ZachXBT said on Monday that he uncovered a coordinated network of accounts on X that used exaggerated or fabricated war and geopolitical content to lure users into crypto scams.
According to findings shared in an X thread, the operation involved more than 10 linked accounts—many allegedly purchased with existing follower bases—that posted sensational content alongside scam links.
The accounts reportedly used AI to impersonate well-known influencers such as Mario Nawfal, flooding the platform with attention-grabbing “doomposts” to build engagement before promoting fake crypto giveaways and pump-and-dump schemes. ZachXBT said onchain data suggests the group generated six-figure profits and may be preparing further scams.
The case underscores the ongoing issue of fake accounts and bot-driven activity on X, despite the platform’s stated efforts to address such behavior.
How the scam worked
ZachXBT explained that the scheme began with accounts that already had established audiences. These profiles repeatedly shared sensational or misleading geopolitical content that quickly went viral, drawing millions of views.
Once engagement peaked, the operators shifted tactics—promoting fraudulent token giveaways or scam tokens. One such example was a pump-and-dump scheme known as “Oramama,” which was promoted on Feb. 22, according to the investigation.
ZachXBT noted that many large accounts in replies and quote posts appeared to fall for the engagement bait, unintentionally amplifying the reach of the scam content.
Social media scams persist despite crackdowns
The findings come as platforms like X continue efforts to combat bots and fraudulent activity.
Last month, X’s product chief Nikita Bier announced upgraded anti-bot detection and removal systems, along with new labels to flag AI-generated content. These measures are part of broader attempts to reduce automated spam and curb the spread of misinformation.
Despite these efforts, ZachXBT’s findings highlight how quickly coordinated networks can generate engagement and mislead users at scale.
He argued that such platform manipulation should result in bans and potential legal consequences, urging users to carefully review posts and account details before interacting with content.
ZachXBT also published a list of X accounts he believes are involved in the scheme, noting that some may change usernames or deactivate to evade detection.
