London Daily

Focus on the big picture.
Thursday, Mar 05, 2026

Prosecutors Said A 17-Year-Old And Two Others Hacked All Those Famous Twitter Accounts In A Bitcoin Scam

“These crimes were perpetrated using the names of famous people and celebrities, but they’re not the primary victims here," prosecutors said.
Three people, including two teens, have been charged for their alleged roles in a wide-ranging Twitter hack that compromised the accounts of presumptive Democratic presidential candidate Joe Biden, former president Barack Obama, Tesla CEO Elon Musk, and other prominent figures in order to promote a bitcoin scam, authorities announced Friday.

Florida prosecutors said Graham Ivan Clark, 17, of Tampa, was the "mastermind" of the July 15 hack and is facing 30 felony charges, including 10 counts of fraudulent use of personal information and 17 counts of communications fraud. Clark was arrested early Friday, according to the Hillsborough County State Attorney's office.

In addition to Clark, federal authorities in the Northern District of California also charged Mason Sheppard, 19, of Bognor Regis in the United Kingdom with conspiracy to commit wire fraud, conspiracy to commit money laundering, and the intentional access of a protected computer. Nima Fazeli, a 22-year-old in Orlando, was charged with one count of aiding and abetting the intentional access of a protected computer in connection to the scam.

“These crimes were perpetrated using the names of famous people and celebrities, but they’re not the primary victims here. This ‘Bit-Con’ was designed to steal money from regular Americans from all over the country, including here in Florida," State Attorney Andrew Warren said in a statement. "This massive fraud was orchestrated right here in our backyard, and we will not stand for that."

Fazeli was arrested Friday and released to home confinement following a court appearance in Florida, according to Abraham Simmons, a spokesperson for the Northern District of California US Attorney's Office. No arrest information was available for Sheppard.

It was unclear whether Clark is also facing federal charges. Federal prosecutors did not identify him in a statement about the charges, noting that "juvenile proceedings in federal court are sealed to protect the identity of the juvenile," and that the federal government had referred the juvenile to Warren's office.

Simmons told BuzzFeed News he could not comment on the issue.

According to prosecutors, the perpetrators of the hack received more than $100,000 in Bitcoin as a result of the scam, which involved hacking the accounts of Obama, Biden, Musk, and other prominent figures, and then posting tweets from their accounts saying that they would double any bitcoin payments sent to the same bitcoin wallet.

Hacked accounts pinned the tweets promoting the giveaway scam to the top of their profiles or retweeted the posts. Other accounts that were hit included rappers Wiz Khalifa and the late XXXTentacion, boxer Floyd Mayweather, and billionaires Jeff Bezos, Michael Bloomberg, and Warren Buffett.

While previous cryptocurrency scams have tended to mimic verified Twitter users by creating accounts that look similar to the real ones, the July 15 scam was different in that the hackers gained access to real, verified accounts to proliferate their scam.

In response to the security threat, Twitter prevented many verified accounts from tweeting for the rest of the day, though the accounts that were affected were still able to like, retweet, and send direct messages.

According to Twitter, the hackers gained access to the social media company's internal network and support tools by targeting "a small number of employees through a phone spear phishing attack." They then used the employees' credentials to target 130 accounts, "ultimately Tweeting from 45, accessing the DM inbox of 36, and downloading the Twitter Data of 7."

"We appreciate the swift actions of law enforcement in this investigation and will continue to cooperate as the case progresses," Twitter's communications team tweeted Friday. "For our part, we are focused on being transparent and providing updates regularly."

The bitcoin wallet associated with the scam address sent or received 426 transfers between July 15 and 16, 415 of which "consisted of transfers from other bitcoin addresses into" the account, according to affidavits filed in federal court. The other 11 transfers were from the wallet associated with the scam address to other bitcoin addresses, "siphoning off 99.74% of the bitcoin deposited" and leaving a balance of just $274.01 in the account.

"No bitcoin was returned to the victims," the documents state.

According to the affidavits, authorities were able to identify the three individuals by tracing messages sent on Discord, an online messaging platform popular with gamers and hackers. The New York Times reported on the hackers' communications shortly after the attack, saying that scheme originated from a "teasing message" from a user named "Kirk."

“I work for Twitter. I can claim any @ for you," Kirk wrote, according to the affidavits.

"Prove it," the second user "Rolex," later identified by authorities as Fazeli, wrote back.

From there, Kirk showed Rolex and another Discord user later identified as Sheppard that he could take control of other people's Twitter accounts. The two then acted as "brokers" for Kirk, advertising "the sale of compromised Twitter accounts," procuring buyers, and "sending criminally derived proceeds from the sale of Twitter accounts to [Kirk] for the exchange for compromised Twitter accounts," according to the affidavits.

“There is a false belief within the criminal hacker community that attacks like the Twitter hack can be perpetrated anonymously and without consequence,” David Anderson, the US Attorney for the Northern District of California, said. “Today’s charging announcement demonstrates that the elation of nefarious hacking into a secure environment for fun or profit will be short-lived. Criminal conduct over the Internet may feel stealthy to the people who perpetrate it, but there is nothing stealthy about it. In particular, I want to say to would-be offenders, break the law, and we will find you.”
Comments

Oh ya 6 year ago
And people think it is safe to do online banking etc. 17 yr olds beating twitter. A fool and his money..........

