X auto-locks first-time crypto mentioners

TLDR

X is introducing an auto-lock and verification process for accounts that post about crypto for the first time to combat phishing and hijacked-account scams.

1. X will lock and require extra verification for accounts making their first-ever crypto post, according to Head of Product Nikita Bier.
2. The change targets phishing attacks that hijack accounts and push scam tokens, including recent high-profile incidents involving fake stories and hacked crypto founders.
3. For legitimate crypto users, this likely means more friction on first posts and potential false positives, so it is important to prepare for extra checks and secure your account.

Deep Dive

1. What X Is Actually Changing

Multiple outlets report that X (formerly Twitter) is implementing a feature that auto-locks any account when it posts about cryptocurrency for the first time, then forces additional verification before posting resumes. Nikita Bier, Xs Head of Product, described this as auto-locking and verification "if a user posts about cryptocurrency for the first time in the history of their account", saying it should remove most of the incentive for these scams, as summarized by Decrypt and others.

Some reports frame it as already rolling out, while others say X is "in the process of implementing" or "considering" it, suggesting the policy is committed but the exact rollout and tuning are still in progress.

2. Why X Is Doing This

The move is a response to persistent phishing campaigns that steal credentials via fake emails (for example, bogus copyright notices) and then use hijacked X accounts to promote scam tokens and links. Coverage highlights a recent case where a prediction market founders account was hacked and used for crypto scams, as well as a separate incident where a scammer faked the death of a famous tortoise to pump a Solana memecoin.

By locking accounts on their first crypto post and forcing verification, X aims to make compromised accounts much less useful to attackers, reducing the payoff from phishing campaigns. Bier has argued this could "kill 99% of the incentive" for these scams.

3. Impact And Risks For Legit Users

Legitimate users who have never posted about crypto before may find their account suddenly locked when they first mention Bitcoin, a token ticker, or a crypto link, and then be asked for ID or extra checks. Decrypt notes X may be especially focused on accounts with larger followings, but the full criteria, keywords, and appeal options are not yet fully documented.

This creates a trade-off: increased safety against scams, but more friction and the risk that genuine first-time crypto posters get caught in the net. It also does not remove the need for personal security practices, since phishing can still lead to email, wallet, or exchange compromise even if X limits posting.

Conclusion

Xs planned auto-locking of first-time crypto mentions is a security-focused change that sacrifices some convenience to blunt a specific, damaging scam pattern based on hijacked accounts. For crypto users, the main practical implications are a likely one-time verification hurdle and a stronger incentive to maintain good account security, while the broader benefit is a potential reduction in scam token shills and phishing-driven losses across the platform.