I want to be straightforward with the administrators from the start. I have no sales thread on this forum, no service operating here and no prior communication with the accuser on this platform. Everything alleged against me took place on Telegram, in an external third party group called “ref.sh” which has no official connection to Cracked whatsoever. My identity was never verified through forum PMs at any point.
I have no connection to this accuser or their service
I have never worked for this person, never been hired by them and have never had any business relationship with them on or off this platform. They dealt with someone on Telegram who claimed to be me. At no point did they confirm that person was actually me through Cracked There is no forum PM, no platform conversation and no interaction between the accuser and my Cracked account whatsoever. This is the most basic step any operator should take before bringing someone onto their business and it was never done.
Show me the onboarding
The accuser claims they hired me as a worker, agreed terms with me, briefed me on their process and had me create a dedicated work account. If any of that happened, it left a record. I am asking them to produce it. Show the onboarding conversation. Show where terms were agreed. Show any form, intake process, or documented agreement that was used. Legitimate operations handling orders worth over a thousand dollars do not run on informal Telegram exchanges with no paper trail and no identity verification. If I was hired and onboarded, that process exists somewhere. Produce it.
Why I changed my Telegram username
I changed my Telegram handle once. The reason is straightforward. When the Sonic report was posted publicly on this forum, people immediately began finding my Telegram through it and contacting me to take advantage of the situation. This is not speculation. We can already see this behaviour evidenced by @ancientaccounts1, which contacted Kay directly while impersonating me exploiting circumstances. Changing my handle was a direct protective response to that. Once I released my tg @ it was reclaimed almost immediately by someone else. Any activity tied to that username after I released that handle is not attributable to me and the accuser has no way of proving which version of the @ they were dealing with at any given time.
The @ancientaccounts1 account is not mine
When I was asked directly in a group chat whether I was the same person as @ancientaccounts1, I denied it immediately and on record. My response was timestamped: "not me. waiting for this to be resolved ONLY VIA CRACKED." (April 5th) Beyond that denial, the screenshot the accuser submitted as evidence actually shows @ancientaccounts1 tagging me, @pad_1337, as a separate user in that same conversation. It is not possible to tag yourself. That screenshot does not implicate me. It confirms we are two different people. The claim from @HelloNames that I used @ancientaccounts1 directly contradicts this submitted evidence. See screenshots.
On the @HelloNames testimony
@HelloNames states that the user in question had a tag on ref.sh "issued by an administrator after he provided evidence that he was indeed the author of the post." That administrator is a ref.sh Telegram group moderator. Not a Cracked administrator. A third party Telegram group moderator verifying someone's identity carries no official weight on this forum. Any person can claim to be anyone in an unmoderated external chat group and receive a tag based on whatever evidence they choose to present. Beyond that, everything @HelloNames witnessed happened inside ref.sh with no verified link to my Cracked account. Their testimony is based entirely on the unverified assumption that my claimed @ on Telegram is me on Cracked.
On the ref.sh group itself
Every piece of evidence in this report originates from ref.sh, a third party Telegram group with no official connection to Cracked, run by administrators whose identity, standards and verification methods are completely unknown to this forum. Look at the pinned comment in that group provided in the video. The admin itself wrote that he was being impersonated by someone. Does this seem like a safe environment at all? Anyone can operate inside that group under any name. Tags issued there mean nothing here. Logs from that group cannot be independently verified. The accuser constructed their entire case on activity within this external unverified environment without taking a single step to confirm my identity through Cracked directly.
On Rivo167's claim
This person claims I tagged them on Telegram and assigned them an order to process. Their entire claim rests on that @ being me, which has never been established through any official channel. They have produced no forum PM, no on platform communication and nothing connecting this to my Cracked account. They also processed a high value order based solely on a Telegram interaction with no formal verification or agreement in place. That is not something I can be held accountable for.
On the accusation that my explanation is too convenient
The accuser argues that my explanation mirrors what my @ said on Telegram and therefore proves we are the same person. This logic does not hold. The explanation is the same because it is the truth. The fact that someone on Telegram and I on Cracked are giving identical answers does not make us the same person. It equally suggests that whoever was operating as my @ was close enough to my situation to understand it and mirror it deliberately. That is not proof of identity. That is an assumption being presented as evidence.
The deletion of my Telegram was a direct response to threats
On April 18th at 14:27, Sonic Enrolls contacted me out of nowhere. By 14:31 I had received a dox threat. I deleted my Telegram account in direct response to that threat. This sequence is documented and timestamped. The accuser frames this deletion as calculated damage control. The timestamps tell a different story. The deletion happened because I was being blackmailed, not because I was being confronted about a scam. These are two very different things and the timeline makes that clear.
The harassment campaign against me is documented
I have screenshots showing my account @pad_1337 being tagged and threatened inside these group chats. One message reads "we got u here... we got u everywhere buddy," sent by Sonic Enrolls profile picture. This is not a legitimate dispute. This is a coordinated effort to pressure me in connection with the Sonic case and it is documented.
A final note on ref.sh
These events took place within ref.sh I would invite them to raise it with the ref.sh administrators directly. They are after all the same administrators who issued "me" a tag called "Sonic Slayer" - which tells you everything you need to know about the credibility and seriousness of that group's moderation standards. This is not a verified professional environment whose conclusions should carry any weight on this forum.
Conclusion
Every argument presented against me rests on a single unverified assumption: that my claimed username on Telegram is me on Cracked. That connection has never been established through any official channel. No forum PM exists linking the two. No on platform interaction ever took place. The ref.sh group is an external Telegram group whose admin verifications carry no weight on this forum. The @ancientaccounts1 account was denied by me in real time and is shown in submitted evidence tagging me as a separate person. My Telegram deletion is explained by a timestamped blackmail threat. Every third party testimony is based entirely on unverified activity in an external group. No onboarding, no agreement and no verified identity check has been produced because none of it involved me. The accuser has no services on cracked. So we can bring any external situations here for mods to deal with?
I am fully available to cooperate with any admin investigation and happy to answer questions directly through forum PMs.
https://ibb.co/TqpJ6FjQ
https://ibb.co/8gmvqdwN
https://ibb.co/zhQkkYJs