{"investigation":{"slug":"oramama-token-oramama-pump-and-dump","entity_name":"ORAMAMA Token ($ORAMAMA Pump-and-Dump)","trust_score":4,"severity_base":null,"score_modifier":0,"confidence":0.55,"status":"draft","content_type":"investigation","summary":"ORAMAMA ($ORAMAMA) is a Solana meme coin alleged by blockchain investigator ZachXBT to have been the target of a coordinated pump-and-dump scheme executed on February 22, 2026, via a network of purchased X (formerly Twitter) accounts that had spent weeks manufacturing fake U.S.-Iran war panic content to build audiences. According to ZachXBT's investigation, reported by multiple crypto-news outlets in late March 2026, on-chain analysis indicated the operation generated six-figure profits before the accounts abandoned the token entirely. No independently verifiable on-chain contract/mint address for the token could be located in public reporting.","sections":[{"content":"Blockchain investigator ZachXBT reported identifying a coordinated network of more than 10 accounts on X that were allegedly purchased specifically for their pre-existing follower bases and then repurposed. Per ZachXBT's described playbook, operators would \"purchase accounts with followers,\" \"doompost multiple times per day,\" \"repost content from alt accounts,\" and then \"promote fake giveaway or scam\" tokens before cycling usernames to evade detection. One flagship account, reportedly using the handle @wanglaurentceo under the persona \"Wang Laurent,\" allegedly cycled through 17 different usernames and amassed close to 80,000 followers; ZachXBT described it as an AI-generated fake persona modeled on media personality Mario Nawfal, created by running Nawfal's likeness through an AI image-generation tool. The accounts allegedly posted exaggerated or fabricated content about the U.S.-Iran conflict, including fabricated claims about strike lists, to drive viral engagement before pivoting to crypto promotions. This account of the network's construction and methods comes from ZachXBT's investigation as relayed by crypto-news outlets; AVOID.NET was unable to independently confirm ownership or operator identity behind the accounts.","heading":"Coordinated Network and AI-Generated Fake Personas","sources":[{"url":"https://www.tradingview.com/news/cointelegraph:3ce5ebb59094b:0-zachxbt-says-fake-x-accounts-used-viral-war-content-to-drive-crypto-scams/","name":"ZachXBT Exposes Fake Accounts Driving Crypto Scams on X (Cointelegraph via TradingView)","type":"news_article","credibility":2},{"url":"https://beincrypto.com/zachxbt-nation-state-crypto-scam-playbook/","name":"ZachXBT Warns Nation States Could Copy Crypto Scam Playbook","type":"news_article","credibility":2},{"url":"https://coinpedia.org/news/scammers-are-using-the-iran-war-to-steal-from-crypto-users-zachxbts-full-expose/","name":"Scammers Are Using the Iran War to Steal From Crypto Users: ZachXBT's Full Exposé","type":"news_article","credibility":2},{"url":"https://www.cryptotimes.io/2026/03/23/from-war-clickbait-to-6-figure-crypto-rugs-zachxbt-exposes-x-farming-scam/","name":"From War Clickbait to 6-Figure Crypto Rugs: ZachXBT Exposes X Farming Scam","type":"news_article","credibility":2}],"severity":"high"},{"content":"According to ZachXBT's investigation, on February 22, 2026, roughly ten accounts within the identified network simultaneously promoted a token called $ORAMAMA, described in reporting as a Solana-based meme coin traded via PumpSwap. Multiple outlets reported that the accounts never mentioned the token again after the initial coordinated push, a pattern consistent with a classic pump-and-dump: promoters build hype and buy in early, then exit once retail buyers have entered, leaving later buyers holding a devalued token. ZachXBT stated that on-chain evidence indicated the scheme generated six-figure profits (reported in U.S. dollars), though