Key Highlights
- Over 10 purchased accounts with large followings flood X with sensational war/political “doomposts” (often exaggerated or fake), cross-promoting to boost visibility and exploit doomscrolling.
- They pivot to promoting scam tokens/fake giveaways. On February 22, 2026, 10 linked accounts hyped $ORAMAMA, netting promoters six-figure profits in a quick pump-and-dump before abandoning it.
- The playbook resembles propaganda tactics and could be exploited by nation-states. ZachXBT calls for bans, legal action, and user vigilance against AI-generated spam and suspicious account behavior.
The prominent blockchain investigator ZachXBT today published a detailed thread revealing what he describes as a coordinated operation on X.
It reveals that more than 10 accounts—many purchased with existing followings—systematically flood the platform with sensational war and political content to harvest massive engagement before steering users toward cryptocurrency scams.
The scheme, according to ZachXBT’s analysis, follows a clear playbook: acquire aged accounts with established audiences, flood timelines with daily “doomposts” about escalating global conflicts or political crises, cross-promote identical content across the cluster to inflate visibility, and eventually pivot to promoting fraudulent tokens or fake giveaways.
Once the promotion ends, operators frequently change usernames to obscure tracks and prepare for the next cycle.
Targeting doomscrolling to pump-and-dump
A standout example highlighted in the thread is the Wang Laurent handle on X, which ZachXBT says was repurposed to mimic an Asian version of popular news curator Mario Nawfal, complete with AI-generated persona elements.
All the attached screenshots show the account and its affiliates repeatedly posting exaggerated or fabricated war-related updates that garnered millions of views and thousands of interactions, often amplified by unwitting large accounts quoting or replying.
Behind the scenes, these accounts host fake giveaways and promote crypto pump-and-dump schemes. The operation reached its monetization phase on February 22, 2026, when 10 linked accounts simultaneously promoted the $ORAMAMA meme token.
ZachXBT provided onchain evidence indicating the promoters realized six-figure profits from the brief pump before abandoning the token entirely. No further mentions of $ORAMAMA appeared from the cluster afterward, leading the investigator to conclude the group is already rebuilding engagement for a future scheme.
Broader implications and platform risks
The investigator warned that the tactic mirrors propaganda techniques and raises serious platform integrity concerns. “It’s scary to think about the implications if a nation-state actor operated the same scheme rather than a meme-coin scammer,” he wrote, calling for bans and potential legal action against such manipulation.
He urged users to scrutinize account history, recent posting patterns, and engagement sources before interacting with viral content, noting AI-generated spam has become widespread across social media.
The thread arrives amid ongoing scrutiny of X’s content moderation and creator incentives, especially after earlier platform acknowledgments of payouts tied to fake war footage. While no immediate response from X has emerged, ZachXBT’s findings add pressure on the company to address coordinated inauthentic behavior that blends geopolitical sensationalism with financial fraud.
Also read: KyberSwap Blocks USR Stablecoin Exploiter Wallets After $80M Breach
