The fraud networks preying on Bluesky users are not an aberration confined to one social-media platform. From Nigeria’s Yahoo Boys to the trafficking compounds of Southeast Asia, online fraud has developed alongside an economic order that produces mass insecurity and poverty while transforming the internet into another arena for private enrichment.
On 17 October, Bluesky acknowledged that a phishing campaign
had compromised more than 4,500 accounts. The attack spread posts promoting a
fake government payment. The company temporarily suspended compromised accounts
while attempting to secure them and restore access to their owners. [thehackernews.com],
The scale of the aftermath is evident in an independent
analysis of Bluesky's public moderation stream. Agent Sky recorded 3,896
reversed account takedowns between 17 and 19 October. The researcher cautions
that the moderation data do not themselves establish why each account was
restored, although the exceptional increase coincided with the phishing
incident. The episode was only the most visible manifestation of a problem that
has grown alongside the platform.
Fake support accounts, impersonators, romance scams and
investment fraud have followed users onto Bluesky. In December 2024, NBC News
reported a “rapid increase in scam activity”, including romance and so-called
pig-butchering scams. In March 2025, Bluesky Safety warned of scammers
impersonating Bluesky and its staff while approaching artists through direct
messages and attempting to move them off the platform. The potential target
population has grown dramatically. According to the company's 2025 Transparency
Report, Bluesky grew from 25.94 million to 41.41 million users that year, an
increase of nearly 60 per cent.
The comparison with the Nigerian “Yahoo Boys” is apt,
although not in the manner suggested by racialised representations of Nigerian
cybercrime. The fundamental connection is neither nationality nor ethnicity. It
is the growth of an international economy of fraud alongside poverty,
precarious employment and extraordinary concentrations of wealth.
What produced the
Yahoo Boys
The Yahoo Boy phenomenon developed in Nigeria during the
formative period of popular internet use in the late 1990s and early 2000s. The
name reflected the importance of Yahoo and Yahoo Mail to early internet
communications. Fraudsters exploited email for advance-fee scams, fabricated
inheritances and other schemes. Over the ensuing decades, the methods expanded
into romance scams, business fraud and financial sextortion.
The consequences for victims can be devastating. Statistics
maintained by the Canadian Centre for Child Protection show a pronounced
predominance of boys and young men among identified victims in the sextortion
reports and requests for assistance it receives. An investigation by CBC
Marketplace reported in October 2025 that it had verified more than 40 suicides
across North America, Australia and the UK during the previous four years that
were linked to sextortion, including five in Canada.
The social-media companies themselves have revealed
something of the scale. In July 2024, Meta announced that it had removed around
63,000 Instagram accounts in Nigeria that had attempted to engage in financial
sextortion. Among them was a coordinated network of approximately 2,500
accounts that the company linked to a group of around 20 individuals. Meta said
that the coordinated network principally targeted adult men in the United
States, though some accounts also attempted to target minors.
Explaining the social origins of such criminality is not an
excuse. Where children and young people are subjected to financial sextortion,
there can be no ambiguity about the destructive character of the crime. But
moral denunciation by itself explains nothing about why the phenomenon has
developed on such a scale.
Nigeria is Africa's most populous country and has enormous
natural resources. Yet its official 2022 Multidimensional Poverty Index found
that 133 million people—63 per cent of the population—were multidimensionally
poor. Older claims that youth unemployment exceeded 50 per cent should no
longer be repeated without substantial qualification, as Nigeria later changed
its labour-force methodology. The National Bureau of Statistics reported
unemployment of 7.2 per cent among 15-to-24-year-olds in the second quarter of
2023. But this headline figure hardly captures whether people have secure,
well-paid work.
The same survey reported informal employment at 92.7 per
cent, time-related underemployment at 11.8 per cent, and a youth NEET rate of
13.8 per cent. These statistics point to a social reality far more complex than
an unemployment rate alone can reveal: enormous numbers of people classified as
employed remain in informal and precarious economic circumstances.
Academic research has likewise placed Nigerian cybercrime
within a broader social crisis. A doctoral investigation by Tolulope Lembola
Ojolo at the University of KwaZulu-Natal conducted in-depth interviews with 29
Yahoo Boys across Lagos, Ibadan and Ado-Ekiti. The research identified poverty,
unemployment, corrupt political leadership and law enforcement, the failure of
vital social institutions, and the proliferation of internet services as
conditions that combined to facilitate cybercrime. Some interviewees
rationalised their activities as redistribution or retaliation for Africa's
historical exploitation through slavery and colonialism.
