Every Sunday we publish a short, free digest of what the GACS Social Scan flagged in the last 7 days. The goal is simple: if a pattern is spreading, you should know about it before someone in your replies asks "is this real?". This week's headline: X-handle impersonation is the dominant new threat by volume — every single one of the top-flagged accounts below is on X, and the #1 entry was scanned 19 separate times in 7 days by different users hitting the same funnel. ## What the Social Scan flagged this week
These are the highest-confidence flags from real user scans between 1 June and 8 June 2026 (verdict, max risk score, number of independent scans):
- @civilianweb3 (X) — likely_scam, 100/100, 19 scans. Far-and-away the most-hit handle of the week. Reply-bait into a DM funnel; the repeat scans are the signal that this account is actively spraying replies into trending crypto threads.
- @ceotesla_65 (X) — likely_scam, 100/100, 3 scans. Elon/Tesla impersonator pushing a "giveaway".
- @hailey_cryptoo (X) — likely_scam, 100/100, 3 scans. Fake-persona crypto-advice front.
- @saracrypto_eth (X) — likely_scam, 100/100, 3 scans. Same playbook, different persona.
- @xIamTheReaper (X) — likely_scam, 88/100, 4 scans. Anonymous spam-grade impersonator.
- @Cryptodiane, @cryptoadina, @Crypto__Haris, @stiles_intel, @Cryptoze, @fluffycrypt (X) — all likely_scam, all 100/100. The interchangeable "crypto-advisor" persona stack.
- @zandyor, @crypto_pump00, @BitcoinIntelX (X) — likely_scam, 80–90/100. Pump-call / "intel" branding.
- @PiNetworkAlerts (X) — high_risk, 45/100. Pi Network impersonator; lower confidence but the brand-impersonation pattern matches earlier confirmed cases.
- @airdrop_crypto, @selor, @spond, @eliseoPIGGY, @uzmanerkann, @roboticjoey, @cryptoxxxcoffee, @bitcoinblacck (X) — the long tail. All flagged at least once this week with verdicts ranging from high_risk to likely_scam.
Each of those handles has a live scanner page at /social-scan — paste the handle yourself and you'll see the same verdict our engine returned.
Why the wave is on X (and not websites this week)
Three forces lined up:
- Repurposed bot inventory. Accounts originally bought for general engagement-farming get re-pointed at crypto-scam funnels as soon as a market move happens. The mid-week ETH price spike was the trigger.
- Lower take-down friction. X has no equivalent of a domain-level take-down. A handle ban costs the operator minutes to replace — which is exactly why @civilianweb3 survived 19 separate user scans without disappearing.
- DM-first funnels. None of these accounts try to convert in the timeline. They reply-bait, then move the target to DMs (or Telegram) where there's no public audit trail. That makes one good social-handle check more valuable than a hundred URL checks this week.
The 30-second check that stops most of it
Before you respond to a DM about crypto recovery, "guaranteed signals", an airdrop claim, or a "support agent" — paste the handle into the GACS Social Scan. It runs an instant cross-check against the blacklist above, looks for impersonation patterns against verified brand accounts, and flags reply-spam signatures. No login, no rate limit.
If you're already in a DM and feeling uncertain: the Panic Guide walks through the 5 things to do in the first 10 minutes.
Numbers that put the week in context
- 20+ distinct handles flagged at high_risk or likely_scam in 7 days.
- 100% on X. Zero new high-confidence flags on Instagram, TikTok or Telegram this week.
- @civilianweb3 alone = 19 scans. When a single handle gets re-scanned that often by independent users, it means the operator is actively spraying — the same DM is landing in dozens of inboxes simultaneously.
- 3 brand-impersonators (Tesla/Elon, Pi Network, a "TrustDice"-style clone in the long tail). Brand-impersonators are 4× more dangerous on a per-DM basis because they borrow trust the operator never had to build.
What to do with this digest
- Bookmark this URL — every Sunday's digest will live at
/blog/scams-of-the-week-YYYY-MM-DD. - Forward to anyone who actively trades or has any crypto exposure on X — the cost of one missed DM is bigger than a year of reading these.
- Subscribe to the scam-alerts RSS feed to get new flags in real time, not weekly.
- If you spot a handle we've missed, drop it into /social-scan — if the AI flags it, it goes into next week's digest automatically.
See you next Sunday.
---
*Originally published at https://gacs.app/blog/scams-of-the-week-2026-06-08. Free social-handle scanner: https://gacs.app/social-scan.*