ZachXBT Exposes Crypto Scam Network Using War Fear Narratives

• ZachXBT exposed a network that used war and political posts to drive massive engagement.
• The accounts amplify each other, then pivot to fake crypto giveaways and pump-and-dump tokens.
• On-chain data shows the scheme generated six-figure profits, raising concerns.

Blockchain investigator ZachXBT has uncovered a coordinated network of social media accounts that use fear-driven narratives about war and politics to funnel users into crypto scams.

In a detailed thread, the on-chain sleuth revealed that more than 10 accounts worked together to manufacture viral panic, leveraging high-engagement posts to attract attention before promoting fraudulent schemes.

Fake Narratives, Real Profits

According to ZachXBT, the operation follows a repeatable playbook. The actors reportedly purchase pre-existing accounts with followers. Then they flood timelines with “doomposting” content, often centered on geopolitical tensions or breaking news.

These posts are amplified by a cluster of interconnected accounts that repost and engage with one another, helping the content gain traction and reach millions of views daily.

One cited example involved an account posing as a fabricated Asian persona inspired by Mario Nawfal, generated using AI to appear credible and authoritative.

As engagement builds, the accounts pivot to promoting fake giveaways and coordinated pump-and-dump tokens. They often change usernames to avoid detection.

$ORAMAMA Pump-and-Dump Scheme

ZachXBT highlighted a specific case involving the token $ORAMAMA. On February 22, 2026, at least 10 accounts within the network simultaneously promoted the asset, driving artificial hype.

The promotion was short-lived. After the initial push, the accounts stopped mentioning the token entirely, an indicator of a pump-and-dump cycle.

On-chain data suggests the scheme generated six-figure profits for the operators.

Engagement Farming Fuels the Scam Cycle

The investigation also points to engagement farming. Large accounts, often unaware, interact with the viral posts in replies and quotes, unintentionally amplifying their reach.

ZachXBT noted that this ecosystem allows scammers to repeatedly recycle the strategy: building audiences through sensational content before deploying new scams.

He warned that the implications could extend beyond crypto fraud. A similar model, if used by more sophisticated actors, could influence public perception at scale.

Calls for Accountability

ZachXBT argued that such coordinated manipulation should result in platform bans and potential legal consequences. He also advised users to scrutinize account histories and posting patterns before engaging. He noted that AI-generated content and spam networks are becoming increasingly widespread across social media platforms.

Interestingly, all 11 identified accounts blocked him shortly after the thread was published. The outcome raises further suspicion that the network may be operated by a single entity or coordinated group.

Related: ZachXBT Probe Targets Axiom Staff Over Private Wallet Access