Such rationalisations do not transform fraud into
anti-imperialism. The pensioner whose savings are stolen or the teenager
subjected to financial blackmail bears no responsibility for colonial
oppression. But the testimony reveals how social desperation can be refracted
through a reactionary ideology in which exploiting another ordinary person is
represented as revenge against the system. The result is not resistance to
exploitation but its reproduction at another level.
The con moves to
Bluesky.
As Bluesky attracted users leaving established social
networks, fraud followed the migration. NBC News reported in December 2024 that
scammers were using established romance and pig-butchering methods familiar
from other platforms. Artists and writers have become targets. In July 2026,
editor Rob Bignell documented what he described as the proliferation of
supposed beta-reader and editor profiles targeting authors on Bluesky. He
described profiles using similar approaches and said he had traced a number of
the suspected scams to Nigeria, including through accounts on freelancing sites
and suspicious LinkedIn identities. His investigation is an individual case
study rather than a systematic measurement of fraud across the platform. Still,
it illustrates how established forms of online fraud can be adapted to
particular online communities.
The targets themselves are revealing. Writers, illustrators,
editors and freelancers increasingly work under conditions of insecurity,
competing for readers, commissions and contracts in a cultural economy being
reorganised by digital platforms and artificial intelligence. Fraud preys upon
the hope of a break. Somebody's search for readers, professional recognition or
employment becomes the scammer's opening. One insecure layer of the
international workforce is turned against another. Bluesky's own statistics
demonstrate the pressures created by rapid expansion. User-submitted moderation
reports rose from 6.48 million in 2024 to 9.97 million in 2025, a 54 per cent
increase. “Misleading” content accounted for 43.73 per cent of reports
in 2025.
The October 2026 phishing attack provides another
perspective. Agent Sky's examination of the public moderation stream counted
76,772 account takedowns between 21 September and 20 October but no application
of Bluesky's “scam” label to accounts over the same period. The analysis
recorded just nine “impersonation” labels. These figures come from an
independent analysis, not statistics published by Bluesky itself, a distinction
that should be maintained. But the
underlying contradiction goes beyond warning labels. Social networks depend
upon enormous populations communicating with minimum friction while
simultaneously confronting organised actors seeking to exploit precisely that
openness.
Fraud becomes an industry.
The Yahoo Boys represent one historical and predominantly
decentralised manifestation of online fraud. In Southeast Asia, however, the
fraudulent economy has assumed something approaching an industrial form.
Enormous scam compounds have emerged in which criminal
organisations combine internet fraud with human trafficking and forced labour.
In 2023, the United Nations Human Rights Office reported that credible sources
indicated at least 120,000 people across Myanmar might be held in situations
where they were forced to conduct online scams, while estimates for Cambodia
were around 100,000. Laos, the Philippines and Thailand were also identified as
destination or transit countries.
This phenomenon demonstrates the contradictory character of
the international scam economy. Among the people committing fraud are willing
participants, but others have themselves been trafficked and coerced into
criminal activity. Research published by Asia Times in April 2026 described the
experience of a trafficked worker who reported working 15-hour days, seven days
a week, simultaneously conducting multiple conversations with prospective
victims. The account described an organised division of labour in which
different workers established contact, cultivated targets and extracted
payments.
A 2026 UN report also documented torture, sexual abuse and
forced labour within scam centres. It reported that survivors described severe
economic pressures before their recruitment and that some police and border
guards were alleged to have been complicit. Here the language of individual
criminality becomes insufficient. A person sitting behind a keyboard may be
perpetrating fraud against someone thousands of miles away while simultaneously
being coerced by the organisation controlling the compound. Recognising that
reality does not minimise the harm inflicted upon the person being defrauded.
It reveals the extraordinary social relationships through which contemporary
cybercrime operates.
The revenues are enormous. Guardio, citing Chainalysis, estimated
$17 billion stolen across cryptocurrency scams in 2025, while saying
pig-butchering scams grew by nearly 40 per cent year on year. Separately, the
Associated Press reported a UN estimate that losses from scams in Asia during
2023 were between $18 billion and $37 billion. Governments have responded with
raids, criminal prosecutions and geopolitical pressure. On 13 October 2026, a
Chinese court sentenced three members of the Wei family criminal organisation
to death for their roles in a criminal network operating in Myanmar's Kokang
region. Another three were given life sentences, and 55 received prison terms
of varying lengths.
But suppressing individual organisations does not abolish
the economic conditions sustaining the industry. Research published in Asia
Times described how infrastructure remained after supposed closures and argued
that operations driven out of one location could reopen elsewhere. The same
article cited estimates placing annual scam revenue in Cambodia at $12.9
billion in 2023, roughly 40 per cent of the country's GDP.
