FactsLens campaign report: coordinated Gaza child donation appeals
Staged Spam / scam · confidence high · one campaign · recommended: human review
One coordinated campaign across 40 clusters and 16 accounts on Bluesky, running 2026-11-14 from 14:31 to 16:21 UTC. The network uses verbatim copy-paste donation appeals for an injured 5-year-old named Mohammed in Gaza, plus empty repost rings, with heavy account overlap, new empty profiles, and a creation burst. Judgment: staged. Type: spam (scam/fraudulent fundraising) with bot-like fake amplification.
Strongest innocent explanation considered: The strongest ordinary explanation is a spontaneous, sympathetic reaction to the real humanitarian situation in Gaza: multiple supporters independently copying a donation template for a real injured child, with some empty reposts caused by platform quirks, and one genuine Chuffed fundraiser (C29) being amplified by fans.
- All 40 clusters sit inside the same two-hour window on 2026-11-14 (14:31-16:21 UTC) and share the same 16 accounts.
- C1 and C28 are empty repost rings (+0h00 to +1h07/+1h06) that amplify the same account set; C29 names a Chuffed crowdfunding appeal for Mohammad; C2-C27 and C30-C40 are verbatim donation appeals for an injured 5-year-old named Mohammed in Gaza.
- Extensive cross-cluster account overlap: A1 appears in 25 clusters (C1, C6, C9, C10, C11, C13, C15, C17, C18, C19, C20, C21, C23, C24, C25, C26, C27, C28, C29, C35, C36, C37, C38, C39, C40); A2 in 22 clusters (C1, C6, C9, C10, C11, C13, C15, C17, C18, C19, C20, C21, C23, C24, C25, C26, C27, C28, C29, C35, C36, C37, C39); A3 in 22 clusters (C1, C9, C11, C15, C16, C17, C18, C19, C20, C21, C23, C25, C26, C28, C29, C30, C31, C32, C33, C34, C38, C40).
- Identical signals recur across clusters: copy_paste, cross_cluster, new_accounts, creation_burst, low_reach, empty_profiles, and repost_ring/synchrony for the repost clusters.
The campaign in 3D
The campaign hub, its clusters, the platforms and websites they use, and the accounts shared between clusters. Drag to rotate, scroll to zoom, hover for details.
state media Telegram independent outlet suspicious cluster red line: contradicts green line: agrees · full legend
Layers, top to bottom: sources · platforms & servers · clusters, stories, campaigns · accounts listed propaganda site website platform / server watch likely organic mentions the story, does not push it story campaign account Lines: pushes a version shared accounts same picture posts on links toLoading the 3D view…
Accounts to review first
| # | Account | Why |
|---|---|---|
| 1 | A1 name for reviewers only | Appears in the most clusters (25: C1, C6, C9, C10, C11, C13, C15, C17, C18, C19, C20, C21, C23, C24, C25, C26, C27, C28, C29, C35, C36, C37, C38, C39, C40), posts early in multiple waves (P35 +0h20, P45 +0h22, P51 +0h23, P58 +0h25, P62 +0h26, P68 +0h28, P71 +0h29, P74 +0h29, P77 +0h30), bridging repost rings and donation appeals; created 260 days ago with 0 followers and empty bio. |
| 2 | A2 name for reviewers only | Appears in 22 clusters (C1, C6, C9, C10, C11, C13, C15, C17, C18, C19, C20, C21, C23, C24, C25, C26, C27, C28, C29, C35, C36, C37, C39), posts among the earliest text appeals (P11 +0h13, P16 +0h14, P21 +0h16, P24 +0h17, P27 +0h18, P30 +0h18, P33 +0h19, P41 +0h21, P44 +0h21, P46 +0h22, P48 +0h23, P50 +0h23, P54 +0h24, P57 +0h25, P61 +0h26); created 788 days ago with only 6 followers. |
| 3 | A3 name for reviewers only | Appears in 22 clusters (C1, C9, C11, C15, C16, C17, C18, C19, C20, C21, C23, C25, C26, C28, C29, C30, C31, C32, C33, C34, C38, C40), created only 9 days ago with 0 followers, 4 follows, 29 posts and empty bio; posts P12 +0h14 and P37 +0h20. |
