Report: Terrorist seems to be paying X to generate propaganda with Grok
Grokking terrorists
Report: Terrorist groups seem to be paying X to raise funds, collect tips
Did Musk rip Treasury Department over terrorist payments while X paid terrorists?
Ashley Belanger
–
May 15, 2025 12:20 pm
|
7
Yemen's Houthi supporters wearing masks depicting the faces of Trump and Netanyahu, chained and standing for trial, participate in a demonstration staged against Israel and the US president Donald Trump on May 9, 2025 in Sana'a, Yemen.
Credit:
Mohammed Hamoud / Contributor | Getty Images News
Yemen's Houthi supporters wearing masks depicting the faces of Trump and Netanyahu, chained and standing for trial, participate in a demonstration staged against Israel and the US president Donald Trump on May 9, 2025 in Sana'a, Yemen.
Credit:
Mohammed Hamoud / Contributor | Getty Images News
Story text
Size
Small
Standard
Large
Width
*
Standard
Wide
Links
Standard
Orange
* Subscribers only
Learn more
Back in February, Elon Musk skewered the Treasury Department for lacking "basic controls" to stop payments to terrorist organizations, boasting at the Oval Office that "any company" has those controls.
Fast-forward three months, and now Musk's social media platform X is suspected of taking payments from sanctioned terrorists and providing premium features that make it easier to raise funds and spread propaganda—including through X's chatbot Grok. Groups seemingly benefiting from X include Houthi rebels, Hezbollah, and Hamas, as well as groups from Syria, Kuwait, and Iran. Some accounts have amassed hundreds of thousands of followers, paying to boost their reach while X seemingly looks the other way.
In a report released Thursday, the Tech Transparency Projectflagged popular accounts seemingly linked to US-sanctioned terrorists. Some of the accounts bear "ID verified" badges, suggesting that X may be knowingly going against its own policies that ban sanctioned terrorists from benefiting from its platform.
Even more troublingly, "several made use of revenue-generating features offered by X, including a button for tips," the TTP reported.
On X, Premium subscribers pay monthly or annually, and Premium+ subscribers pay monthly or annually. Verified organizations pay X between and monthly, or up to annually for access to Premium+. These subscriptions come with perks, allowing suspected terrorist accounts to share longer text and video posts, offer subscribers paid content, create communities, accept gifts, and amplify their propaganda.
Disturbingly, the TTP found that X's chatbot Grok also appears to be helping to whitewash accounts linked to sanctioned terrorists.
In its report, the TTP noted that an account with the handle "hasmokaled"—which apparently belongs to "a key Hezbollah money exchanger," Hassan Moukalled—at one point had a blue checkmark with 60,000 followers. While the Treasury Department has sanctioned Moukalled for propping up efforts "to continue to exploit and exacerbate Lebanon’s economic crisis," clicking the Grok AI profile summary button seems to rely on Moukalled's own posts and his followers' impressions of his posts and therefore generated praise.
Ars was able to replicate the summary, which described Moukalled as "a fierce Lebanese economist and journalist" who "champions resistance against Israeli aggression, exposing economic fallout and rallying for Palestine and Lebanon's sovereignty from Moscow's airwaves." It further praised Moukalled as someone the X community relies on for "economic insights," who "passionately champions resistance, critiques foreign influence in Lebanon, and honors martyrs with fiery posts."
Paul told Ars that the TTP found several accounts for which Grok provided a positive and sometimes poetic spin while describing sanctioned terrorists. An Ars review of Grok summaries of other flagged profiles confirmed the pattern, suggesting that X does not reference data outside of X when summarizing profiles of known terrorists and possibly not even critical data on its own platform.
According to the TTP, "X appears to be violating sanctions that bar US companies from transacting or dealing with sanctioned individuals and entities" by granting these accounts paid blue checkmarks.
No response from X yet
It's unclear what actions X might take to investigate the accounts. The TTP's director Katie Paul told Ars that X has acknowledged the report but so far has not commented on it.
