ZachXBT ties viral X “war” doomposts to crypto giveaway and pump-and-dump scams
Investigator says 10+ linked accounts used AI influencer impersonation and engagement bait, with onchain signs of six-figure profits
Blockchain investigator ZachXBT said on March 23 he identified a coordinated network of more than 10 linked accounts on X that used exaggerated or fake war and geopolitical posts to go viral before pushing crypto scam promotions. He said onchain evidence indicates the operation generated “six figures” in profits and warned the group may be preparing another scam.
The activity matters for traders and token communities because the same engagement loops that move attention on X can be repurposed into distribution for scam links and thin-liquidity tokens. ZachXBT’s thread describes a playbook that first manufactures reach with sensational geopolitical content, then converts that reach into clicks and buys once the posts peak.
ZachXBT said the network consisted of more than 10 linked accounts that were allegedly purchased with existing follower bases. Those accounts repeatedly posted war and political content he characterized as exaggerated or fake, designed to rack up millions of views. After the engagement spike, he said, the accounts pivoted into crypto promotions.
He described the “payloads” as fake crypto giveaways and pump-and-dump token schemes. In his account, the operators also used AI to impersonate prominent social media influencers, including Mario Nawfal, as part of the effort to make the posts and promotions appear credible. ZachXBT said the accounts flooded X with “doomposts” to maximize engagement before redirecting attention toward the scam activity.
“Onchain evidence suggests the scheme profited six figures,” ZachXBT said. He added that the group has been farming engagement and “may be preparing another scam.” The excerpt does not include a specific profit total, a transaction-level breakdown, or wallet addresses tied to the alleged proceeds.
ZachXBT pointed to a specific example from Feb. 22, citing a pump-and-dump promotion he referred to as “Oramama” as part of the network’s activity. He also said he observed numerous large accounts in replies and quote-posts that “fell for the engagement bait,” which he argued amplified the reach of the sensational posts even if those accounts were not knowingly participating.
The claims land as X has publicly emphasized anti-spam efforts. Last month, X product chief Nikita Bier announced enhanced anti-bot detection and removal measures, along with user flags for AI-generated content, as part of broader efforts aimed at automated spam and misinformation.
ZachXBT argued that platform manipulation should result in bans and legal consequences, and urged users to review recent posts and account details before engaging. He also said he shared a list of X users he believes are involved so they can be tracked if they change usernames or deactivate accounts.
What remains unresolved is attribution. The excerpt describes the accounts as “allegedly” purchased and does not indicate confirmation by X or law enforcement of who operated them, leaving the next concrete milestone as whether platforms or investigators can tie the activity to specific operators and infrastructure before any new campaign launches.
