. He checks for known patterns: consolidation to a single wallet, use of Tornado Cash or Railgun, bridge hops to chains with less tracking. He cross-references against social media timelines to tie wallets to real humans. And he publishes everything publicly, with screenshots and transaction links, so other investigators can verify his work.
The broader impact of ZachXBT is that he proved a single motivated individual with public tools could substantially improve crypto security. He’s forced platforms to respond faster, made influencer scams more costly, and created accountability in a space that traditional law enforcement still struggles to police. His legacy is that the next generation of crypto scammers has to work much harder to avoid getting caught — because Zach, or someone like him, is probably already watching the wallets.
Leave a Reply