Table of Contents
ToggleIn today's world where social media algorithms increasingly rely on "emotion-driven" approaches, cryptocurrency scam groups have also evolved sophisticated and sophisticated methods to exploit users. Renowned blockchain investigator ZachXBT recently published a detailed investigative report (Thread) on X (formerly Twitter), exposing a meticulously planned malicious network that exploits "fear" to promote a crypto scam.
Unveiling the "Doomsday Farm": Buying Old Accounts, Creating Fake News, and Manipulating Millions of Views
ZachXBT's investigation revealed that this collaborative network, consisting of more than 10 accounts (ultimately confirmed to be 16), had a highly sophisticated and deceptive operating procedure:
- Purchase high-authority old accounts: Scammers will first acquire old accounts that already have a certain number of followers, and then frequently change the usernames to cover up their past.
- AI-generated fake personas: Taking the account
@wanglaurentceoas an example, the person behind it used AI to generate a fake CEO persona that was jokingly referred to as the "Asian version of Mario Nawfal". - Doompost: These accounts post exaggerated, unverified fake news about wars, conflicts, and political crises multiple times a day.
- Matrix-style cross-promotion: Online accounts will forward and quote each other's posts, and even deliberately label or induce real well-known KOLs to participate in the interaction, so that these posts can quickly reach millions of views.
Traffic monetization: From fake news to the Meme coin reselling drama
Once these accounts successfully "hack" into a user's feed and gain their trust, the real predator strikes. ZachXBT points out that they will intersperse promotions of "fake giveaways" or low-quality cryptocurrency projects in high-traffic post replies or pinned articles.
The most classic case occurred on February 22, 2026. This group used all its affiliated accounts to simultaneously and aggressively promote a meme coin called $ORAMAMA . After attracting a large number of retail investors, the scammers quickly carried out a "pump and dump" scheme. On-chain data shows that the group easily profited as much as six figures in US dollars from this scam. After reaping the rewards, these accounts seemed to have forgotten everything and never mentioned the token again.
ZachXBT warns: The consequences could be dire if this were carried out by a "nation-state hacker".
This incident is not just a simple crypto scam; it exposes systemic vulnerabilities in current social media platforms. ZachXBT issued a stern warning in his post: if similar traffic manipulation techniques are used by "state actors" to spread political propaganda or interfere in elections, the consequences will be unimaginable.
"Social media today is rife with AI-generated spam and engagement farming. Before engaging with any sensational posts, always check the account's history and details."
Dramatically, after ZachXBT named the initial 11 accounts, these accounts, as if operating under a single brain, instantly and simultaneously blocked ZachXBT. He then identified five more accomplices, who were similarly blocked immediately. However, good triumphed over evil. After ZachXBT called on the platform to take legal action and submitted complete screenshots and on-chain evidence, the X platform swiftly suspended all 16 malicious accounts .