no specific dollar figure, wallet address, or independently reviewable on-chain trail was published in the secondary reporting reviewed. AVOID.NET could not locate the token's contract or mint address in any public source, including dedicated searches of Solscan, DexScreener, and pump.fun-related indexes; this claim should be treated as alleged and based on ZachXBT's on-chain analysis as relayed by press, not independently verified by AVOID.NET.","heading":"The $ORAMAMA Pump-and-Dump Scheme (February 22, 2026)","sources":[{"url":"https://blockchain.news/flashnews/onchain-evidence-reveals-oramama-pump-and-dump-scam-profiting-six-figures","name":"Onchain Evidence Reveals $ORAMAMA Pump and Dump Scam, Profiting Six Figures","type":"news_article","credibility":2},{"url":"https://financefeeds.com/crypto-fraud-ring-exploited-war-fears-on-x/","name":"Crypto Fraud Ring Exploited War Fears on X, Says ZachXBT","type":"news_article","credibility":2},{"url":"https://beincrypto.com/zachxbt-nation-state-crypto-scam-playbook/","name":"ZachXBT Warns Nation States Could Copy Crypto Scam Playbook","type":"news_article","credibility":2},{"url":"https://www.tradingview.com/news/cointelegraph:3ce5ebb59094b:0-zachxbt-says-fake-x-accounts-used-viral-war-content-to-drive-crypto-scams/","name":"ZachXBT says fake X accounts used viral war content to drive crypto scams","type":"news_article","credibility":2}],"severity":"critical"},{"content":"Following the publication of ZachXBT's findings, crypto-news outlet The Daily Hodl reported: \"Following his posts, ZachXBT says that X appears to have suspended all of the 16 scam accounts that he found.\" This indicates the broader identified cluster totaled 16 accounts (encompassing the primary network of \"10+\" accounts plus additional alt/repost accounts), all of which were reportedly suspended by X after the exposé. AVOID.NET was unable to independently verify current suspension status of each individual account, as X does not publish enforcement-action confirmations, and the underlying accounts are consequently inaccessible for direct review.","heading":"Platform Response: X Account Suspensions","sources":[{"url":"https://dailyhodl.com/2026/03/26/coordinated-network-of-x-accounts-manufacturing-geopolitical-panic-to-fuel-pump-and-dump-crypto-scams-zachxbt/","name":"Coordinated Network of X Accounts Manufacturing Geopolitical Panic To Fuel Pump-and-Dump Crypto Scams: ZachXBT","type":"news_article","credibility":2}],"severity":"medium"},{"content":"ZachXBT contextualized the $ORAMAMA episode within a broader environment of extreme market fear, noting that the Crypto Fear and Greed Index registered a reading of 8 around March 23, 2026 — comparable to levels seen during the FTX collapse — and had remained in \"extreme fear\" territory for over 34 consecutive days, which he suggested made manufactured panic content more effective at driving engagement. He was also quoted warning of the broader implications of the tactic: \"It's scary to think about the implications if a nation-state actor operated the same scheme rather than a meme coin scammer,\" framing the fake-news-to-scam pipeline as a technique that could be adapted for disinformation or influence operations beyond financial fraud. These are characterized in reporting as ZachXBT's own assessments and warnings rather than established fact, and are presented here as alleged commentary.","heading":"Broader Pattern and Nation-State Warning","sources":[{"url":"https://financefeeds.com/crypto-fraud-ring-exploited-war-fears-on-x/","name":"Crypto Fraud Ring Exploited War Fears on X, Says ZachXBT","type":"news_article","credibility":2},{"url":"https://www.cryptotimes.io/2026/03/23/from-war-clickbait-to-6-figure-crypto-rugs-zachxbt-exposes-x-farming-scam/","name":"From War Clickbait to 6-Figure Crypto Rugs: ZachXBT Exposes X Farming