Fintech & Crypto Alerts · Quinn Barrett · 5 July 2026

Threads MrBeast spam is part of a massive crypto scam network

Threads MrBeast spam is part of a massive crypto scam network

The MrBeast spam flooding Meta's Threads app is not random junk—it is the visible edge of a coordinated crypto scam network running more than 10,000 fraudulent casino websites, according to Infoblox security researcher Zach Edwards, whose analysis links dozens of spam accounts to the same operation. Some posts have drawn nearly one million views in 30 days while pushing users toward sites that harvest credit cards and crypto wallets.

Key Takeaways

Why is MrBeast spam everywhere on Threads?

If you scroll Threads regularly, you have almost certainly seen it: grainy screenshots of fake newspaper clippings claiming YouTuber Jimmy Donaldson—better known as MrBeast—is launching a new promotion or giving away cash. Engadget identified dozens of accounts posting this exact reply spam, and Edwards confirmed every one promoted websites belonging to the same scam network.

The posts rarely include obvious links. Instead, scammers embed obscure URLs inside images or nonsensical phrases, turning engagement into a scavenger hunt. Edwards told Engadget the tactic helps evade automated detection: when domains are buried in low-res screenshots rather than posted directly, many AI moderation tools miss them.

How does the crypto scam network actually work?

Once a user follows the hidden link, they land on a site styled as a crypto casino offering deposit bonuses and fake returns. The goal is a quick financial commitment—credit card details or a connected crypto wallet. Edwards' analysis of more than 10,000 collected domains shows many sites see little direct traffic, but the Threads layer acts as a high-reach funnel.

The operation appears professionally run. Edwards found overlap between domains promoted on Threads and spam that targeted Discord the previous year. Many sites also carry Meta Pixel tracking and X advertising integrations, suggesting systematic, data-driven campaigns rather than one-off fraud. Some accounts appeared to be hacked profiles of ordinary users; others were freshly created solely to promote casino links. A subset also posted half-second adult clips linking to Telegram channels.

Why does MrBeast make such effective scam bait?

MrBeast's name carries built-in trust. His real giveaways are legendary, and Malwarebytes head of consumer Mark Beare noted the creator is now cited in scams more frequently than figures like Elon Musk. That ubiquity extends beyond fraud—UFC light heavyweight Abdul-Rakhman Yakhyaev recently told Red Corner MMA he only learned who MrBeast was after fans compared the two following his knockout at UFC Qatar, underscoring how deeply the brand penetrates online culture.

Scammers exploit that familiarity. Fake headlines promising free money feel plausible because MrBeast actually gives money away—just never through random Threads replies. For more on how social platforms become fraud vectors, see our Fintech & Crypto Alerts coverage.

What should Threads users do to stay safe?

Edwards described the network as a "monster for A/B testing," constantly tweaking post formats to see what earns algorithmic amplification. Meta has not publicly detailed enforcement actions against this specific campaign, and the spam's longevity raises questions about moderation priorities on a platform where reply visibility is central to growth.

Users should never enter payment or wallet credentials from a social media post. Verify any promotion only through MrBeast's verified YouTube or official website. If you encounter suspicious MrBeast spam, report the account to Meta and avoid engaging—likes and lingering reads can feed the algorithm Edwards says scammers are actively gaming. Full technical analysis is available in Engadget's original reporting.

← Open in blast feed