ZachXBT's banner

ZachXBT

@zachxbt • 1,096,028 subscribers

Scam survivor turned 2D investigator, Advisor @paradigm

Shorts

1/ Meet Tiffany Milanovich, a US based threat actor tied to at least $5M in thefts from hardware wallet and centralized exchange support impersonation scams. She's recorded herself taunting victims on calls after draining their funds. Tiffany openly flaunts luxury purchases, stolen funds, and casino gambling on social media.

1/ Meet Tiffany Milanovich, a US based threat actor tied to at least $5M in thefts from hardware wallet and centralized exchange support impersonation scams. She's recorded herself taunting victims on calls after draining their funds. Tiffany openly flaunts luxury purchases, stolen funds, and casino gambling on social media.

2,925,644 Aufrufe

1/ Meet Dritan Kapllani Jr, a US based threat actor tied to $19M from social engineering thefts targeting crypto holders. Dritan flexes luxury cars, watches, private jets, & clubs all over social media. Recently he was recorded on a call showing off a wallet with stolen funds.

1/ Meet Dritan Kapllani Jr, a US based threat actor tied to $19M from social engineering thefts targeting crypto holders. Dritan flexes luxury cars, watches, private jets, & clubs all over social media. Recently he was recorded on a call showing off a wallet with stolen funds.

1,670,358 Aufrufe

10/ Hopefully Tiffany faces legal consequences soon. She stole from people, taunted them directly, and flexed the proceeds online without a trace of remorse. At the same time she's left a complete paper trail of chat logs, recordings, and onchain data. I have not posted on X as much recently, but I've been working on several side projects, including a long overdue website I hope to share soon.

10/ Hopefully Tiffany faces legal consequences soon. She stole from people, taunted them directly, and flexed the proceeds online without a trace of remorse. At the same time she's left a complete paper trail of chat logs, recordings, and onchain data. I have not posted on X as much recently, but I've been working on several side projects, including a long overdue website I hope to share soon.

173,253 Aufrufe

7/ Dritan lives an extravagant life, regularly posting to Instagram and sharing it with other threat actors on Telegram.

7/ Dritan lives an extravagant life, regularly posting to Instagram and sharing it with other threat actors on Telegram.

242,598 Aufrufe

MΞRCY DΞ GRΞAT 🦇🔊 Here’s more videos of John flexing watches

MΞRCY DΞ GRΞAT 🦇🔊 Here’s more videos of John flexing watches

27,245 Aufrufe

Videos

Anya Rossi

sweetdream.ai

SweetDream.ai•Sponsored•Livecam

Watch Anya Live

Anya is streaming live right now! Join her private show and enjoy exclusive content.

Exclusive private shows

1.2k viewers online

Private Show

Join now for exclusive access

Free preview available • Premium content

1/ Meet M1llionz (RichMilly666), a French cybercriminal allegedly laundering assets from two violent home invasion robberies in France in April 2026 that netted $667K total, with a history of openly posting about bank and retail fraud on social media. My work has led to a $93K Tether freeze directly tied to these attacks so far.

1/ Meet M1llionz (RichMilly666), a French cybercriminal allegedly laundering assets from two violent home invasion robberies in France in April 2026 that netted $667K total, with a history of openly posting about bank and retail fraud on social media. My work has led to a $93K Tether freeze directly tied to these attacks so far.

1,373,307 Aufrufe • vor 12 Tagen

2/ Tiffany operates as a 'caller' the person who phones victims posing as exchange or wallet support and talks them into handing over access to their funds. In the clip below, you can hear what one of her calls sounds like.

2/ Tiffany operates as a 'caller' the person who phones victims posing as exchange or wallet support and talks them into handing over access to their funds. In the clip below, you can hear what one of her calls sounds like.

426,700 Aufrufe • vor 26 Tagen

1/ Meet Dritan Kapllani Jr, a US based threat actor tied to $19M from social engineering thefts targeting crypto holders. Dritan flexes luxury cars, watches, private jets, & clubs all over social media. Recently he was recorded on a call showing off a wallet with stolen funds.

1/ Meet Dritan Kapllani Jr, a US based threat actor tied to $19M from social engineering thefts targeting crypto holders. Dritan flexes luxury cars, watches, private jets, & clubs all over social media. Recently he was recorded on a call showing off a wallet with stolen funds.