Earlier this year, when the TTP flagged other suspected terrorist accounts, X responded within hours, claiming to have "a robust and secure approach" to block sanctioned terrorists from accessing monetization features. At that time, X claimed that some suspected terrorists who were flagged were not directly named on any sanction lists, while "others may have visible account check marks without receiving any services that would be subject to sanctions."
But the TTP suggested that even providing services "for the benefit of any blocked person" could be considered a US national security risk and a sanctions violation—even perhaps "where aides or colleagues are running a premium account in the name of a sanctioned person."
The TTP noted that X suspended some accounts following its earlier report, but the clean-up effort seemed "short-lived." Some accounts quickly popped back up under new names or simply resubscribed to X Premium when the option became available.
X did not immediately respond to Ars' request to comment. But an X user asked Grok about the TTP's report, generating this response:
Reports suggest X has allowed accounts linked to sanctioned terrorists, like Hezbollah leaders, to purchase blue checkmarks, potentially violating US sanctions. The Tech Transparency Project noted this in 2024 and May 2025, indicating ongoing issues. X claims compliance with laws and has removed some checkmarks, but doubts remain about their vetting process. Evidence leans toward violations, though X disputes some claims, saying not all accounts are directly sanctioned. The issue is unresolved, raising concerns about platform safety.
Paul told Ars that the TTP will continue monitoring suspected terrorist activity violating US sanctions on X. She said that Musk potentially "actively profiting from Houthi accounts and helping them fundraise" is notable from a national security standpoint in particular, since the Houthis recently sent a warning during Donald Trump's Middle East visit threatening to escalate tensions following a ceasefire where Houthis agreed to suspend attacks on American vessels.
Ashley Belanger
Senior Policy Reporter
Ashley Belanger
Senior Policy Reporter
Ashley is a senior policy reporter for Ars Technica, dedicated to tracking social impacts of emerging policies and new technologies. She is a Chicago-based journalist with 20 years of experience.
7 Comments
#report #terrorist #seems #paying #generate
Report: Terrorist seems to be paying X to generate propaganda with Grok
Grokking terrorists
Report: Terrorist groups seem to be paying X to raise funds, collect tips
Did Musk rip Treasury Department over terrorist payments while X paid terrorists?
Ashley Belanger
–
May 15, 2025 12:20 pm
|
7
Yemen's Houthi supporters wearing masks depicting the faces of Trump and Netanyahu, chained and standing for trial, participate in a demonstration staged against Israel and the US president Donald Trump on May 9, 2025 in Sana'a, Yemen.
Credit:
Mohammed Hamoud / Contributor | Getty Images News
Yemen's Houthi supporters wearing masks depicting the faces of Trump and Netanyahu, chained and standing for trial, participate in a demonstration staged against Israel and the US president Donald Trump on May 9, 2025 in Sana'a, Yemen.
Credit:
Mohammed Hamoud / Contributor | Getty Images News
Story text
Size
Small
Standard
Large
Width
*
Standard
Wide
Links
Standard
Orange
* Subscribers only
Learn more
Back in February, Elon Musk skewered the Treasury Department for lacking "basic controls" to stop payments to terrorist organizations, boasting at the Oval Office that "any company" has those controls.
Fast-forward three months, and now Musk's social media platform X is suspected of taking payments from sanctioned terrorists and providing premium features that make it easier to raise funds and spread propaganda—including through X's chatbot Grok. Groups seemingly benefiting from X include Houthi rebels, Hezbollah, and Hamas, as well as groups from Syria, Kuwait, and Iran. Some accounts have amassed hundreds of thousands of followers, paying to boost their reach while X seemingly looks the other way.
In a report released Thursday, the Tech Transparency Projectflagged popular accounts seemingly linked to US-sanctioned terrorists. Some of the accounts bear "ID verified" badges, suggesting that X may be knowingly going against its own policies that ban sanctioned terrorists from benefiting from its platform.
Even more troublingly, "several made use of revenue-generating features offered by X, including a button for tips," the TTP reported.
