Blockchain investigator ZachXBT said he uncovered a coordinated network of X accounts using exaggerated or fabricated war and geopolitical posts to lure users into crypto scams. In a thread and screenshots he shared, ZachXBT identified more than 10 linked accounts that appear to have been bought with follower bases and used to push sensational content and scam links.
The accounts reportedly used AI to impersonate well-known influencers such as Mario Nawfal, flooding X with “doomposts” that drove high engagement before pivoting to fake crypto giveaways and pump‑and‑dump token promotions. On‑chain evidence cited by ZachXBT suggests the operation netted six‑figure profits. He added the group has been repeatedly farming engagement and may be preparing additional scams.
According to the investigator, the scheme began with accounts that already had followers. They repeatedly posted sensational or misleading war and political content that quickly went viral and attracted millions of views. At the peak of attention, the operators switched to promoting fraudulent token giveaways or scam tokens — including a pump‑and‑dump event tied to a token called Oramama on Feb. 22.
ZachXBT noted many large accounts amplified the bait by replying and quoting the posts, unknowingly boosting reach. He shared a list of X users he believes were involved so they can be tracked if usernames change or accounts are deactivated, and urged users to scrutinize recent posts and account details before engaging.
The findings highlight an ongoing problem with fake accounts and bot activity on social platforms, even as companies work to address it. X product chief Nikita Bier recently announced enhanced anti‑bot detection and removal measures and new flags for AI‑generated content as part of broader efforts to curb automated spam and misinformation. Still, ZachXBT’s report shows how quickly coordinated accounts can build engagement and mislead users.
The investigator argued that platform manipulation should trigger bans and legal consequences. He called on users to be cautious, verify sources, and report suspicious activity. Cointelegraph notes this reporting follows its editorial policy and encourages independent verification of details.
