Coordinated Gaza donation scam and amplification network on Bluesky
Staged A spam network · confidence high · one campaign · recommended: human review
The clusters form one coordinated campaign. The same accounts recur across empty repost rings (C1, C28), verbatim Gaza child-donation appeals (C2-C27, C29-C33, C40), and repost-request clusters (C34-C39). The dominant behavior is staged, inauthentic fundraising using an injured-child template, supported by fake amplification. The strongest ordinary explanation—a newsroom, fan group, or disclosed bot—does not fit because many accounts are newly created (10 days), empty, have zero followers, were removed by the platform, and post identical text within minutes.
Strongest innocent explanation considered: A newsroom's several feed accounts, fans, disclosed bots, or a real event
- A1 and A2 appear in 19 clusters each, spanning C1, C28, and the Gaza donation clusters (C6, C9-C11, C13, C15, C17-C27, C40)
- A3 appears in 19 clusters including C1, C28, and Gaza clusters C9-C11, C15-C21, C23, C25, C26, C28-C33
- A4 appears in 17 clusters including C6-C11, C13-C21, C23-C28
- A5 and A6 appear in 12 clusters each, bridging early Gaza clusters C2-C8, C12, C14, C22, C23, C28 with C1 and C5 (which has news check real_event_distorted only as general context, not specific claim verification)
The campaign in 3D
The campaign hub, its clusters, the platforms and websites they use, and the accounts shared between clusters. Drag to rotate, scroll to zoom, hover for details.
state media Telegram independent outlet suspicious cluster red line: contradicts green line: agrees · full legend
Layers, top to bottom: sources · platforms & servers · clusters, stories, campaigns · accounts listed propaganda site website platform / server watch likely organic mentions the story, does not push it story campaign account Lines: pushes a version shared accounts same picture posts on links toLoading the 3D view…
Accounts to review first
| # | Account | Why |
|---|---|---|
| 1 | A1 6amalb7.bsky.social removed by the platform | Appears in the most clusters (19), spanning empty repost rings C1/C28 and Gaza donation clusters C6-C11, C13, C15, C17-C27, C40; removed by platform, created 260 days ago, 0 followers; posted P32, P48, P55, P65, P68, P78, P80 |
| 2 | A2 name for reviewers only | Appears in 19 clusters alongside A1; active older account (789 days, 314 posts) that posted many Gaza appeals including P8, P11, P13, P16, P18, P21, P24, P30, P38, P41, P47, P51, P58 |
| 3 | A3 amallll8.bsky.social removed by the platform | Appears in 19 clusters including C1 and C28; created only 10 days ago, removed by platform, 0 followers; posted P6 and P34 |
| 4 | A4 c0ldb1w78q.bsky.social removed by the platform | Appears in 17 clusters; created 10 days ago, removed by platform, 0 followers; posted P60, P63, P67, P70, P73 |
| 5 | A8 i8by4izqny.bsky.social removed by the platform | Appears in 11 clusters; created 10 days ago, removed by platform; posted early Gaza appeals P7, P12, P15, P22, P26, P29, P35, P39, P40, P45 |
| 6 | A9 hx6klb251x.bsky.social removed by the platform | Appears in 10 clusters; created 10 days ago, removed by platform; posted P1, P2, P3, P10, P14, P17, P23, P25, P28, P31 |
| 7 | A5 name for reviewers only | Appears in 12 clusters including early Gaza clusters C2-C8, C12, C14, C22, C23, C28; active older account (799 days); posted P62, P66, P69, P72, P75, P76, P79 |
| 8 | A6 aamallk7.bsky.social removed by the platform | Appears in 12 clusters; removed by platform; posted P33, P37, P44, P46, P50, P53, P56, P61, P64 |
What it pushes
- A 5-year-old child named Mohammed was injured in Gaza and needs donations, empathy, and shares for medical treatment or care; posts promise 'Link on my page' but include no link C2C3C4C5C7C8C9C26
- A parent in Gaza begs for urgent medical treatment outside Gaza for a son or child C6C10C13C18C27C40
- Empty repost rings with no visible text or shared content C1C28
- Requests for others to repost or share the poster's own post C34C35C36C37C38C39
How it is run
- Shared accounts: A1 and A2 each appear in 19 clusters; A3 in 19; A4 in 17; A5 and A6 in 12; A7 and A8 in 11; A9 in 10; A10 in 9 A1A2A3A4A5A6A7A8
- Templates: verbatim Gaza donation appeals with fill-in-the-blank name prefixes such as 'My friend Ellie', 'My friend Kelsey', 'My friend Bill', 'My friend Gerrit', 'My friend Morgan', 'My friend Matilda', 'My friend Christina' C6C7C9C18C24C29C33
- Templates: repost-request phrasing such as 'Hi Sam, could you please repost my post?', 'please repost my post if you have a moment.', 'could you please repost my post? Thanks so much.', 'could you please help me by sharing my post today?', 'I’d appreciate it if you could share/repost my post.' C34C35C36C37C38C39
- Timing: Gaza and empty-repost activity concentrated between +0h00 and +1h49 on 2026-11-14; amplification-request clusters C34-C39 occurred later between +5h14 and +7h12 C40
- Links: posts promise 'Link on my page' or 'The link is on my page' but no link appears in any post text C40
- Account ages: many accounts created 10 days ago (A3, A4, A7, A8, A9, A17, A21), with 0 followers, empty bios, and removed-by-platform status; some older accounts (A2, A5, A6, A10-A12) also participate A3A4A7A8A9A17A21A2
Clusters in this campaign
C1C2C3C4C5C6C7C8C9C10C11C12C13C14C15C16C17C18C19C20C21C22C23C24C25C26C27C28C29C30C31C32C33C34C35C36C37C38C39C40
nvidia/nemotron-3.5-super-vl-120b-a12b, prompt c1, Sun 07:27 UTC, 1 model call, 13900 prompt tokens (all clusters read at once), 40.1 s. Ids: C cluster, A account (anonymised), P post. References the model was not shown are removed automatically.