X (formerly Twitter) is taking a hardline stance against crypto phishing scams. Product lead Nikita Bier confirmed the platform will implement a new mechanism: when an account posts about cryptocurrency for the first time in its entire history, the system will automatically lock the account and demand identity verification. The move is designed to cut off hackers who hijack high-follower accounts to push fake airdrops and scam tokens.
User horror story triggers official response
On April 1, X user Benjamin White (@HelloBenWhite) shared a detailed thread and an 8-minute voice recording recounting how he lost his account to a phishing attack. He specifically tagged product lead Nikita Bier, urging the platform to address the security flaw. Bier responded quickly, revealing the new defense for the first time: any account's first crypto-related post will trigger an automatic lock and verification requirement.
Bier stressed that the measure will eliminate 99% of hackers' incentives. Attackers typically send mass phishing emails (disguised as wallet breach warnings or official alerts) to trick victims into clicking malicious links, then use the compromised accounts — often unrelated to crypto but with established followings — to promote fake projects.
Product chief blasts Google's inaction
Addressing the flood of phishing emails, Nikita Bier laid part of the blame on the email service giant. In his reply, he wrote bluntly: “Especially since Google is doing absolutely nothing to stop these phishing emails.” He argued that if Google intercepted phishing more effectively, hackers would face much higher hurdles.
As X's product lead, Bier has already cracked down on spam and scams in recent months, banning reward apps (InfoFi) that spam threads and introducing Smart Cashtags to reduce token symbol confusion. Notably, Bier also serves as an advisor to Solana, giving him deep insight into the crypto ecosystem.
The new policy is expected to roll out soon; exact execution details and geographic coverage haven't been disclosed. For the crypto community long plagued by phishing, it represents a strong platform-level countermeasure.