| 4 | A12 name for reviewers only | Appears in 11 clusters (C1, C6, C10, C13, C18, C23, C24, C25, C27, C28, C29), created 9 days ago with 0 followers, posts at the very start of both repost rings (P1 +0h00 in C28, P4 +0h01 in C29, P6 +0h01 in C1) and early donation appeals (P13 +0h14, P20 +0h16, P23 +0h17, P26 +0h17, P28 +0h18, P31 +0h19, P34 +0h20). |
| 5 | A10 name for reviewers only | Appears in 12 clusters (C1, C2, C3, C4, C5, C7, C8, C12, C14, C22, C28, C29), created 9 days ago with 0 followers, posts the earliest sampled text appeal (P10 +0h13 in C12) and many early variants (P15 +0h14, P18 +0h15, P22 +0h17, P25 +0h17, P29 +0h18, P32 +0h19, P38 +0h20, P40 +0h21, P43 +0h21, P49 +0h23, P59 +0h25, P65 +0h27, P69 +0h28, P72 +0h29, P75 +0h30, P78 +0h30, P79 +0h31, P80 +0h31). |
| 6 | A4 name for reviewers only | Appears in 17 clusters (C6, C9, C10, C11, C13, C15, C17, C18, C19, C20, C21, C23, C24, C25, C26, C27, C28), created 9 days ago with 0 followers, 2 follows, 23 posts, empty bio. |
| 7 | A7 name for reviewers only | Appears in 13 clusters (C1, C2, C3, C4, C5, C7, C8, C12, C14, C22, C23, C28, C29), created 798 days ago with only 2 followers, posts personalized template variants (P75 +0h30, P78 +0h30, P79 +0h31). |
| 8 | A8 name for reviewers only | Appears in 13 clusters (C1, C2, C3, C4, C5, C7, C8, C12, C14, C22, C23, C28, C29), created 788 days ago with 10 followers, posts early variants (P40 +0h21, P43 +0h21, P47 +0h22, P49 +0h23, P59 +0h25, P64 +0h26, P67 +0h27, P70 +0h28, P72 +0h29). |
What it pushes
- A parent (usually a mother) in Gaza appeals for donations and shares for her injured 5-year-old son Mohammed, claiming treatment is unaffordable or unavailable locally and that a link is on her profile page. C2C3C4C5C7C8C9C24C26
- A parent begs for urgent medical treatment outside Gaza / abroad for a critically injured or life-threatened son, asking for compassion, donations, and amplification. C6C10C13C18C23C25C27C29
- Fill-in-the-blank template where the addressee's first name is swapped between accounts (e.g., 'My friend Kelsey', 'My friend Christina', 'My friend Bill', 'My friend Gerrit', 'My friend Morgan', 'My friend Ellie', 'My friend Bruce', 'My friend Matilda'). C6C18C30C34C37
- Empty repost rings with no visible text, links, images, or videos, used to boost the same original posts without adding content. C1C28
How it is run
- Shared accounts: the same 16 accounts recur across many clusters, creating dense cross-cluster overlap. A1A2A3A4A5A6A7A8
- Timing: first wave posts between +0h13 and +0h39; second wave (C30-C40) between +1h06 and +1h49; empty repost rings start at +0h00/+0h01. C1C28
- Links: posts promise 'Link on my page' or 'story and link are on my page' but no link appears in any post text; C29 references a Chuffed crowdfunding campaign. C29
- Account ages: many accounts created only 9 days ago with 0 followers and empty bios (A3, A4, A9, A10, A12, A13, A15); some older accounts with very low followers (A1: 260 days, 0 followers; A2: 788 days, 6 followers; A5: 801 days, 0 followers; A6: 724 days, 5 followers; A7: 798 days, 2 followers; A8: 788 days, 10 followers; A11: 804 days, 2 followers; A14: 669 days, 1 follower). A1A2A3A4A5A6A7A8
Clusters in this campaign
C1C2C3C4C5C6C7C8C9C10C11C12C13C14C15C16C17C18C19C20C21C22C23C24C25C26C27C28C29C30C31C32C33C34C35C36C37C38C39C40
nvidia/nemotron-3.5-super-vl-120b-a12b, prompt c1, Sat 19:39 UTC, 1 model call, 13712 prompt tokens (all clusters read at once), 54.5 s. Ids: C cluster, A account (anonymised), P post. References the model was not shown are removed automatically.