Even one of the world's biggest tech companies is not immune to scammers. Earlier this month, Microsoft's official X (formerly Twitter) account was hijacked and used to promote a Clippy-themed cryptocurrency token. The takeover did not last long, but it is a sharp reminder that crypto scams are still very much alive, and that a verified badge or a famous name does not guarantee a post is genuine.
As reported by Eduard Kovacs at SecurityWeek, Microsoft confirmed that attackers took over its official X account, which has more than 13 million followers, on Thursday, October 1, 2026. Citing The Verge, SecurityWeek reported that:
Microsoft later told SecurityWeek it had confirmed unauthorised access, secured the account and removed the posts. The company also clarified that the apology was part of the hack and did not come from Microsoft. The fake Clippy account has since been suspended.
Microsoft has not said how the attackers got in. SecurityWeek noted common routes include phishing a social media manager, SIM swapping the linked phone number (as happened to the US SEC's X account in 2024), hijacking the recovery email, infostealer malware that grabs login cookies, or a compromised third-party posting tool.
A hacked brand account gives scammers instant credibility and a huge audience. When a trusted name appears to back a new coin, followers rush to buy before checking, which drives the price up. The scammers, who usually hold most of the supply, then sell and disappear. This is often called a "pump and dump" or "rug pull." Even a takeover lasting less than an hour can be enough.
Microsoft is far from the first victim:
The lesson is the same each time: the account may be real, but the post may not be.
Before buying any new token, check the company's official website and other verified channels for confirmation, and run unfamiliar crypto sites through a website checker.
Stop sending money and revoke any wallet permissions you granted, using a trusted tool from your wallet provider. Report the scam to the exchange you used, to X, and to the FBI's IC3 or your local police. Be wary of anyone who then contacts you offering to "recover" your crypto for a fee; recovery scams often follow the first loss. You can also Report a Scam to warn others.
The same tricks used on Microsoft can work on anyone. Use an authenticator app or security key instead of SMS codes, add a PIN to your mobile account to block SIM swaps, secure your recovery email, and review which third-party apps can post for you.
The Microsoft X account hack was short-lived, but it shows that even big companies can be hijacked and that crypto scams are still a common payout for hackers. Treat any sudden crypto promotion, even from a verified account, as suspicious until you can confirm it elsewhere.
Adam Collins is a cybersecurity researcher at ScamAdviser who operates under a pseudonym for privacy and security. With over four years on the digital frontlines, he specialises in translating complex threats into actionable advice. His mission: exposing red flags so you can navigate the web with confidence.
Source: SecurityWeek, "Crypto Scammers Hijack Microsoft's Official X Account," by Eduard Kovacs, with original reportin from The Verge.