1,670,358 Aufrufe • vor 3 Monaten

6/ In February 2026, Tiffany went 'band 4 band' with another threat actor on a Discord call by flexing balances to prove who was holding more. She allegedly moved $100K in an Exodus wallet. The address now holds 631K DAI, funded via multiple instant exchanges from Monero: 0x0b8cf7c3c66aa9478b101e203dc31b4e7200dfbc

6/ In February 2026, Tiffany went 'band 4 band' with another threat actor on a Discord call by flexing balances to prove who was holding more. She allegedly moved $100K in an Exodus wallet. The address now holds 631K DAI, funded via multiple instant exchanges from Monero: 0x0b8cf7c3c66aa9478b101e203dc31b4e7200dfbc

217,216 Aufrufe • vor 26 Tagen

3/ In June 2026, a victim lost $1.2M in Bitcoin and Ethereum. Tiffany and her group drained the victim's Trezor wallet after a spoofed BitcoinIRA email sent under the alias 'Patricia Massie.' Theft addresses: bc1ql2t0mwtf6unkr8vnlg9hy7njuv7vcvn9nxvlzy 0x491333e8ea6f4fc2a2475db01b649e1e4602ec3c

3/ In June 2026, a victim lost $1.2M in Bitcoin and Ethereum. Tiffany and her group drained the victim's Trezor wallet after a spoofed BitcoinIRA email sent under the alias 'Patricia Massie.' Theft addresses: bc1ql2t0mwtf6unkr8vnlg9hy7njuv7vcvn9nxvlzy 0x491333e8ea6f4fc2a2475db01b649e1e4602ec3c

206,732 Aufrufe • vor 26 Tagen

10/ Hopefully Tiffany faces legal consequences soon. She stole from people, taunted them directly, and flexed the proceeds online without a trace of remorse. At the same time she's left a complete paper trail of chat logs, recordings, and onchain data. I have not posted on X as much recently, but I've been working on several side projects, including a long overdue website I hope to share soon.

10/ Hopefully Tiffany faces legal consequences soon. She stole from people, taunted them directly, and flexed the proceeds online without a trace of remorse. At the same time she's left a complete paper trail of chat logs, recordings, and onchain data. I have not posted on X as much recently, but I've been working on several side projects, including a long overdue website I hope to share soon.

173,253 Aufrufe • vor 26 Tagen

8/ Tiffany allegedly gambled a victim's stolen funds on a casino while calling and mocking them. I reported the account. Shuffle reviewed the evidence and confirmed it will be locked. Tiffany also appears to have altered several flex videos to make it look like she's stolen more than she has. In one Ledger Live clip, she larps as the owner of a service hot wallet receiving 7.7K JITOSOL.

8/ Tiffany allegedly gambled a victim's stolen funds on a casino while calling and mocking them. I reported the account. Shuffle reviewed the evidence and confirmed it will be locked. Tiffany also appears to have altered several flex videos to make it look like she's stolen more than she has. In one Ledger Live clip, she larps as the owner of a service hot wallet receiving 7.7K JITOSOL.

171,617 Aufrufe • vor 26 Tagen

9/ Tiffany shared a screenshot of a search and seizure warrant against her in Connecticut. It's dated before several of the incidents mentioned here. In a separate recording, she mentions a booked flight and says her funds remain untouched.

9/ Tiffany shared a screenshot of a search and seizure warrant against her in Connecticut. It's dated before several of the incidents mentioned here. In a separate recording, she mentions a booked flight and says her funds remain untouched.

162,208 Aufrufe • vor 26 Tagen

It’s likely because there was a massive Instagram / Meta exploit over the weekend that was just patched. Basically the Meta AI support is garbage and has lots of access perms which allowed you to reset passwords to any user without 2FA and did not verify who you are. Telegram channels on Instagram offering IG black market services made lots of $$$

It’s likely because there was a massive Instagram / Meta exploit over the weekend that was just patched. Basically the Meta AI support is garbage and has lots of access perms which allowed you to reset passwords to any user without 2FA and did not verify who you are. Telegram channels on Instagram offering IG black market services made lots of $$$

563,554 Aufrufe • vor 3 Monaten

3/ Broox is a current Axiom senior BD employee based in New York. In the clip Broox states he can track any Axiom user via ref code, wallet, or UID and claims he can "find out anything to do with that person". He also describe researching 10-20 wallets initially and slowly increasing over time "so it does not look that suspicious" In a separate clip from the same recording, Broox sets ground rules for how to request lookups from him and then says he'll send the full list of wallets. The full recording is a private call of the group members strategizing.

3/ Broox is a current Axiom senior BD employee based in New York. In the clip Broox states he can track any Axiom user via ref code, wallet, or UID and claims he can "find out anything to do with that person". He also describe researching 10-20 wallets initially and slowly increasing over time "so it does not look that suspicious" In a separate clip from the same recording, Broox sets ground rules for how to request lookups from him and then says he'll send the full list of wallets. The full recording is a private call of the group members strategizing.

