Crypto Extortionists Target Gay OnlyFans Creators in X Hijack Wave

Amin Haqshanas
Amin Haqshanas is a crypto and finance journalist with more than six years of experience covering the digital asset industry. He reports on cryptocurrency markets, DeFi, tokenization, and regulation, with bylines at leading outlets including Cointelegraph, CryptoNews, The Tokenist, and Techopedia.
Read full bio
Why Trust CoinGape
CoinGape has covered the cryptocurrency industry since 2017, aiming to provide informative insights to our readers. Our journal analysts bring years of experience in market analysis and blockchain technology to ensure factual accuracy and balanced reporting. By following our Editorial Policy, our writers verify every source, fact-check each story, rely on reputable sources, and attribute quotes and media correctly. We also follow a rigorous Review Methodology when evaluating exchanges and tools. From emerging blockchain projects and coin launches to industry events and technical developments, we cover all facets of the digital asset space with unwavering commitment to timely, relevant information.
Crypto Extortionists Target Gay OnlyFans Creators in X Hijack Wave

Highlights

  • Hackers are hijacking OnlyFans creators' X accounts and demanding crypto ransoms.
  • Adult star Patrick Bewley lost his 132K-follower X account in a phishing attack.
  • Despite paid verification, Bewley says X support failed to restore his account.

A string of gay OnlyFans creators have had their X accounts hijacked by attackers demanding crypto ransoms, with several victims watching their feeds flood with MAGA propaganda and crypto spam after they refused to pay.

OnlyFans Star Bewley Loses X Account in Crypto Hijack

One of the most prominent targets was Patrick Bewley, the 60-year-old adult performer known as Daddy Patrick, who had built 132,000 followers on X in under two years, according to reporting from WIRED. In April, his feed abruptly turned political, pushing pro-Trump posts he never wrote. The account had been compromised.

The report claimed that the attack began on April 9, when Bewley received a direct message from a colleague, porn director Jasun Mark, whose own account was already hacked. The message asked Bewley to back an award nomination and pointed him to a fake X login page. Once he entered his details, the attacker changed the account’s name, phone number and email, then swapped the handle twice.

The hijacker rebranded the page with a Steve Bannon banner linking to his War Room platforms. By April 16, the account was posting Trump imagery, and later demanding $2,000 in GAT tokens to hand it back. When Bewley refused, the attacker contacted his employer, Ducati Studios Network, raising the price to $3,000 in crypto, per the report. The feed then began reposting 20 to 30 MAGA items a day from accounts such as @MAGAVoice.

Bewley was not alone. Performer Fabian Quezada, who works as Buck Bronco, was locked out on April 12 and threatened over WhatsApp, according to WIRED. He refused to negotiate, fearing he would be drained of his money, and replaced all his bank and credit cards as a precaution.

Creators Liam Angell and Mark eventually clawed their accounts back. Mark lost access for a month, during which the attacker fired crypto posts at his 68,000 followers. In May, Chicago creator Gray Dickson publicly pleaded for help after repeated phishing attempts.

X Gave No Help After Crypto Hijack

Despite holding a paid verified account, Bewley said X support gave him no help, telling him weeks later it could not confirm he owned the page. He filed reports with Palm Springs police and the Federal Bureau of Investigation (FBI).

Rachel Tobac, CEO of SocialProof Security, told WIRED that the problem could intensify ahead of the US midterms, and suspects criminals are using AI to scale their targeting of high-value accounts.

Last year, Paraguay’s president fell victim to an X hack, after his personal account posted a false claim that the country had adopted Bitcoin as legal tender. The official presidential account quickly flagged the post as fake, sharing an official statement in Spanish and warning followers to beware.

Investment disclaimer: The content reflects the author’s personal views and current market conditions. Please conduct your own research before investing in cryptocurrencies, as neither the author nor the publication is responsible for any financial losses.
Ad Disclosure: This site may feature sponsored content and affiliate links. All advertisements are clearly labeled, and ad partners have no influence over our editorial content.
AD
BestChange

Instant Currency Exchange at BestChange with Ease

  • Compare Rates Across 1000+ Exchanges
  • Access 250+ Cryptocurrencies & Pairs
  • Save Time with Real-Time Price Tracking
BestChange

Why Trust CoinGape

CoinGape has covered the cryptocurrency industry since 2017, aiming to provide informative insights Read more… to our readers. Our journal analysts bring years of experience in market analysis and blockchain technology to ensure factual accuracy and balanced reporting. By following our Editorial Policy, our writers verify every source, fact-check each story, rely on reputable sources, and attribute quotes and media correctly. We also follow a rigorous Review Methodology when evaluating exchanges and tools. From emerging blockchain projects and coin launches to industry events and technical developments, we cover all facets of the digital asset space with unwavering commitment to timely, relevant information.

Newsletter
Your crypto brief.
Delivered every day.
  • Insights that move markets
  • 100,000 active subscribers
By signing-up you agree to our Terms and Conditions and Privacy Policy.
About Author
About Author
Amin Haqshanas is a crypto and finance journalist with more than six years of experience covering the digital asset industry. He reports on cryptocurrency markets, DeFi, tokenization, and regulation, with bylines at leading outlets including Cointelegraph, CryptoNews, The Tokenist, and Techopedia.