Blockchain sleuth ZachXBT says he uncovered a coordinated network of X accounts that used sensational or fabricated war and geopolitical posts to lure users into crypto scams. In a public thread with screenshots, he identified more than ten linked profiles that appear to have been purchased with existing follower bases and repurposed to push viral “doomposts” before switching to scam links.
According to ZachXBT, the accounts employed AI to imitate prominent influencers such as Mario Nawfal, flooding X with dramatic, attention-grabbing posts that generated heavy engagement. Once an audience had been drawn in, the operators pivoted to promoting fake crypto giveaways and pump-and-dump token schemes. On-chain analysis cited by the investigator indicates the operation may have pulled in six-figure proceeds.
The pattern, he says, began with accounts that already had followers. Those profiles repeatedly posted exaggerated or misleading content about wars and geopolitics, content that rapidly attracted millions of views. At the height of that attention, the operators switched to promotional posts for fraudulent token giveaways or scam tokens — including a pump-and-dump tied to a token called Oramama on Feb. 22.
ZachXBT also noted that many larger, legitimate accounts unknowingly amplified the bait by replying to and quoting the posts, which further broadened reach. To help track the operation, he published a list of X usernames he believes were involved so investigators and users can follow the accounts even if handles change or profiles are removed.
The report underscores an ongoing challenge for social platforms: coordinated fake accounts and bot-driven engagement can be assembled and weaponized quickly, often outpacing detection efforts. X’s product chief, Nikita Bier, has recently announced stronger anti-bot detection, removal measures, and flags for AI-generated content as part of broader attempts to reduce automated spam and misinformation.
Despite platform improvements, ZachXBT’s findings illustrate how rapidly coordinated activity can mislead large numbers of users and generate real financial harm. He urged people to be cautious, verify sources and account details before interacting with viral posts, and to report suspicious activity. He also argued that platform manipulation should lead to account bans and potential legal consequences for operators.
Cointelegraph reports the investigation while noting its editorial policy and encouraging independent verification of the details. The thread and evidence shared by ZachXBT provide a roadmap for monitoring similar campaigns and highlight the importance of skepticism and verification in fast-moving social media environments.