ZachXBT corrected claims about five individuals previously labeled crypto entrepreneurs, revealing them as threat actors behind high-profile social engineering crypto fraud and data extortion that netted multiple nine figures from victims. The group includes Danish Zulfiqar Khan and Mustafa Ibrahim linked to the $243M Genesis creditor theft plus Kroll SIM swaps targeting Genesis, BlockFi and FTX data, Ryan Pepper behind Fractal ID breaches, and Cameron Cureton plus Lawend Rahman for Coinbase social engineering and violent robberies. Law enforcement seized $18.9M from the Dec 2025 wallet 0xb37d617716e46511e56fe07b885fbdd70119f768, underscoring ongoing crypto fraud investigation efforts into these schemes.