The scam spreading on X right now is a podcast “vote for me” DM, not a real show booking.
What you get
A direct message from someone you already follow or know. Their account has usually been taken over. The wording is polite and low-pressure, along the lines of: they’re in the running to co-host a podcast event with Spotify and Google, and could you vote for them. There is a link.
People reported fresh waves of these DMs in late August and the first days of September 2026. Some said they got several from a different mutual in a short stretch.
What the link is for
There is no official Spotify–Google co-host vote of this kind. Spotify has said messages like this are not from them. The link goes to a fake page that looks like a login or voting form. If you enter your X password or a two-factor code, the attackers take the account, change the email, and lock you out. They then use your account to send the same DM to your followers. That is why it keeps arriving from trusted names.
Why it works
It piggybacks on a real relationship. The sender looks like a friend, not a random bot. The ask is small: “just vote.” The page is built to steal credentials, not to collect a genuine poll.
Related podcast scams (different pitch, same idea)
A second pattern is the guest invitation: a flattering DM or email claiming a big show wants you on (sometimes with a fee of a few thousand dollars). That version may move you to Telegram or a “tech check” call, then try to steal logins, drain a crypto wallet, or take over social accounts. Hollywood and crypto users have been hit with those separately. Same theme: podcast prestige as bait.
How to stay clear
Do not click vote links in DMs. Do not log into X from a link anyone sent you. If a friend really needed a vote, they can say so in a public post with no login page. If you already clicked, change your password on the real X site (type the address yourself), revoke sessions, and check that your email and 2FA still belong to you. Warn the person whose account messaged you — they may not know they’ve been hacked.
About the Author