Scam","type":"news_article","credibility":2}],"severity":"medium"},{"content":"This dossier relies on secondary crypto-news reporting of ZachXBT's investigation rather than direct access to his original X/Twitter thread, court records, or a regulator's findings, since no law-enforcement or regulatory action related to $ORAMAMA was identified. No Tier 1 (court filing, regulatory action, or major wire-service) source was located discussing this specific token; all corroborating sources are Tier 2 crypto-news outlets that themselves cite ZachXBT. The token's contract/mint address, the identity of the account operator(s), and an exact dollar profit figure remain unconfirmed in public reporting reviewed for this dossier. Given the consistency of the account across at least seven independent crypto-news outlets, the core narrative (coordinated fake-persona network, war-panic content, February 22, 2026 $ORAMAMA promotion, six-figure alleged profit, subsequent X suspensions) is treated as moderately well-corroborated, but individual quantitative details (exact account counts, dollar amounts) vary slightly between outlets and should be treated as approximate.","heading":"Verification Limitations","sources":[{"url":"https://crypto2community.com/crypto-news/zachxbt-exposes-x-network-using-war-panic-to-push-crypto-scams/","name":"ZachXBT Exposes X Network Using War Panic to Push Crypto Scams","type":"news_article","credibility":2}],"severity":"low"}],"timeline":[{"date":"2026-02","event":"Approximately ten X accounts in the identified network simultaneously promoted $ORAMAMA; on-chain evidence later cited by ZachXBT indicated the scheme generated six-figure profits, after which the accounts never mentioned the token again.","source":"Cointelegraph (via TradingView)","source_url":"https://www.tradingview.com/news/cointelegraph:3ce5ebb59094b:0-zachxbt-says-fake-x-accounts-used-viral-war-content-to-drive-crypto-scams/","date_evidence":"One such promotion involved the pump-and-dump crypto scam referred to as Oramama on Feb. 22, ZachXBT noted.","date_original":"2026-02-22"},{"date":"2026-03-23","event":"ZachXBT published his investigation identifying the network of purchased/AI-persona accounts, the war-panic content strategy, and the $ORAMAMA pump-and-dump; multiple crypto-news outlets reported the findings the same day.","source":"Cointelegraph","source_url":"https://cointelegraph.com/news/zachxbt-fake-war-posts-x-crypto-scam-network","date_evidence":"Article published at URL path /2026/03/23/ (Cointelegraph, Cryptotimes, Coinalertnews, and Blockchainstories.de all dated their coverage of ZachXBT's exposé to March 23, 2026)"},{"date":"2026-03-26","event":"The Daily Hodl reported that, following ZachXBT's posts, X appeared to have suspended all 16 scam accounts he had identified.","source":"The Daily Hodl","source_url":"https://dailyhodl.com/2026/03/26/coordinated-network-of-x-accounts-manufacturing-geopolitical-panic-to-fuel-pump-and-dump-crypto-scams-zachxbt/","date_evidence":"The article header states: \"March 26, 2026\""}],"sources_used":[{"url":"https://cointelegraph.com/news/zachxbt-fake-war-posts-x-crypto-scam-network","name":"ZachXBT Exposes Fake Accounts Driving Crypto Scams on X (Cointelegraph)","type":"news_article","archive_url":"http://web.archive.org/web/20260712193630/https://cointelegraph.com/news/zachxbt-fake-war-posts-x-crypto-scam-network","credibility":2,"archive_timestamp":"2026-07-12T19:36:30+00:00"},{"url":"https://www.tradingview.com/news/cointelegraph:3ce5ebb59094b:0-zachxbt-says-fake-x-accounts-used-viral-war-content-to-drive-crypto-scams/","name":"ZachXBT says fake X accounts used viral war content to drive crypto scams (Cointelegraph via