so this is the address of the scammer address bc1qergs08g635azsy6fnfggnpqs2hpme6k8vkzv0s right?
You are right.
The scammer replaced the transaction that had been made to you with a new one and the address which received the fund in the replacement transaction is probably owned by the scammer.
so how i can find the address that the scammer add to get the coins?
As stated by Bitcoin_Arena, the fund was moved between many other addresses to make tracing the fund difficult.
there is alot of transactions worth in total about 500k has the same condition so we need to get the final address that the scammer used
500,000 dollars?
yes 500,000 dollars in total
There is a chain of addresses/transaction after that address in a short time frame. It appears as though the person was trying to hide the transaction trail.
Such a chain of transactions in a short time frame which move coins from just 1 input to 1 output is barely hiding anything. For such a 1 input to 1 output transaction without using any change address there's quite some likelyhood that both input and output belong to the same individual. Such a simple coin movement chain just wastes coins in fees and only hides something for bitcoin noobs.
How did you end up in this situation, was the “client” trying to pay you for some goods or services?
That sparked my interest, too, as I came to the same conclusion as hosseinimr93 in his post
...
I immediately saw that the Tx
54559adfc79b04fa16864d3c7ba789aa771fce59d4763e5d7cabcf6f95138c70 had RBF enabled and a very low transaction fee to keep the transaction as long as possible unconfirmed. This screamed for a later
replacement transaction by the scammer that denied the coins for the OP. It's likely that the malicious individual did this trick multiple times, maybe even with the OP as when you follow the chain of transactions this actor topped up coins and likely did the RBF trick multiple times (I didn't analyse it 'til the end, gave up after some lengthy chain of transactions over multiple days).
the client didn't share with me that much details about what he was paying for or what was happening exactly
holy shitttt
[moderator's note: consecutive posts merged]