What to know:
- A coordinated network of over 16 X accounts that used fear-driven posts has been exposed by ZachXBT.
- The group pushed a fraudulent token called “$ORAMAMA” and reportedly made six-figure profits before abandoning the token.
A coordinated network of accounts has been exposed for spreading content that promotes crypto scams. The crypto scam involved more than ten accounts that were working together in a structured way. These X accounts focused on posting content about war and politics to attract people’s attention and drive engagement.
According to the findings shared by ZachXBT, the network used a very calculated strategy to gather followers and increase influence so as to exploit unsuspecting users.
The operators of the crypto scam reportedly purchased a number of accounts that were already existing and had a number of followers, and with that, they had an immediate audience. These accounts then started to share a number of triggering posts that centered on fear, uncertainty, and breaking news, often exaggerating or fabricating information to trigger emotional reactions.
Source: ZachXBT
To increase visibility, the accounts reposted each other’s content, creating an illusion of widespread discussions that helped their posts gain traction across the platform. As engagement grew, the posts began reaching millions of users, with thousands of likes, comments, and shares on a daily basis.
Also Read: Cryptocurrency Scam Hits Retired Hong Kong Woman, Causing 6.6 Million Yuan Loss
How the Scammers Used Viral Content to Push Crypto Scams
After a while of successfully driving the audience to their pages, the network of fake pages started to promote fraudulent crypto scams.
The accounts frequently hosted fake giveaways and pushed tokens that were designed to exploit users. One of the tokens shared by the platform was called $ORAMAMA, and it was heavily promoted by at least ten accounts within the network on February 22, 2026.
After the promotion, the accounts stopped mentioning the token entirely. And on-chain data suggests that the operation generated profits that reportedly reached six figures.
Source: ZachXBT (X)
Investigators believe the group may have been preparing for additional scams as they have continued to farm engagements through the same means they used when they first started.
Further updates revealed that some additional accounts linked to the same entity are following the same behavior patterns. Many of these accounts had already blocked the investigator (ZachXBT), raising more suspicion about their activities and intent. So far, in response to the investigation, X has taken action and suspended all the sixteen identified.
Also Read: Polymarket Updates 3 Insider Trading Rules Across Platforms
Be the first to comment