From Social Scams to Seizures: The Fall of a $243M Hacker Empire

• A British man named Danish Zulfiqar, or “Danny,” is thought to have stolen a lot of Bitcoin from a Genesis creditor by using clever tricks like fake phone calls.
• In August 2024, investigators say he and his team stole more than $243 million by pretending to be support staff and taking over accounts.
• ZachXBT, a well-known online detective, says that Zulfiqar was arrested in Dubai after a raid and that police took $18.58 million in cryptocurrency.

In August 2024, a single person fell for a smart scam and lost 4,064 Bitcoin, which was worth about $243 million. The victim was a creditor of Genesis, a crypto company, and kept the money on the Gemini exchange. Attackers called and pretended to be Google support. They tricked the person into changing their security settings and then used software to see their screen. Then they took the private keys and emptied the wallet.

This wasn’t just a random hit. It was related to a data leak from Kroll in 2023 that revealed information about people owed money by bankrupt crypto companies like Genesis and FTX. That leak led to more than $300 million in thefts that used phone tricks and hacks.

Danish Zulfiqar Khan, a British citizen who goes by “Danny” or “Meech” online, is the main suspect. ZachXBT used on-chain tracking to connect him to the crime by following the money on the blockchain. Zulfiqar worked with people who went by the names “Greavys” (Malone Lam), “Wiz” (Veer Chetal), and “Box” (Jeandiel Serrano). They used the money they stole to buy expensive cars, go on trips, and throw parties.

Some people in this group were charged by U.S. prosecutors with a $230 million scheme that was part of a $263 million criminal ring that made fake calls, swapped phones, and even broke into homes. Chetal, one of the accomplices, is said to have stolen another $2 million while out on bail.

On December 5, 2025, ZachXBT told his Telegram followers that Zulfiqar was probably arrested in Dubai. He pointed to a villa raid where other people also got caught. The suspect’s wallets sent money to one Ethereum address (0xb37…9f768) in a way that looks like police seizures, which is common when the police take control.

ZachXBT said, “British threat actor Danny / Meech aka Danish Zulfiqar (Khan) appears to have likely been arrested by law enforcement and had crypto assets seized.” People who knew Zulfiqar well stopped talking online, which added to the clues. Dubai is now a place where people who are suspected of being involved in cryptocurrency go, but the police haven’t said anything yet.