Iran War Panic Crypto Scam Network (ORAMAMA / X Account Manipulation)
Summary
In March 2026, on-chain investigator ZachXBT exposed a coordinated network of at least 11 X accounts that manufactured fake geopolitical panic — primarily around the Iran war and Cuban humanitarian crises — to funnel followers into pump-and-dump cryptocurrency schemes. The network used purchased aged accounts, AI-generated fake personas, and mass cross-reposting to artificially inflate reach, culminating in the coordinated promotion of the $ORAMAMA token on Solana's PumpSwap on February 22, 2026, generating alleged six-figure on-chain profits. X suspended all 16 identified accounts by the evening of March 23, 2026.
Connected Entities
2 entities · 10 linked investigations- 3f1Tfjdwxmj44haRowhdqkheKddyxyvahbXdjjPtqQNh→mentioned with→Iran War Panic Crypto Scam Network (ORAMAMA / X Account Manipulation)(50%)
Timeline(6 events)
2026-02-22
Ten accounts in the network simultaneously promoted the $ORAMAMA meme coin on Solana PumpSwap in a coordinated push, then ceased all mentions of the token. On-chain evidence indicates six-figure profits were generated.
ZachXBT on X2026-03-20
Cuban President Diaz-Canel publicly acknowledged real power grid failures in Cuba — the factual kernel that the scam network had been exploiting with fabricated claims of hospital blackouts killing ventilator patients.
Cryptopolitan2026-03-23
ZachXBT published a multi-part investigation thread on X identifying 11 accounts, their methodology (purchased aged accounts, doomposting, cross-reposting, scam promotion), the AI-generated @wanglaurentceo persona, and the $ORAMAMA pump-and-dump. He warned of nation-state applicability of the same technique.
ZachXBT on X2026-03-23
All 11 originally identified accounts simultaneously blocked ZachXBT upon publication of his thread, consistent with centralized operator control.
The Daily Hodl2026-03-23
ZachXBT identified five additional linked accounts: @jihooncrypto, @seongwooiq300, @iq300min, @raqeem_saudi, and @mrcryptowhalecn, bringing the total network count to 16.
The Daily HodlDecision Log
- hash: 6L1z7fXJyD99KCX7sE6A1g2Uu2TSovcZQtnocGXHW413
This investigation is cryptographically anchored to the Solana blockchain and source URLs are archived via the Internet Archive.
model: claude-code-investigator
generated: 6/15/2026, 12:29:12 PM
last updated: 6/15/2026, 12:29:19 PM
avoid.net — verified advice for a post-truth world