X locks accounts on first crypto post to block compromised accounts from promoting scams

X announced a new security feature that automatically locks accounts the first time they attempt to post about cryptocurrency, forcing users to complete identity verification before resuming activity.

The auto-lock aims to disrupt a common attack pattern: hackers gain access to accounts through phishing emails, then immediately post scam promotions before the original owner can respond.

A Direct Response to Account Hijacking Campaigns

The latest X crypto scam protection feature is designed to disrupt a well-established attack pattern. Hackers typically gain access to accounts through phishing emails, take control of the profile, and immediately use its credibility to push scams to followers.

According to Elon Musk’s platform leadership, this new safeguard targets the moment scammers try to monetize access. By triggering a lock on the first crypto-related post, X crypto scam protection removes the ability to instantly exploit compromised accounts.

“This should kill 99% of the incentive,” said Bier, responding to a user who described losing access to their account through a phishing scheme disguised as a copyright notice.

How the Feature Works

Under the new X crypto scam protection system, any account that has never previously posted about cryptocurrency will be flagged the moment it attempts to do so. Once triggered, the account is temporarily locked and the user must complete a verification process.

This approach ensures that even if attackers gain access, they cannot immediately execute scams. The X crypto scam protection mechanism effectively inserts a barrier between account compromise and financial exploitation.

Phishing attacks often rely on speed—hackers move quickly to post scam links before the original account owner can respond. By slowing this process, X crypto scam protection aims to break the attack chain at a critical point.

Tackling a Long-Standing Problem

Crypto-related account takeovers have plagued the platform since its days as Twitter. The introduction of X crypto scam protection builds on earlier efforts to limit spam, coordinated bot activity, and fraudulent promotions.

Longtime users who have never engaged with crypto content will now face a verification step, while legitimate users are expected to regain access quickly. According to internal discussions, X crypto scam protection is calibrated to minimize disruption while maximizing security.

Billions Lost to Social Media Crypto Scams

The urgency behind X crypto scam protection reflects the scale of the problem. The Federal Trade Commission has repeatedly warned that crypto scams originating on social media have cost users billions of dollars in recent years.

Because blockchain transactions are irreversible, victims often have no way to recover stolen funds. This reality has made compromised accounts especially those with large followings high-value targets.

By cutting off the ability to immediately promote scams, X crypto scam protection directly addresses the financial incentive driving these attacks.

Criticism and Limitations

Despite its potential, X crypto scam protection is not without critics. Some argue that the feature only intervenes after an account has already been compromised, rather than preventing phishing attacks at the source.

Bier himself pointed to upstream issues, criticizing Google for failing to adequately filter phishing emails through Gmail.

“Google isn’t doing enough to stop phishing,” he said, framing X crypto scam protection as a necessary workaround rather than a complete solution.

Others have noted that the feature could create friction for legitimate users posting about crypto for the first time. However, X maintains that the verification process will be streamlined to avoid unnecessary delays.

A Targeted Fix in a Broader Threat Landscape

While X crypto scam protection addresses a key attack vector, it operates within a much larger ecosystem of crypto-related fraud. Recent data suggests overall hacking losses have declined, with February 2026 recording one of the lowest monthly totals in nearly a year.

Still, major incidents—such as the recent exploit involving Drift Protocol—underscore that risks remain high.

In that context, X crypto scam protection represents a focused but meaningful step. By disrupting one of the most common and profitable scam pathways, the platform is attempting to reduce both the frequency and impact of attacks.

A Shift Toward Platform-Level Defense

Ultimately, X crypto scam protection signals a shift in how social platforms approach crypto security. Rather than relying solely on user awareness, the strategy embeds safeguards directly into platform behavior.

As phishing tactics evolve and attackers grow more sophisticated, measures like X crypto scam protection could become standard across the industry.

For now, the feature stands as a clear message: the era of easy account hijacks and instant crypto scams on social media may finally be facing serious resistance.