Blockchain investigator ZachXBT has revealed a coordinated network of fraudulent accounts on X that exploited sensational war and geopolitical content to funnel users toward cryptocurrency scams. The findings, shared through an X thread accompanied by screenshots, identified more than 10 linked accounts that were allegedly purchased along with their existing follower bases. The scheme combined viral misinformation with fraudulent token promotions to generate significant financial returns.
According to ZachXBT, the operation began with accounts that already had established audiences. These accounts repeatedly posted exaggerated or misleading content related to wars and political events, rapidly accumulating millions of views. Once engagement peaked, the accounts shifted focus to promoting fake crypto giveaways and pump-and-dump token schemes.
The network used artificial intelligence to impersonate well-known social media figures, including influencer Mario Nawfal, flooding X with what ZachXBT described as “doomposts.” One specific promotion tied to the scheme involved a pump-and-dump token called Oramama, which was pushed on February 22. ZachXBT stated that “onchain evidence suggests the scheme profited six figures” and warned that the group may be preparing additional scams.
The investigator noted that numerous large, legitimate accounts inadvertently amplified the fraudulent posts by engaging with the bait content. Their replies and quote posts boosted the reach of the scam material without their knowledge. ZachXBT also published a list of X accounts he believes are connected to the operation, anticipating that those involved may attempt to change usernames or deactivate their profiles.
The findings arrive at a time when X has publicly stated it is working to address bot activity and automated spam. Last month, X’s product chief Nikita Bier announced enhanced anti-bot detection and removal measures, as well as user flags for AI-generated content, as part of broader efforts to reduce misinformation and automated abuse on the platform. Despite these measures, the ZachXBT report illustrates how quickly coordinated accounts can build engagement and deceive users.
ZachXBT called for stronger consequences for platform manipulation, including bans and legal action against those responsible. He also urged social media users to carefully review recent posts and account histories before interacting with any content. The case underscores the ongoing challenge platforms face in distinguishing authentic engagement from coordinated inauthentic behavior designed to exploit public interest in high-stakes global events.
Originally reported by CoinTelegraph.
