- The associated group of X accounts use fear-driven articles to lure users and lead them to crypto scams.
- The network relied on AI personas, repost chains, and virality to increase reach and build loyalty.
- The pump and drain system attached to ORAMAMA made a profit of six people before the accounts started.
On-chain watchdog ZachXBT has exposed a social network that uses scare stories to lure users into crypto scams.
The discovery has led to new questions about how easily the internet’s ideas can be changed on a large scale. The network, which appears to be running on X, has more than ten connected accounts. These profiles work together. He writes a number of articles that focus on international conflict, military affairs, and propaganda. The goal is to grab attention right away, and then channel that interest into crypto scams.
ZachXBT: Fake News X Account Used for Crypto Scams
According to him, these operators start by taking over existing accounts that already have followers. This gives them a quick advantage. From there, he fills the time with interesting posts, often several times a day. The tone is fast. The content is designed to create an emotional impact.
1/ I uncovered a coordinated network of 10+ accounts that create fear related to war and politics to drive traffic to crypto scams.
Method:
> Buy accounts and followers
> Doompost several times a day
> Rewrite the content of the alt accounts
> Promote fake or fraudulent offers… pic.twitter.com/uMjCSQUzwp— ZachXBT (@zachxbt) March 23, 2026
When you post, the content is amplified by a network of other accounts. These accounts are frequently rewritten and shared on their behalf. This method works. Texts are very interesting. Many get millions of views in just a few hours.
In many cases, networks also sent fictional characters online. One example featured by ZachXBT was a fake profile called the “Asian version” of a well-known crypto commentator. Persona looked promising at first glance. It was effective, responsive, and embedded within the ongoing conversation. Over time such accounts helped establish trust among unsuspecting users.
However, behind the scenes, the operation had a clear financial motive. As the relationship progresses, accounts start promoting fake links. This included fake airdrops, giveaway campaigns, and token promotions. Users were encouraged to click, link wallets, or participate in what appeared to be legitimate opportunities.
One of the most visible things connected to the network involved a brand called ORAMAMA. On February 22, 2026, several accounts in the group strongly encouraged the economy. The campaign did not last long. After an active reaction, a crypto disappeared from their diet. The chain’s data shows that the operation made a profit in six models before it was abandoned.
The scope of the project was greatly enhanced by the unexpected participation of authorized users. A number of top accounts that interact with the posts, either by replying or re-sharing. This means adding another layer of features. It also made the content look more credible, attracting a wider audience.
ZachXBT described the process as a combination of auto farming, AI-generated content, and collaborative development. This method is easy to repeat. That is part of the concern. The same approach can be applied to more than just finance. It can also confuse people’s opinion if it is used for different purposes.
ZachXBT has called for stricter rules from social media. They say that joint control should lead to social media account bans and legal consequences. Without close monitoring, such networks can continue to grow.
ZachXBT then added, “All 11 accounts mentioned just got banned by me (almost like they’re run by the same person)”.
Also Read: ZachXBT Discloses Alleged Insider Trading and Abuse to Axiom