421,527 Aufrufe • vor 6 Monaten

7/ Dritan lives an extravagant life, regularly posting to Instagram and sharing it with other threat actors on Telegram.

7/ Dritan lives an extravagant life, regularly posting to Instagram and sharing it with other threat actors on Telegram.

242,598 Aufrufe • vor 3 Monaten

8/ Along with Broox in the call is close his friend Gowno (Seb), a recently hired moderator at Axiom. In the first clip, Broox alleges Ryan (Ryucio), another Axiom BD employee, has used the internal dashboard to look up users on behalf of others, and that he helped get his friend Mystery hired at Axiom as a moderator. In the second clip, Broox discusses how Gowno's responsibilities will grow over time and states he can eventually help conduct lookups. Neither Ryan nor Mystery is present in the recorded call.

8/ Along with Broox in the call is close his friend Gowno (Seb), a recently hired moderator at Axiom. In the first clip, Broox alleges Ryan (Ryucio), another Axiom BD employee, has used the internal dashboard to look up users on behalf of others, and that he helped get his friend Mystery hired at Axiom as a moderator. In the second clip, Broox discusses how Gowno's responsibilities will grow over time and states he can eventually help conduct lookups. Neither Ryan nor Mystery is present in the recorded call.

282,370 Aufrufe • vor 6 Monaten

Marcell Question: How down bad do you have to be to blatantly bot all of your engagement on posts and followers with the same third world aged accounts connected via web?

Marcell Question: How down bad do you have to be to blatantly bot all of your engagement on posts and followers with the same third world aged accounts connected via web?

130,431 Aufrufe • vor 7 Monaten

DEGEN NEWS X Nikita Bier if you want to go down a rabbithole on CT check the engagement farm communities where thousands of accounts inorganically spam slop replies under posts 24/7

DEGEN NEWS X Nikita Bier if you want to go down a rabbithole on CT check the engagement farm communities where thousands of accounts inorganically spam slop replies under posts 24/7

111,553 Aufrufe • vor 7 Monaten

Not sure why this team thought it would be a good idea to post a video insinuating their token will pump to top 10 from influencer shills. I swear these crypto projects are not even trying to hide the red flags.

Not sure why this team thought it would be a good idea to post a video insinuating their token will pump to top 10 from influencer shills. I swear these crypto projects are not even trying to hide the red flags.

315,173 Aufrufe • vor 2 Jahren

sudo rm -rf --no-preserve-root / In honor of Vkevin for the fake Safeguard Telegram bot scam here is a 31 minute video of him being secretly recorded while phishing victims for hundreds of thousands of dollars with accomplices while going to school in NY.

sudo rm -rf --no-preserve-root / In honor of Vkevin for the fake Safeguard Telegram bot scam here is a 31 minute video of him being secretly recorded while phishing victims for hundreds of thousands of dollars with accomplices while going to school in NY.

182,315 Aufrufe • vor 1 Jahr

3/ In Nov 2024 $240K was stolen from an elderly victim with Daytwo’s worker Paranoia (Justin). A private recording of the theft exists and was obtained (see part 1 below) Theft address bc1q35tw4f5qrfxrjy2v8g8d3majtujv28audm6yvp AJU5yh4kDahLak4uq5n4ehJDVs2w2Lbhw9UHoseaBwV7

3/ In Nov 2024 $240K was stolen from an elderly victim with Daytwo’s worker Paranoia (Justin). A private recording of the theft exists and was obtained (see part 1 below) Theft address bc1q35tw4f5qrfxrjy2v8g8d3majtujv28audm6yvp AJU5yh4kDahLak4uq5n4ehJDVs2w2Lbhw9UHoseaBwV7

112,503 Aufrufe • vor 1 Jahr

FFV Polymarket Coincidentally it comes only a few days after Logan Paul promoted Polymarket inorganically in a YT video.

FFV Polymarket Coincidentally it comes only a few days after Logan Paul promoted Polymarket inorganically in a YT video.

55,802 Aufrufe • vor 6 Monaten

4/ On May 2, Stephen Beard posted a video claiming DSJ would IPO soon and demanded a 12% "tax" on account balances as part of the regulatory process. By this point, withdrawals had already been disabled.

4/ On May 2, Stephen Beard posted a video claiming DSJ would IPO soon and demanded a 12% "tax" on account balances as part of the regulatory process. By this point, withdrawals had already been disabled.

28,124 Aufrufe • vor 4 Monaten