TL;DR: ABC News reported on 8 August 2026 that a business correspondent's X account was compromised in late July 2026 and used to promote crypto investment schemes and luxury vehicles. The breach began with messages that seemed to come from trusted contacts asking for a vote in a podcast hosting contest, and spread through a network of financial professionals.

👉 Check my digital footprint — free 30-second check →

What ABC News reported

ABC News reported on 8 August 2026 that an ABC business correspondent's X account was compromised in late July and used to promote crypto investment schemes and luxury vehicles he does not own.

He had received direct messages that appeared to come from trusted contacts, asking him to vote for them to host a podcast. The messages contained links requiring extensive authentication steps, and he eventually clicked through several of them while trying to vote. The breach spread through a network of financial professionals, and hundreds to thousands of Australians received fraudulent direct messages. He also criticised X's lack of accessible customer support, saying he received only automated replies.

Why it works

The message comes from a real, known account, so it carries borrowed trust. A request for a simple favour, such as a vote, makes a login prompt seem routine. Once the account is taken over, the cycle repeats against the victim's own contacts.

Protection steps

Experts quoted in the report recommended changing passwords, enabling two-factor authentication and verifying suspicious requests through another contact method. See how to report identity theft in Australia and the Scamwatch and IDCARE recovery process if your identity may be at risk, and what to do after a scam, wherever you live for general recovery steps.

What to do if a contact sends you a strange link

If a friend's message feels slightly off, trust the feeling. Ask them by phone or another app whether they sent it. If they did not, tell them straight away so that they can secure their account, and do not forward the link.

If you have already clicked, act quickly: change the account password from a trusted device, review the apps connected to the account, turn on two-factor authentication and look at what the account has posted or sent. Anyone who received a strange message from you should be told, so that the cycle stops.

Where to report

Use the platform's report tool, then report to ReportCyber (Australian Signals Directorate) and Scamwatch. Our guide on how to report a scam to Scamwatch covers the process.

Frequently Asked Questions

How was the X account compromised?

Direct messages that appeared to come from trusted contacts asked for a vote in a podcast hosting contest. The links required extensive authentication steps, and he clicked through several.

What was the hijacked account used for?

To promote crypto investment schemes and luxury vehicles, with hundreds to thousands of Australians receiving fraudulent direct messages.

What do experts recommend?

Change passwords, enable two-factor authentication, and verify suspicious requests through another contact method before clicking links.

Where do I report a hijacked account?

Use the platform's report tool, then report to ReportCyber and Scamwatch.

Sources

Related Reading