On X, Premium subscribers pay monthly or annually, and Premium+ subscribers pay monthly or annually. Verified organizations pay X between and monthly, or up to annually for access to Premium+. These subscriptions come with perks, allowing suspected terrorist accounts to share longer text and video posts, offer subscribers paid content, create communities, accept gifts, and amplify their propaganda.
Disturbingly, the TTP found that X's chatbot Grok also appears to be helping to whitewash accounts linked to sanctioned terrorists.
In its report, the TTP noted that an account with the handle "hasmokaled"—which apparently belongs to "a key Hezbollah money exchanger," Hassan Moukalled—at one point had a blue checkmark with 60,000 followers. While the Treasury Department has sanctioned Moukalled for propping up efforts "to continue to exploit and exacerbate Lebanon’s economic crisis," clicking the Grok AI profile summary button seems to rely on Moukalled's own posts and his followers' impressions of his posts and therefore generated praise.
Ars was able to replicate the summary, which described Moukalled as "a fierce Lebanese economist and journalist" who "champions resistance against Israeli aggression, exposing economic fallout and rallying for Palestine and Lebanon's sovereignty from Moscow's airwaves." It further praised Moukalled as someone the X community relies on for "economic insights," who "passionately champions resistance, critiques foreign influence in Lebanon, and honors martyrs with fiery posts."
Paul told Ars that the TTP found several accounts for which Grok provided a positive and sometimes poetic spin while describing sanctioned terrorists. An Ars review of Grok summaries of other flagged profiles confirmed the pattern, suggesting that X does not reference data outside of X when summarizing profiles of known terrorists and possibly not even critical data on its own platform.
According to the TTP, "X appears to be violating sanctions that bar US companies from transacting or dealing with sanctioned individuals and entities" by granting these accounts paid blue checkmarks.
No response from X yet
It's unclear what actions X might take to investigate the accounts. The TTP's director Katie Paul told Ars that X has acknowledged the report but so far has not commented on it.
Earlier this year, when the TTP flagged other suspected terrorist accounts, X responded within hours, claiming to have "a robust and secure approach" to block sanctioned terrorists from accessing monetization features. At that time, X claimed that some suspected terrorists who were flagged were not directly named on any sanction lists, while "others may have visible account check marks without receiving any services that would be subject to sanctions."
But the TTP suggested that even providing services "for the benefit of any blocked person" could be considered a US national security risk and a sanctions violation—even perhaps "where aides or colleagues are running a premium account in the name of a sanctioned person."
The TTP noted that X suspended some accounts following its earlier report, but the clean-up effort seemed "short-lived." Some accounts quickly popped back up under new names or simply resubscribed to X Premium when the option became available.
X did not immediately respond to Ars' request to comment. But an X user asked Grok about the TTP's report, generating this response:
Reports suggest X has allowed accounts linked to sanctioned terrorists, like Hezbollah leaders, to purchase blue checkmarks, potentially violating US sanctions. The Tech Transparency Project noted this in 2024 and May 2025, indicating ongoing issues. X claims compliance with laws and has removed some checkmarks, but doubts remain about their vetting process. Evidence leans toward violations, though X disputes some claims, saying not all accounts are directly sanctioned. The issue is unresolved, raising concerns about platform safety.
Paul told Ars that the TTP will continue monitoring suspected terrorist activity violating US sanctions on X. She said that Musk potentially "actively profiting from Houthi accounts and helping them fundraise" is notable from a national security standpoint in particular, since the Houthis recently sent a warning during Donald Trump's Middle East visit threatening to escalate tensions following a ceasefire where Houthis agreed to suspend attacks on American vessels.
Ashley Belanger
Senior Policy Reporter
Ashley Belanger
Senior Policy Reporter
Ashley is a senior policy reporter for Ars Technica, dedicated to tracking social impacts of emerging policies and new technologies. She is a Chicago-based journalist with 20 years of experience.
7 Comments
#report #terrorist #seems #paying #generate
·168 Ansichten