On-chain sleuth exposes war-fueled crypto scam network

TLDR

An on-chain investigator has uncovered a coordinated social media and wallet network that exploits war and political fear to funnel victims into crypto scams.

1. On-chain sleuth ZachXBT documented more than ten linked X accounts and wallets using war and geopolitical doomposts to drive traffic into fake giveaways and pump-and-dump tokens.
2. The operation repurposes bought high-follower accounts, uses AI influencer impersonation, and has reportedly earned six-figure sums from politically themed meme coins like Oramama.
3. Key defenses are to treat panic-driven token launches and viral war posts as high-risk, verify accounts and contracts independently, and watch for stronger platform and law-enforcement responses.

Deep Dive

1. How The Scam Network Operates

Blockchain investigator ZachXBT reported a cluster of more than ten X accounts that were purchased with existing followers, then rebranded to post sensational war and political content to harvest engagement. These accounts coordinated reposts and replies to push negative doomposts about Middle East and US Iran tensions to large audiences, then pivoted those eyeballs into scammy crypto promotions such as fake giveaways and pump-and-dump tokens like Oramama on 22 Feb 2026. On-chain tracing linked the promotions and associated wallets, supporting estimated profits in the six-figure range from these campaigns, according to multiple reports that summarize his thread and evidence.

2. Why War And Politics Are Being Weaponized

The network deliberately leverages fear around real-world conflict and political instability, framing new tokens as ways to profit from or hedge unfolding crises. Reports note that some of the accounts used AI to impersonate influencers and manufacture posts that looked like authentic commentary on war and geopolitics, which then funneled followers into scam tokens and fake giveaways. ZachXBT warned that if a nation state used the same tactics instead of meme-coin scammers, the combination of attention hijacking and on-chain liquidity could make this a powerful propaganda and fundraising tool.

3. How To Protect Yourself And What To Watch

Several red flags recur across this network and similar scams. These include tokens launched within hours of breaking war or political news, coordinated promotion by accounts with recently changed usernames, and repetitive engagement between the same small cluster of profiles. Many posts pivot quickly from emotional or alarming news to opportunities, giveaways, or presales, often with thin or anonymous project documentation. Going forward, expect more pressure on platforms to detect coordinated manipulation, along with increased information sharing between on-chain investigators, exchanges, and regulators as they trace and freeze proceeds from such campaigns.

Conclusion

This war-fueled scam network shows how effectively scammers combine viral fear narratives with fast-moving token launches and on-chain liquidity. For crypto users, the main edge now is skepticism and verification whenever politics or war headlines are used to sell coins.