ZachXBT Ties $5 Million in Alleged Crypto Thefts to a Shuffle Account

Blockchain investigator ZachXBT published a thread on Aug. 10 identifying a young American he ties to at least $5 million in cryptocurrency thefts, and said crypto casino Shuffle has agreed to lock an account he reported.

The casino element is what makes it an industry story. ZachXBT alleges an account was used to gamble a victim's stolen funds, and says Shuffle reviewed his evidence and confirmed the account would be locked, without a regulator's order or a court filing behind it.

FairGambling is not naming her: in replies to the thread, ZachXBT said the person he identified is a minor.

ZachXBT Ties Thefts to Support Impersonation Calls

The thread describes her as a "caller," the person who phones victims posing as exchange or wallet support and talks them into handing over access to their funds.

In June 2026, a victim lost $1.2 million in bitcoin and ether after her group drained a Trezor hardware wallet, following a spoofed BitcoinIRA email, according to ZachXBT. He wrote that a separate victim lost $500,000 in bitcoin in October 2025 when a Coinbase account was drained, and that the bulk of the June proceeds have not moved.

Shuffle Says the Account Will Be Locked

[She] allegedly gambled a victim's stolen funds on a casino while calling and mocking them.

ZachXBT posted that claim on Aug. 10, adding that he reported the account and that Shuffle confirmed it would be locked after reviewing the evidence. In the same post he said she has altered several videos to appear to have stolen more than she has.

Shuffle is operated by Natural Nine B.V. under Curaçao Gaming Control Board license OGL/2024/1337/0628. Its anti-money laundering policy says suspicious activity leads to account suspension and enhanced due diligence, including source-of-funds checks.

The thread includes no response from her. She shared a screenshot of a Connecticut search-and-seizure warrant against her, dated before several of the incidents described, and none of the allegations have been tested in court.

FairGambling reported on Aug. 3 how tracing linked a Farsi-language gambling network to an unlicensed Dubai exchange.

Shuffle's policy provides for reporting customers linked to criminal activity to Curaçao's Financial Intelligence Unit. The company has not said publicly whether it will, and ZachXBT says most of the June theft proceeds still sit at the addresses he published.