Elon Musk’s X to Auto-Lock First-Time Crypto Mentions

TLDR

• Elon Musk’s X will auto-lock accounts that mention cryptocurrency for the first time.
• The platform will require additional verification before restoring posting access.
• Head of Product Nikita Bier said the feature aims to remove the incentive behind crypto phishing attacks.
• The move follows user reports of hijacked accounts promoting scam tokens and fake giveaways.
• Attackers often use phishing emails and fake login pages to capture credentials and two-factor codes.

Elon Musk’s X will soon auto-lock accounts that mention cryptocurrency for the first time. The company designed the measure to stop hijacked accounts from promoting scam tokens. Head of Product Nikita Bier said the change will remove the main incentive behind crypto phishing attacks.

Elon Musk’s X Targets Crypto Phishing With Auto-Lock Feature

Elon Musk‘s X plans to trigger automatic locks when an account posts about cryptocurrency for the first time. The system will require extra verification before the user can post again. Nikita Bier announced the measure after users reported rising crypto phishing cases.

He said the feature strikes at the core incentive behind account takeovers. “This should kill 99% of the incentive,” Bier wrote on X. He linked the decision to a surge in hijacked profiles promoting fake tokens and giveaways.

The company acted after a user shared a detailed phishing incident. The user said attackers sent a fake copyright violation email. The email led to a pixel-perfect login page that captured login credentials and two-factor codes.

The attacker then locked the victim out and began posting scam crypto promotions. The posts advertised fraudulent memecoins and fake airdrops. The hijacked account gave the scam credibility and attracted victims.

X inherited many of these scams from its earlier period as Twitter. Hackers often target verified or trusted accounts. They then exploit followers’ trust to push malicious links.

Crypto transactions remain irreversible, which makes recovery almost impossible. Scammers often run “double your money” schemes promising instant returns. Victims send digital assets, but attackers keep the funds.

Impersonation also drives many of these campaigns. Fraudsters spoof public figures and crypto brands. They then redirect users to fake trading or giveaway platforms.

Platform Tightens Controls as Phishing Persists

X has introduced bot purges and API restrictions in recent years. The company also expanded behavioral detection tools. The new auto-lock system builds on those earlier security efforts.

Bier blamed email providers for failing to block phishing attempts. He criticized Google for allowing phishing emails to reach inboxes. He argued that stronger email filtering would reduce account compromises.

In 2020, hackers breached Twitter’s internal systems through social engineering. They seized control of accounts belonging to Apple, Barack Obama, and Elon Musk. The attackers promoted a fake Bitcoin giveaway and collected over $100,000.

Authorities later arrested the perpetrator and secured a five-year prison sentence. The incident exposed weaknesses in internal controls. It also demonstrated how hijacked accounts can amplify crypto fraud quickly.

The upcoming feature will automatically restrict accounts at the moment of their first crypto mention. Users must complete the added verification steps before regaining posting access. Bier confirmed the rollout while responding to user complaints about phishing.

Elon Musk’s X continues to update its security framework. The company aims to neutralize hijacked accounts before scammers can profit. Bier stated that removing the incentive remains the central goal of the new safeguard.