TradingView)","type":"news_article","archive_url":"https://web.archive.org/web/20260919000101/https://www.tradingview.com/news/cointelegraph:3ce5ebb59094b:0-zachxbt-says-fake-x-accounts-used-viral-war-content-to-drive-crypto-scams/","credibility":2,"archive_timestamp":"2026-09-19T00:01:01+00:00"},{"url":"https://beincrypto.com/zachxbt-nation-state-crypto-scam-playbook/","name":"ZachXBT Warns Nation States Could Copy Crypto Scam Playbook","type":"news_article","archive_url":"http://web.archive.org/web/20260726185311/https://beincrypto.com/zachxbt-nation-state-crypto-scam-playbook/","credibility":2,"archive_timestamp":"2026-07-26T18:53:11+00:00"},{"url":"https://financefeeds.com/crypto-fraud-ring-exploited-war-fears-on-x/","name":"Crypto Fraud Ring Exploited War Fears on X, Says ZachXBT","type":"news_article","archive_url":"http://web.archive.org/web/20260811185252/https://financefeeds.com/crypto-fraud-ring-exploited-war-fears-on-x/","credibility":2,"archive_timestamp":"2026-08-11T18:52:52+00:00"},{"url":"https://blockchain.news/flashnews/onchain-evidence-reveals-oramama-pump-and-dump-scam-profiting-six-figures","name":"Onchain Evidence Reveals $ORAMAMA Pump and Dump Scam, Profiting Six Figures","type":"news_article","archive_url":"http://web.archive.org/web/20260726081324/https://blockchain.news/flashnews/onchain-evidence-reveals-oramama-pump-and-dump-scam-profiting-six-figures","credibility":2,"archive_timestamp":"2026-07-26T08:13:24+00:00"},{"url":"https://dailyhodl.com/2026/03/26/coordinated-network-of-x-accounts-manufacturing-geopolitical-panic-to-fuel-pump-and-dump-crypto-scams-zachxbt/","name":"Coordinated Network of X Accounts Manufacturing Geopolitical Panic To Fuel Pump-and-Dump Crypto Scams: ZachXBT","type":"news_article","archive_url":"https://web.archive.org/web/20260918235147/https://dailyhodl.com/2026/03/25/bydfi-expands-european-reach-with-next-block-expo-2026-sponsorship-in-warsaw/autoload/?exclude=[359349,359362,359358]&lang=en_US","credibility":2,"archive_timestamp":"2026-09-18T23:51:47+00:00"},{"url":"https://coinpedia.org/news/scammers-are-using-the-iran-war-to-steal-from-crypto-users-zachxbts-full-expose/","name":"Scammers Are Using the Iran War to Steal From Crypto Users: ZachXBT's Full Exposé","type":"news_article","archive_url":"http://web.archive.org/web/20260811185157/https://coinpedia.org/news/scammers-are-using-the-iran-war-to-steal-from-crypto-users-zachxbts-full-expose/","credibility":2,"archive_timestamp":"2026-08-11T18:51:57+00:00"},{"url":"https://www.cryptotimes.io/2026/03/23/from-war-clickbait-to-6-figure-crypto-rugs-zachxbt-exposes-x-farming-scam/","name":"From War Clickbait to 6-Figure Crypto Rugs: ZachXBT Exposes X Farming Scam","type":"news_article","archive_url":"http://web.archive.org/web/20260918235612/https://www.cryptotimes.io/2026/03/23/from-war-clickbait-to-6-figure-crypto-rugs-zachxbt-exposes-x-farming-scam/","credibility":2,"archive_timestamp":"2026-09-18T23:56:12+00:00"},{"url":"https://crypto2community.com/crypto-news/zachxbt-exposes-x-network-using-war-panic-to-push-crypto-scams/","name":"ZachXBT Exposes X Network Using War Panic to Push Crypto Scams","type":"news_article","archive_url":"http://web.archive.org/web/20260402105335/https://crypto2community.com/crypto-news/zachxbt-exposes-x-network-using-war-panic-to-push-crypto-scams/","credibility":2,"archive_timestamp":"2026-04-02T10:53:35+00:00"},{"url":"https://castlecrypto.gg/news/zachxbt-uncovers-10-x-accounts-driving-6-figure-crypto-scams-with-ai-tactics/","name":"ZachXBT Uncovers 10+ X Accounts Driving 6-Figure Crypto Scams With AI Tactics","type":"news_article","archive_url":"https://web.archive.org/web/20260918235027/https://castlecrypto.gg/news/zachxbt-uncovers-10-x-accounts-driving-6-figure-crypto-scams-with-ai-tactics/","credibility":2,"archive_timestamp":"2026-09-18T23:50:27+00:00"}],"source_tags":[],"addresses":[],"reviewed":false,"reviewed_by":null,"model_used":"claude-code-investigator","created_at":"2026-09-18T23:31:32.22277+00:00","updated_at":"2026-09-19T01:01:15.519726+00:00"}}