X, the social media platform owned by Elon Musk, is preparing a new feature that will automatically lock accounts that post about cryptocurrency for the first time, according to statements from company representatives.
The measure was disclosed by Nikita Bier, head of product at X, who said the platform is implementing an automatic lock and verification process triggered when an account makes its first crypto-related post. The feature is intended to address a pattern of account takeovers used to promote cryptocurrency scams.
According to Bier, the change is designed to reduce the incentive for attackers who hijack accounts to post fraudulent crypto content. He stated that the mechanism could eliminate most of the motivation behind such attacks by preventing immediate use of compromised accounts for scam promotion.
The update follows repeated incidents in which attackers gain access to legitimate accounts and quickly post links to cryptocurrency schemes. In one reported case, a user said they were tricked into entering credentials on a fake X login page after receiving a phishing email that appeared to come from the platform. Once access was obtained, the attackers changed account details and began posting scam content within minutes.
The same report indicated that large numbers of similar incidents were recorded within a short period. A user who reported the phishing attack said that more than 1,300 related cases were logged within about an hour, based on responses received from X’s support systems.
The planned feature targets a specific behavior observed in compromised accounts, where profiles with no prior connection to cryptocurrency suddenly begin promoting tokens or investment opportunities. According to Bier, this pattern is commonly associated with account takeovers rather than legitimate user activity.
X has not provided a timeline for when the auto-locking system will be fully deployed. Additional details about how the verification process will work have also not been disclosed.
The update forms part of broader efforts by the platform to address scams linked to account compromise and phishing attacks that are used to distribute fraudulent cryptocurrency promotions.