As I seem to recall some details vaguely from this thread, I've re-read all the info provided by OP in the first posts. The whole thing was fishy from the start, and basically, some unkown people contacted OP for him to buy them some Bitcoin. OP wire transfered some money to Binance, then withdrew to his blockchain.com addy and from there, he sent the money to the scammers. All of this happened in a couple of hours.

The part of sending money to the scammers addy would make sense as a test, but both were made on the same minute, and AFAIK blocks aren't mined that fast yet