Newsletter

Related Articles

0:00
0:00
Close
Iran Conflict Strains U.S.–U.K. Alliance as Trump and Starmer Clash Over Military Strategy
UK Interest Rates Could Rise Above Four Percent Again if Energy Shock Continues, Think Tank Warns
Starmer Defends Britain’s Iran Strategy as Badenoch Urges Stronger Military Support
Labour MP Says She Saw No Sign Husband Broke Law After Arrest in China Espionage Investigation
UK Jobless Rate Overtakes Italy’s for First Time in Years as Labour Market Weakens
United Kingdom Suspends Student Visas for Four Countries in Unprecedented Immigration Move
Campaigners Warn UK Student Visa Ban Could Push Migrants Toward Dangerous Channel Crossings
First U.K. Charter Flight for Stranded Nationals Set to Depart Oman Amid Middle East Crisis
France and United Kingdom Deploy Warships to Eastern Mediterranean as Middle East Conflict Escalates
U.K. Arrests Three Men Including Lawmaker’s Partner in Suspected China Espionage Investigation
Trump Says UK–US ‘Special Relationship’ Is Diminished Amid Middle East Dispute
UK Economic Forecasts Face Fresh Strain from Middle East Conflict and Rising Energy Costs
UK Reaffirms Close US Ties After Trump’s Public Criticism
Reeves Stresses Stability and Fiscal Discipline in UK Budget Update as Growth Outlook Shifts
UK Deploys Royal Navy Destroyer HMS Dragon to Cyprus After Drone Strike on RAF Base
Green Party Surges Past Labour in New UK Poll as Traditional Party Support Crumbles
Majority of Britons Oppose U.S. Use of UK Military Bases in Iran Conflict
UK Intensifies Evacuation Efforts from Oman, Working with Airlines to Boost Flight Capacity
Trump Condemns UK and Spain in Unusually Sharp Rift Over Iran Military Action
Trump Repeats UK Claims That Diverge from Verified Facts Amid Diplomatic Strain
UK Arrests Prominent Figures Linked to Epstein Network as Questions Mount Over US Action
Trump Says UK ‘Took Far Too Long’ to Approve Use of Airbases for Iran Strikes
Scope of Britain’s Role in the Expanding Middle East Conflict Comes Under Scrutiny
Trump Says He Is ‘Very Disappointed’ in Starmer Over Iran Comments
U.S. Embassy in Riyadh Struck by Drones Amid Escalating Iran Conflict
Starmer Confronts Strategic Test After Drone Strike Near British Base in Cyprus
Rolls-Royce Chief Signals Openness to Germany Joining UK-Led Fighter Jet Programme
UK Stocks Slip as Escalating Iran Conflict Triggers Global Market Selloff
UK Overhauls Asylum System to Make Refugee Status Temporary
Starmer Warns of ‘Reckless’ Iranian Strikes Amid Escalating Regional Tensions
British Base in Cyprus Targeted as Drones Intercepted Amid Expanding Iran Conflict
Starmer Diverges from Trump on Iran Strategy, Rejects ‘Regime Change from the Skies’
U.S. and Israel Intensify Strikes on Iran as Conflict Expands to Lebanon and Gulf States
Violent Pro-Iranian Protesters Storm U.S. Consulate in Karachi
Missile Debris Sparks Fires at Dubai’s Jebel Ali Port Near Palm Jumeirah
Iran Strikes U.S. Fifth Fleet Headquarters in Bahrain Amid Wider Gulf Retaliation
When the State Replaces the Parent: How Gender Policy Is Redefining Custody and Coercion
Bill Clinton Denies Knowing Woman in Hot Tub Photo During Closed-Door Epstein Deposition
Former U.S. President Bill Clinton Testifies on Ties to Jeffrey Epstein Before Congressional Oversight Committee
Dyson Reaches Settlement in Landmark UK Forced Labour Case
Barclays and Jefferies Shares Fall After UK Mortgage Lender Collapse Rekindles Credit Market Concerns
Play Exploring Donald Trump’s Rise to Power by ‘Lehman Trilogy’ Author to Premiere in the UK
Man Arrested After Churchill Statue Defaced in Central London
Keir Starmer Faces Political Setback as Labour Finishes Third in High-Profile By-Election
UK Assisted Dying Bill Set to Fall Short in Parliament as Regional Initiatives Gain Ground
UK Defence Ministry Clarifies Position After Reports of Imminent Helicopter Contract
Independent Left-Wing Plumber Secures Shock Victory as Greens Surge in UK By-Election
Reform UK Refers Alleged ‘Family Voting’ Incidents in By-Election to Police
United Kingdom Temporarily Withdraws Embassy Staff from Iran Amid Heightened Regional Tensions
UK Government Reaches Framework Agreement on Release of Mandelson Vetting Files
×