Skip to main content
AVOID.NET

Vkevin

avoid.net/vkevin→28/100·100% conf.
[AI-DRAFTED · AWAITING FACT-CHECK][src:zachxbt][2022_discord][2025_telegram][discord_phishing][doxxed][fake_bot][mee6_spoof][new_york][nft_theft][powershell][rat_malware][safeguard_spoof][telegram_phishing][zachxbt_investigation]

Last changed 2026-10-10 · Score recalculated — Rescored under Scoring v2, the published formula (avoid.net/scoring): 2 → 28. Problems weighed by who is responsible: the subject's own conduct −40, problems around the subject, caused by others −0.8; legitimacy credit long-running +4. Version history →

Why this score
Every page starts at65
The subject's own conduct-40
Problems around it, caused by others-0.8
Long-running+4
Sum28

Score: 28/100 (kept between 0 and 100)

How scoring works →
anchored·442aXR…DVCL
Submit evidence

Summary

Vkevin is a pseudonymous threat actor known for operating fake Safeguard Telegram bot phishing campaigns that have allegedly drained seven figures from victims' cryptocurrency wallets. On January 23, 2025, blockchain investigator ZachXBT published a 31-minute video exposing Vkevin in the act of running these scams from what was described as a New York school, and confirmed the individual had been doxxed. Vkevin is additionally alleged to have conducted a 2022 Discord attack against DigikongNFT using a spoofed MEE6 bot, resulting in over $300,000 in NFT losses.

Connected Entities

2 entities · 60 linked investigations
Organizations
□Vkevin□ZachXBT82
Relationships
  • Vkevin→mentioned with→ZachXBT(70%)
Also appears in
AnubisDAO·0Serenity Shield·50FEGex·53Nexera·49Aperture LM·57Trenton Richard Johnston·0MoonHacker·48Blockchain Bandit·0Arena SocialFi·51SudoRare·0

Connected Through

1 shared actor · 409 investigations

Distinct actors this investigation shares with others — holders, traders, and named parties. Shared infrastructure (exchanges, pools) is excluded.

Have evidence about Vkevin?

Timeline(3 events)

14 August 2022

Vkevin allegedly attacks DigikongNFT's Discord server using a fake MEE6 bot webhook, exfiltrating Discord authentication tokens via a bookmarklet phishing site at mee6.ca/verify. NFT holders lose over $300,000.

23 January 2025

ZachXBT publishes a 31-minute video on X secretly recording Vkevin running fake Safeguard Telegram bot phishing operations across multiple Telegram channels, with seven figures in victim losses alleged. ZachXBT confirms Vkevin has been doxxed.

23 January 2025

Multiple crypto media outlets including Cryptopolitan, CryptoNews.net, and blockchain.news report on ZachXBT's exposure of Vkevin. Leviathan News characterizes losses as 'draining millions via Telegram.'

Provenance & Audit Trail
Recorded on Solana ✓Verify on-chainsrc:zachxbt

Decision Log

  • #2rescore+26Recorded on Solana ✓10/10/2026, 6:42:45 PM
    slot 455362556 · hash HPPieRt9zY5PWt8cty6Lr45rqCcuWfJ954bfFNPEWmZx
  • #1publishRecorded on Solana ✓5/19/2026, 1:06:44 AM
    slot 420667265 · hash Bx8i9Jgweok7DbUSeyJVC1u6Cq6iBgosQbwGGbWmpYpr

This investigation is cryptographically anchored to the Solana blockchain (2 decisions).

full audit log →version history →

model: claude-sonnet

generated: 5/4/2026, 4:05:02 PM

last updated: 10/10/2026, 6:42:44 PM

26 views

avoid.net — verified advice for a post-truth world