X (Twitter) Scams: Blue-Tick Impersonators, Fake Customer Support Replies, Crypto Giveaways and DM Job Offers

Short answer: on X, a blue tick only means the account pays for X Premium. It does not mean the account is who it says it is. The most common X scams are fake "customer support" accounts that reply when you complain to a bank or telco, crypto "giveaways" that promise to double what you send, and DM job offers that end with you paying a deposit. Real companies will never ask for your PIN, password or OTP in a reply or DM.

What do the blue, gold and grey ticks on X mean?

Before 2023, a blue tick meant the account was notable and checked. That changed, and scammers know many people still read it the old way. Consumer group Which? reported that fake airline and retail "support" accounts on X were paying for blue ticks to look more official.

Fake customer support replies: how the scam works

You tweet: "@YourBank I've been debited twice and nobody is helping me." Within minutes a reply appears from an account with the bank's logo, a name like "YourBank Care Desk" and maybe a blue tick:

Hi, we're sorry about this. Kindly send us a DM with your account number and phone number, or chat our resolution team on WhatsApp via this link.

Then one of these happens:

• They ask for your card details, PIN or the OTP "to reverse the transaction".
• They send a link to a fake login page for your bank or MoMo.
• They ask you to install an app "to receive your refund", which gives them control of your phone.
• For telco complaints, they ask for your MoMo PIN or a code sent to your phone "to reset your SIM".

Which? and Australia's CHOICE both found fake support accounts replying to customers who had tagged real brands, often with identical wording, which suggests bots watching for complaints.

The Bank of Ghana's October 2026 fraud advisory is blunt: no legitimate bank, mobile money operator, payment service provider or financial institution will ask for your PIN, password or OTP through phone calls, texts, emails or social media.

How to check a support account is real

1. Get the handle from the company's website or app, not from search results or replies. Most Ghanaian banks and telcos list their official social accounts on their websites.
2. Compare the handle letter by letter. Fakes add words like "Care", "Help", "Resolve" or swap letters, such as a capital I for a lowercase l.
3. Look for a gold tick or an affiliate badge. Large companies often have a gold tick. Their support accounts may carry an affiliate badge with the parent company's logo.
4. Check the join date and history. Tap the profile. A "support" account that joined last month, has few posts and only replies to complaints is fake.
5. Ignore anyone who moves you to WhatsApp, Telegram or a link. If in doubt, call the number on the back of your card or on the company's website.

Crypto giveaway reply scams

Under posts by famous people and crypto news, you will see replies like "Celebrating 10 million followers, sending 2x back on all BTC sent to this address for the next hour." Some use stolen celebrity photos or deepfake videos.

The US Federal Trade Commission's guidance is simple: promises to multiply your cryptocurrency are always scams, and celebrities are not contacting you on social media to double your money. In a 2021 report, the FTC said people had reported sending more than US$2 million in cryptocurrency to Elon Musk impersonators in six months. Crypto sent to a scammer's wallet is almost impossible to get back.

For Ghanaians trading crypto peer to peer, read how to trade crypto safely in Ghana.

DM job offers

A message arrives: "Hi, we're hiring remote workers. Earn US$50 to US$300 a day liking videos and rating products. No experience needed." It is usually a task scam. The FTC describes the pattern:

1. You are given simple tasks such as liking videos or rating products.
2. Your "earnings" grow on a dashboard and you may receive a small real payment to build trust.
3. Then you are told to deposit your own money, often crypto, to "unlock" the next tasks or withdraw your earnings.
4. Every deposit leads to another fee. You never get your money out.

The FTC's rule: anyone who says they will pay you to rate or like things online is a scammer, and no real job makes you pay to get paid. Our guide to fake job offers in Ghana covers the local versions.

Fake emails from "X"

X says it only sends emails from @x.com or @e.x.com, it does not attach files to its emails, and it will not ask for your password by email, DM or reply. A "your account will be suspended, verify now" email from any other address is phishing. Delete it.

How to secure your X account

1. Go to Settings and privacy, then Security and account access, then Security.
2. Under Two-factor authentication, choose an authentication app or a security key. Since March 2023, X only offers text-message 2FA to Premium subscribers.
3. Save your backup codes somewhere safe. X lets you generate up to five.
4. Under Additional password protection, add a passkey if your phone supports it.
5. Check Apps and sessions and remove anything you do not recognise.

How to report a scam account on X

• A scam reply or DM: tap the three dots on the post or message, then Report.
• Impersonation: open the profile, tap the three dots, then Report. If the account is pretending to be you or your business, use X's impersonation form in the Help Centre at help.x.com. X may need a report from the person or organisation being impersonated before it acts.
• Parody accounts are allowed only if clearly labelled. An unlabelled "support" account using a bank's logo is not parody.

If your X account was hacked

X's Help Centre says to reset your password with Forgot password on the login page, secure your email account, and revoke third-party apps you do not recognise. If you still cannot get in, submit a support request through help.x.com/forms using the email address linked to the account, and include your username and the date you last had access. Ignore paid "recovery" services.

What to do if you already gave details or paid

1. Call your bank or MoMo provider on the number on its website or your card. Block the card or wallet and report the transaction.
2. Change any password you shared, and turn on two-factor authentication.
3. Report to Ghana's Cyber Security Authority by calling or texting 292, WhatsApp 0501603111, or report@csa.gov.gh. Outside Ghana, use your national fraud line.

Then check a number, handle or website on TrustCheck and report it so others are warned.