\n<\/p>\n
This week while scrolling on X, formerly Twitter<\/a>, I noticed that I had reposted a series of TechCrunch articles. Except, wait, no, I hadn\u2019t.\u00a0<\/p>\n But someone else using my name had. I clicked on the profile, and there was another Rebecca Bellan, using the same default and header photos as my actual profile: me onstage at TechCrunch Disrupt 2022 and side-eye Chloe, respectively. The bio read, \u201c@Techcrunch senior reporter | journalist,\u201d and it had the location set to NY, where I am currently based. The account was created in May 2024.\u00a0<\/p>\n Perhaps most surprising after realizing that someone \u2014 who? A bot?! \u2014 had created an impersonator account of me was the fact that they had ostensibly paid to do so, as evidenced by the little blue checkmark next to my name.<\/p>\n When X was still Twitter, the blue checkmark would let other users know that a profile had been verified as a person of note. But since Elon Musk\u2019s hostile takeover, that checkmark now means<\/a> that a user has paid at least $8 per month for a premium subscription that gets them access to longer posts, fewer ads, better algorithmic consideration and Grok. And while X changed tack in April<\/a> and gave the verification badge back to some users based on number of followers, the blue checkmark could also mean someone is a fan of Musk. Don\u2019t believe me? Just check all the zealous reply guys on any of Musk\u2019s posts<\/a>.\u00a0<\/p>\n Anyway, I am neither a paid subscriber nor a fan.<\/p>\n I\u2019m also not the only one who was targeted with impersonation accounts. A handful of TechCrunch journalists have also been impersonated on the platform. Some of the accounts, including my own fake one, have been suspended after being reported to X. But this only tells us that X is actively aware of this problem.<\/p>\n And the problem is that impersonation attacks like these are so much easier to carry out because of the degradation of X\u2019s verification system, which actually doesn\u2019t seem to require any identity verification at all. Having a pay-to-play blue check system just begs bad actors and nation-states to abuse it.\u00a0<\/p>\n Really, X should have learned its lesson by now. When Musk initially rolled out what was then called Twitter Blue in November 2023, the feature was quickly weaponized to help bad actors pretend to be celebrities<\/a>, corporations and government officials. One account impersonated pharma company Eli Lilly and posted a fake announcement that insulin is now free. That tweet was viewed millions of times before it was removed, and the company\u2019s stock took a hit as a result.\u00a0<\/p>\n Another account pretended to be basketball star LeBron James and posted that he was officially asking for a trade from the Lakers team. Another posed as Connor McDavid and announced that the hockey player\u2019s contract had been bought by the New York Islanders.\u00a0<\/p>\n The accounts pretending to be TechCrunch journalists have been, so far, benign. All they\u2019ve done is repost content that honestly any one of us might have reposted anyway. This suggests that, rather than particularly malicious actors, the accounts were likely created by bots.\u00a0<\/p>\n