Cybercrooks Hijack Minister’s Profile to Push Fake Crypto Coin

5 mins well spent

It’s not every day that a sitting government official gets their social media account hijacked, but that’s exactly what happened to Lucy Powell, the current Leader of the House of Commons in the UK.

Her X account (formerly Twitter), which had nearly 70,000 followers, was taken over by online hackers who used it to promote a fake cryptocurrency called $HCC. This phony project was described in the posts as a “community-driven digital currency bringing people’s power to the blockchain.”

Even more concerning? The scam posts included official imagery — like the House of Commons logo — likely to give the entire operation a false sense of legitimacy.

Her team quickly jumped into action, securing the account and deleting the misleading posts. But the incident revealed something much bigger: the growing trend of using trusted public accounts to push fraudulent crypto schemes.

How These Scams Work: A Look Behind the Scenes

So, how do scammers pull something like this off? Turns out, it’s not as complicated as you might think.

Phishing: The Classic Online Trap

Most of these hacks start with phishing — a cybercriminal trick that’s been around for years but still works. All it takes is one convincing email that looks like it came from a trusted source. Maybe it’s an alert from the social media platform, or a message claiming you need to update your login info.

Click the wrong link, and suddenly you’ve handed over your credentials to a hacker.

Using Old Password Leaks

Hackers also rely on passwords leaked in previous data breaches. If someone uses the same login details across platforms (which many people still do), scammers can get into multiple accounts using old data.

Once they have access, they’re free to post whatever they want — including links to shady cryptocurrency projects.

Why Public Figures Are Prime Targets

Let’s be real: if you saw a random stranger online pushing a new crypto coin, you’d probably scroll right past it. But when that same message comes from a respected MP or BBC journalist? That’s a whole different story.

People naturally trust public figures. Hackers know this, and they use that trust to trick followers into clicking, investing, or even sharing the scam themselves.

It’s no surprise then that Nick Robinson, a well-known BBC journalist, also fell victim earlier this year. His account was used to promote another fake cryptocurrency named $Today after he clicked on a malicious email he believed was from X.

The Scam Strategy: “Pump and Dump” in Disguise

You might’ve heard the phrase “pump and dump” before. It’s a common con in the world of cryptocurrency, and here’s how it usually works:

1. Create a brand-new coin, usually in a matter of hours.

2. Take over a high-profile account to promote it.

3. Drive interest by making it look like a trusted figure is endorsing it.

4. Once people start buying in, the scammers sell their share at a profit.

5. The coin crashes, leaving new investors with nothing.

That’s exactly what happened with the $HCC coin pushed through Lucy Powell’s hacked account. According to Luke Nolan, a senior researcher at a digital asset firm, the scam barely managed 34 transactions, resulting in a total profit of around £225.

Not exactly a fortune — but remember, these scams are quick to set up and easy to repeat. Scammers aren’t looking to make millions from one coin. They’re aiming for multiple small wins before the authorities or platforms catch on.

What the UK Parliament and Authorities Are Saying

After the hack, a spokesperson for the House of Commons emphasized that cybersecurity is taken very seriously. They mentioned that guidance is given to all users, especially MPs, to help them stay safe online — though the exact details of those policies weren’t made public.

Meanwhile, Action Fraud, the UK’s national reporting centre for fraud and cybercrime, shared that there has been a notable rise in hacked social and email accounts in 2024, with over 35,000 reports this year alone.

They recommend a few straightforward actions to boost your online safety:

• Enable two-step verification (also called 2FA) on all accounts.

• Use strong, unique passwords made up of three random words.

• Stay cautious about emails or messages that ask for login info, especially if they come from unknown sources.

The Bigger Picture: Why This Affects Everyone

This wasn’t just a tech glitch or an isolated scam. The hijacking of Lucy Powell’s X account is part of a larger trend that shows just how vulnerable even our most trusted figures are in the digital space.

The message is clear: if it can happen to government leaders and journalists, it can happen to anyone.

These scams aren’t just about money. They’re about eroding trust. When people start to doubt the legitimacy of posts from verified accounts, it damages the very foundation of how we communicate online.

That’s why staying informed — and staying cautious — is more important than ever.

Quick Tips to Protect Yourself from Similar Scams

Even if you’re not famous, your accounts are still valuable. Here’s how to keep them safe:

• Turn on 2FA wherever possible.

• Don’t click on suspicious links, even if the sender looks legit.

• Regularly check your email on data breach monitoring sites.

• Update your passwords often — and make sure they’re all different.

You don’t need to be a cybersecurity expert to stay secure online. Just take a few smart precautions and stay alert.

Final Summary: What We Can Learn From This Hack

The hacking of Lucy Powell’s X account to promote a scam cryptocurrency is more than just a tech blunder — it’s a warning. As cybercriminals get smarter, they’re relying on influence and trust more than complex code.

They’re not targeting just systems anymore — they’re targeting people. Public figures. Trusted voices. And by doing so, they’re pulling everyday users into dangerous traps.

It’s up to all of us to be more careful with what we click, where we log in, and how we protect our digital lives. Because in a world where even politicians and journalists are getting hacked, digital security isn’t optional — it’s essential.