6 Minutes
X (formerly Twitter) announced it is pursuing legal action after uncovering a coordinated bribery network that targeted company employees in an effort to reinstate accounts suspended for crypto-related scams and platform manipulation. The social platform said the scheme involved middlemen who were paid to influence internal employees to lift suspensions and restore accounts tied to fraudulent activity.
What X disclosed
In an official post through its Global Government Affairs account, X stated: "X has exposed and is taking strong action against a bribery network targeting our platform. Suspended accounts involved in crypto scams and platform manipulation paid middlemen to attempt to bribe employees to reinstate their suspended accounts." The company said legal proceedings are underway and that it is working closely with law enforcement to hold the responsible parties accountable.
Scope of the bribery network
According to X, the bribery operation was not limited to its own platform. The individuals linked to the scheme used a range of social media and online environments — including Instagram, TikTok, YouTube, Minecraft and Roblox — to run scams and manipulate audiences. The platform said the network paid intermediaries who attempted to reach X staff, offering money or other incentives to overturn enforcement actions.
Connections to organized cybercriminal groups
X identified ties between participants in the bribery scheme and known criminal collectives, naming groups such as "The Com" (also referenced as "The Community" or "Hacker Com"). These groups have previously been linked to cyberattacks and intrusions across both mainstream and crypto-focused targets. X’s disclosure flagged that the same actors have been associated with account takeovers, phishing campaigns, and other crypto scams aimed at siphoning funds from users or promoting fraudulent tokens.
Crypto scams and account takeovers: recent examples
Platform manipulation and account compromises have been a recurring threat in the cryptocurrency ecosystem. In 2025, several high-profile X accounts tied to crypto organizations were hijacked or misused to advertise fake tokens and rug pulls. Notable incidents cited by X and other observers include:
- The takeover of a venture capital firm’s X account to promote a counterfeit token.
- Breaches affecting crypto projects and platforms such as ZKSync, Curve Finance and Jupiter, where attackers posted false announcements about token launches or partnerships.
- The compromise of a UK lawmaker’s account to advertise a bogus Solana token.
- A celebrity account takeover used to push an $8 million memecoin scam dubbed DEAN.
These breaches illustrate how account takeovers and coordinated social-engineering campaigns can be leveraged to amplify crypto fraud, deceive users, and manipulate markets.
How the bribery-for-reinstate model works
Based on X’s description and typical tactics observed in similar operations, the bribery model generally follows a few steps:
- Scammers create or control accounts that violate platform rules (spam, impersonation, fake token promotions).
- When those accounts are suspended, the operators engage middlemen who claim they can get reinstatement by reaching employees or otherwise influencing internal review processes.
- Middlemen offer bribes or other incentives to platform staff, or claim to have access to insiders able to reverse enforcement decisions.
- If reinstated, compromised or fake accounts are again used to circulate fraudulent token sales, links to phishing sites, or coordinated pump-and-dump schemes.
While some offers may be empty promises by intermediary fraudsters, the mere attempt to bribe or manipulate staff represents a serious escalation in attacker tactics and raises regulatory and legal concerns.
Why this matters for the crypto industry
The interaction between social media abuse and blockchain ecosystems is a growing risk vector. Fake token promotions, impersonation of projects or influencers, and the orchestration of artificial hype can cause users to lose funds quickly. Because crypto transactions on most blockchains are irreversible, victims often have limited recourse. When social platforms are targeted by bribery or insider influence, the integrity of account enforcement — a key defense against scams — is undermined.
What X is doing and legal action
X says it has opened legal proceedings against participants in the bribery network and is coordinating with law enforcement agencies. The platform emphasized that exposing the network and taking action is part of a broader effort to protect users and preserve platform integrity. While X did not disclose the identities of employees contacted or the full operational details of the middlemen, the company confirmed it is pursuing civil and criminal remedies where appropriate.
Law enforcement and cross-platform response
Because the alleged network spanned multiple platforms, collaboration across social networks and with national and international law enforcement will be necessary to fully disrupt the actors. X’s statement indicates willingness to share evidence and support investigations, a step that could lead to arrests or asset seizures if authorities can trace funds and communications tied to the bribery attempts.
Risk mitigation and best practices for users and projects
Individuals and crypto projects can take several practical steps to reduce exposure to similar scams and account-takeover campaigns:
- Enable strong account security: use hardware wallets for high-value assets, enable two-factor authentication on social accounts, and use unique, strong passwords.
- Verify announcements independently: confirm token launches or funding news through official project websites, verified domain emails, and multiple trusted channels before acting.
- Be skeptical of urgency and financial promises: scams often push quick decisions, exclusive access, or guaranteed returns to pressure victims.
- Audit access controls: projects should limit who can post or make announcements from official social accounts and implement multi-person approval for major communications.
- Report suspicious activity: notify platforms immediately if you observe account compromise, impersonation, or suspicious promotions tied to crypto scams.
Takeaway
X’s revelation of a bribery network highlights a growing nexus between social media manipulation and crypto fraud. The interplay of account takeovers, coordinated disinformation, and attempts to influence internal moderation processes adds complexity to platform security and regulatory compliance. As X pursues legal action and law enforcement engagement, the industry should expect increased scrutiny around how social platforms detect, prevent, and respond to campaigns designed to restore suspended accounts and amplify crypto scams. For users and organizations in the blockchain space, the incident underscores the importance of rigorous account security, independent verification of token-related claims, and cross-platform cooperation to mitigate emerging threats.
Source: crypto
Leave a Comment