A profile of ZachXBT, a twentysomething X user with 650K+ followers who tracks down crypto scams and thefts, and has received $1.3M+ in donations since 2021
He just untangled a $243 million bitcoin theft, what may be the biggest-ever crypto heist to target a single victim. And he has never shown his face. X: @a_greenberg and @zachxbt X: Andy Greenberg / @a_greenberg : Since 2021, crypto sleuth @zachxbt has helped recover nearly half a billion $ for scam/theft victims. Last month he cracked a $243m heist, the biggest ever to target a single person. He's never revealed his name or face, but spoke to me for this profile: https://www.wired.com/... @zachxbt : I recently spoke with @a_greenberg from @WIRED, who did a profile that dives into my journey over the past few years. It was a great experience to reflect on the evolution of my investigations. https://www.wired.com/...
Context & Ripple Effects
This profile extends earlier coverage of pseudonymous independent blockchain investigators who publicly identify crypto and Web3 scams. ZachXBT's large audience, donation-backed work and reported recovery record show how that informal investigative role has accumulated visibility and trust.
It also sits alongside cases showing that crypto transactions can leave trails useful to formal investigations, including the Bitfinex money-laundering case. The distinction is that ZachXBT operates as an independent, publicly followed investigator rather than as law enforcement.
First-order effects
- The profile concentrates public attention on ZachXBT as a resource for victims and observers trying to understand major thefts, while preserving the pseudonymous identity central to his work.
- His reported role in untangling the $243 million theft reinforces the credibility behind a donation-supported investigative practice that has already assisted scam and theft victims.
Second-order effects
- Publicly visible independent findings can supplement formal tracing efforts and give victims a way to surface leads before or alongside official action; the record of bitcoin traceability in a law-enforcement operation makes that complement more consequential.
- The prominence of investigators such as ZachXBT raises the reputational cost for projects, exchanges and other crypto intermediaries when allegations of scams or stolen-fund movement become widely documented.
Third-order effects
- If independent investigators continue to build audiences, funding and demonstrable case histories, crypto incident response may become more distributed between law enforcement, specialist firms and pseudonymous public researchers.
- That shift could improve the visibility of theft patterns, but it also makes trust, verification and accountability central questions when influential investigations are conducted outside formal institutions.
The trend: Crypto's legitimacy gap is driving a more visible, hybrid fraud-response ecosystem in which public blockchain researchers increasingly complement formal investigators.