ZachXBT Exposes Crypto Scam Network Fueling Fake War Panic

Background and Context

ZachXBT began tracking the network after observing repeated viral posts tied to unverified “war alerts.” One example involved an account named Rashid bin Saeed, which had more than 353,000 followers and gained verification in February 2026 after multiple username changes. The account published a detailed but fabricated list of civilian infrastructure targets Iran would allegedly strike if the United States attacked its power grid. These posts spread rapidly across crypto timelines while the Crypto Fear and Greed Index hovered at an extreme fear level of 8 for over a month. As a result, market anxiety amplified engagement. ZachXBT then cross-referenced posting patterns and discovered that the same accounts consistently pivoted from doom narratives to token promotions and giveaway scams. 

Similar tactics have appeared repeatedly. In July 2025, ZachXBT exposed influencer Crypto Beast for orchestrating an insider dump tied to the ALT token. The token’s market capitalization collapsed from about 190 million dollars to roughly 3 million dollars after insiders extracted more than 11 million dollars in profits. Earlier investigations uncovered influencer payout sheets linked to hundreds of accounts, as well as impersonation scams targeting users through fake exchange support messages. Engagement farming rings also bought aged accounts on online forums and used AI-generated personas to scale operations. 

During the Crypto Beast episode, retail holders faced severe losses as panic selling accelerated. The memecoin sector saw short-term trading volume spikes followed by sharp corrections. Likewise, February 2026 pump-and-dump events such as the SIREN token surge created localized fear and brief Bitcoin price dips tied to negative sentiment. However, fear indicators remained elevated overall. This environment created favorable conditions for repeated manipulation cycles. In the latest case, the ORAMAMA token reportedly generated six-figure profits for operators before disappearing from timelines.

Anatomy of the Exposed Operation

ZachXBT outlined a clear playbook. Operators first acquired follower-heavy accounts, then flooded timelines with AI-assisted panic posts multiple times daily. Next, they boosted reach through coordinated reposting rings and quotes from larger but unaware accounts. Finally, they inserted token shills and fake giveaway signals. All identified accounts promoted ORAMAMA on February 22, 2026 and then abandoned coverage. One persona, @wanglaurentceo, presented himself as a regional crypto media figure using a purchased account identity. On-chain analysis linked the cluster to six-figure profits. In addition, a related Telegram channel promoted the Elon-themed meme coin CHIBI, which traded near a 3.9 million dollar market capitalization before falling more than 20 percent within a day. 

Community Backlash and Calls for Accountability

The exposé has triggered strong community reactions and renewed calls for platform enforcement. Many users urged X leadership to remove the coordinated network and limit algorithmic amplification of misleading content. At the same time, traders emphasized the need for personal due diligence, including reviewing account age, posting history, and sudden shifts toward token promotions. 

Analysts warn that unchecked engagement manipulation can erode trust in crypto markets during periods of heightened fear. Moreover, the tactics could inspire more sophisticated propaganda campaigns by state or non-state actors. ZachXBT concluded by advising traders to approach viral geopolitical claims with skepticism.