X (Twitter) Deploying Crypto Scam Kill Switch — Auto-Locking Accounts That Mention Crypto for First Time
Elon Musk's X (formerly Twitter) is deploying a "scam kill switch" — automatically locking accounts the first time they mention cryptocurrencies. The measure targets a wave of phishing attacks using fake copyright emails that have surged across X in 2026. Any account mentioning crypto for the first time will be temporarily locked and required to complete identity verification before continuing.
Why X Is Taking This Drastic Step
X has been battling crypto scams aggressively since 2024. In Q1 2026, a new wave of attacks surged: fraudsters send fake "copyright violation" emails to X users, threatening account suspension. The emails contain malicious links that, when clicked, steal account credentials. Once accounts are compromised, they are used to promote crypto scams — often impersonating Elon Musk, major brands, or high-profile figures to fraudulently drive victims to scam wallets.
The scale: hundreds of thousands of compromised X accounts promoted crypto scams in Q1 2026, costing victims an estimated $400+ million in losses according to blockchain analytics firm Chainalysis. The new auto-lock system is X's attempt to break the cycle by making compromised accounts less useful to scammers.
How the Kill Switch Works
- Account posts or engages with crypto-related content for the first time ever
- X's system automatically flags and locks the account
- User must complete identity verification (ID upload) to unlock
- Verified accounts (blue/gold checkmarks) are exempt from this process
- Accounts with established history of crypto engagement are exempt
Impact on Regular Crypto Users
For legitimate first-time crypto posters: temporary inconvenience requiring ID verification. For scammers using newly-compromised accounts: significant friction that reduces the usefulness of batch-compromised accounts for scam campaigns. Privacy advocates have raised concerns about the ID verification requirement — pointing out that it creates a centralized database of X users who discuss cryptocurrency, accessible to X/xAI and potentially to government requests.
How to Protect Your X Account From Phishing
- Enable two-factor authentication with an authenticator app (not SMS)
- Never click links in emails claiming to be from X — go directly to x.com in your browser
- X will never ask for your password via email or DM
- Use a hardware security key for maximum account protection
- Check your connected apps periodically and revoke access you do not recognize
X Crypto Scams — FAQ
Social media security questions