X, formerly Twitter, is rolling out a new anti-scam measure that will automatically lock accounts the first time they mention cryptocurrency.
According to Nikita Bier, X’s Head of Product, the platform will auto-lock any account that posts about crypto for the first time in its history. The account will then require additional identity verification or steps before it can post further. This acts as a scam kill switch or kill switch to curb the common tactic where hackers or scammers hijack dormant or low-activity accounts and suddenly use them to promote tokens, airdrops, phishing links, or fake giveaways.
A surge in scams often involves compromised accounts, sometimes via fake copyright and phishing emails that pivot abruptly to crypto spam. Long-time users who suddenly shill tokens are a red flag. The policy aims to stop most of this at the source by forcing verification on first-time crypto posters.
Not a ban on crypto: Existing crypto users; those who’ve already posted about it won’t be affected in the same way. It’s focused on sudden behavior changes, especially from accounts with larger followings that could spread scams widely. This follows other recent X efforts against spam, bots, and paid promotion in crypto spaces.
Could significantly reduce scam volume, making the platform cleaner and safer for genuine discussions. Many in the crypto community have welcomed it as a way to kill off low-effort phishing and hacked-account spam. It might inconvenience legitimate new users or projects entering crypto conversations for the first time, potentially slowing organic growth or discovery.
Some worry it could feel overly broad or like indirect censorship, pushing more activity to Telegram or other platforms. Others note it may not catch every scam but could deter 99% of the incentive for quick-hit attacks. The feature is described as in the process of implementing or soon to roll out, so exact timing and fine details like what counts as a crypto mention or how verification works may evolve.
Crypto scams exploit the decentralized, irreversible nature of cryptocurrency transactions, making recovery extremely difficult once funds are sent. Scammers primarily target greed, fear, trust, and technical unfamiliarity. In 2025, losses from crypto scams reached an estimated $17 billion, with impersonation tactics and AI-enhanced methods surging dramatically.
Scammers send emails, DMs, texts, or social media messages impersonating legitimate platforms. The message often creates urgency: “Your account is compromised—click here to secure it” or “Claim your rewards/airdrop. Victims are directed to fake websites that look identical to real ones using similar domains or typosquatting.
Once there, users enter seed phrases, private keys, passwords, or connect their wallet and approve malicious smart contracts that drain funds. Variants include ice phishing (tricking users into signing transactions that grant unlimited approvals) or QR code scams at events/ATMs.
Address poisoning: Scammers send tiny dust transactions or fake NFTs to your wallet history, hoping you’ll copy-paste a poisoned address (visually similar) in a future transfer. Any unsolicited request for your seed phrase or to “connect wallet and approve” for rewards.
Scammers compromise dormant or low-activity accounts—often via phishing emails pretending to be copyright violations or security alerts. They pivot the account to suddenly promote a new token, airdrop, or double your crypto giveaway. Posts urge followers to send crypto to a scammer-controlled wallet for matching or early access.
High-follower accounts amplify reach; victims see it from a trusted source and FOMO (fear of missing out) kicks in. After posting, scammers may lock out the owner. This is why X is implementing auto-locks for first-time crypto mentions: it forces verification on sudden behavior changes, targeting this exact vector.
A long-inactive or non-crypto account suddenly shilling tokens, or any this account was hacked admission followed by promo. One of the most devastating and fastest-growing tactics, often yielding billions in losses. Scammers contact victims via dating apps, wrong number texts, or social media, building a romantic or friendly relationship over weeks/months.
They share fabricated success stories about crypto trading and introduce a surefire investment opportunity on a fake platform. Victims deposit crypto or fiat converted to crypto and see fake profits initially to build confidence.
When victims try to withdraw, they’re hit with fees or excuses—until the scammer disappears with everything. AI deepfakes make video calls more convincing. Strangers pushing unsolicited investment advice, especially crypto, after building emotional rapport. Legitimate opportunities don’t start this way.
Scammers advertise free tokens or promise to double crypto sent to a wallet. Victims connect wallets to claim, triggering drainer contracts. Or they send gas fees or small amounts upfront that vanish. Often promoted via hacked accounts, fake influencers, or spam. Ponzi elements pay early investors with new victims’ money until collapse.
Hijacking phone numbers to bypass 2FA and access accounts. AI videos and audio of celebrities or CEOs endorsing scams. Physical coercion to hand over keys. Crypto’s pseudonymity, speed, and global reach make tracing and recovery hard. Scammers use phishing-as-a-service tools, professional laundering networks, and AI for scale.
Verify all URLs, accounts, and links independently. Use hardware wallets for large holdings; enable 2FA preferably app-based, not SMS. Be skeptical of unsolicited contacts, urgency, or too good to be true offers. Research projects thoroughly: team, audits, tokenomics. Use reputable explorers and avoid copy-pasting addresses.
