Onchain sleuth exposes war panic scam ring

TLDR

On-chain investigator ZachXBT has uncovered a coordinated war panic scam network on X that weaponizes geopolitical fear to push crypto fraud.

1. The group bought large X accounts, doomposted about war and politics, then funneled that engagement into fake giveaways and pump and dump tokens, profiting six figures.
2. One exposed fake news account pushed fabricated Iran-strike narratives while promoting a meme coin, showing how misinformation and illiquid tokens are tightly linked.
3. The main defense is behavior-based: treat war-panic threads plus token shills or urgent links as hard red flags, and verify both narratives and assets before engaging.

Deep Dive

1. How The Scam Ring Operates

ZachXBT detailed a cluster of more than ten X accounts that were purchased with existing follower bases, then repurposed to exploit war and political fear for crypto scams. The operators posted highly negative, war-related updates to farm engagement, used linked accounts to amplify those posts, and then pivoted into fake giveaways and pump and dump token promotions, with on-chain flows suggesting six figure profits for the ring. The accounts frequently changed usernames after campaigns to obscure their history and reuse the same handles for new topics and scams, according to one investigation of this coordinated network of engagement farmers and scammers.

2. War Panic, Fake News And Tokens

In a related case, ZachXBT flagged a fake X account, Rashid bin Saeed, that spread an invented story about Iran listing civilian infrastructure targets while linking to a Telegram promoting the meme coin Chibification (CHIBI), illustrating how fabricated war stories can be tied directly to speculative tokens and low liquidity markets. Reporting notes that CHIBIs small market cap and sharp drawdowns made it easy to manipulate around such narratives. More broadly, he has warned that if small-time scammers can coordinate this kind of misinformation-plus-token scheme, similar tactics could be far more dangerous if used by more sophisticated actors.

3. How To Protect Yourself In War-Panic Markets

Patterns across these cases point to several concrete red flags: accounts with rapidly changed usernames, sudden shifts from general news to war panic plus token pitches, and promotions of unknown coins during spikes in geopolitical fear. Users should independently verify any dramatic geopolitical scoop with reputable news sources before acting, and separately verify any token via trusted listings, contract checks and liquidity data instead of links in viral threads. Avoid connecting wallets or signing transactions from links embedded in war or politics threads, and be especially skeptical of emergency offers, giveaways or airdrops linked to conflict narratives.

Conclusion

ZachXBTs findings show that some scammers now treat geopolitical fear as a growth hack for crypto fraud, blending doomscrolling, fake news and thinly traded tokens into a single playbook. For crypto users, the edge comes from recognizing that pattern early and refusing to mix emotional reactions to war headlines with wallet actions or speculative bets tied to those same narratives.