The platforms and the limits of moderation
The same contradiction appears at platform level. There is
extensive evidence that technology companies are aware of the growth of
financial sextortion and organised internet fraud. The Network Contagion
Research Institute documented the circulation of instructional materials,
scripts and videos facilitating financial sextortion and described Yahoo Boys
as playing a major role in the extraordinary expansion of financial sextortion
targeting minors.
The scale makes moderation immensely difficult. In June
2026, Snap said it was enforcing against about 220 suspected sextortion
instances per day, or roughly 6,600 per month globally, counting both
proactively identified cases and alleged violations reported by users. The
company published these figures specifically while disputing the
decontextualised circulation of an earlier figure claiming 10,000 user reports
of sextortion each month.
Bluesky faces the same problem on a smaller scale. Its
moderation operation was expanded to roughly 100 moderators during 2024, a year
in which its moderation service received 6.48 million reports. The company also
increased automation, which reduced processing times but could produce false
positives requiring subsequent human involvement and appeals. Bluesky's
decentralised architecture distinguishes it from some older social-media
companies, but a different technical architecture cannot abolish the social
relationships the technology operates within. A decentralised network
connecting millions of people still exists within a world characterised by
poverty, private wealth, commercial competition and economic insecurity.
Nor can the struggle against fraud justify unlimited
surveillance. The existence of criminal exploitation cannot provide a blank
cheque for states and corporations to impose universal identification or
monitor legitimate political communications. Protection from fraud and defence
of democratic rights must not be presented as mutually exclusive. Technology
does not exist outside society. Neither do the criminals who exploit it.
The new Yahoo Boys
To describe the Bluesky scammers as “the new Yahoo Boys”
therefore requires precision. It cannot mean that fraudulent accounts appearing
on Bluesky are necessarily Nigerian, still less that fraud reflects some
characteristic peculiar to Nigerians or Africans. The historical significance
of the Yahoo Boys lies elsewhere. They represented an early manifestation of a
criminal economy that has subsequently become international, technologically
sophisticated and, in the Southeast Asian scam compounds, increasingly
industrialised.
The form continually changes. The advance-fee email becomes
the romance profile. The romance profile becomes the fraudulent cryptocurrency
opportunity. Individual scammers operate alongside large criminal organisations
commanding labour forces measured in the thousands.
The platform changes too. Yahoo Mail, Facebook, Instagram,
Snapchat and now Bluesky become different territories across which fraudulent
activity migrates. What persists beneath technological change is an
international social crisis that provides both vulnerable targets and a
continual supply of people who can be recruited, voluntarily or coercively,
into the scam economy.
The individual fraudster remains responsible for deliberate
harm. Social explanation cannot become moral absolution. But individual
morality alone cannot explain mass social phenomena. When similar criminal
industries continually regenerate across different continents, platforms and
technologies, the question necessarily becomes social. Police operations can
arrest perpetrators. Platforms can remove fraudulent accounts. Stronger
security can prevent particular phishing attacks. Human moderation can disrupt
individual networks. These measures matter because they can prevent concrete
harm.
What they cannot do is abolish the conditions continually
reproducing the problem. The experience of the Southeast Asian compounds
exposes this most starkly. The worker carrying out the online fraud may have
been recruited through fraud. The person sending deceptive messages about
fictitious employment, investments or relationships may himself have answered a
deceptive advertisement promising legitimate work. Capitalist social relations
can therefore transform the deceived into the deceiver and the exploited into
an instrument for exploiting somebody else.
Romanticising the scammer is not progressive. The victims,
particularly young people subjected to sextortion, have an unquestionable right
to protection and justice. But neither is anything gained by transforming the
Yahoo Boy into a racialised foreign menace whose existence supposedly expresses
an exclusively Nigerian pathology. The phenomenon tells us considerably more
about the world economy.
A global problem requires a global answer.
Online fraud reveals one of contemporary society's sharpest
contradictions. Humanity possesses communications technology capable of
overcoming geographical isolation on a historically unprecedented scale. Yet
this infrastructure has developed within societies characterised by staggering
disparities of wealth and opportunity. The internet can connect the unemployed
Nigerian graduate, the precarious British illustrator, the American teenager
and the trafficked worker in a Cambodian compound instantaneously.
Capitalism determines the social circumstances under which
they encounter one another. Too often that encounter becomes another
relationship of exploitation. The answer cannot be nostalgia for an imaginary
internet before fraud, nor continual migration from one commercial platform to
another. Users moved to Bluesky. Fraud followed them.
Working people need both secure digital communications and
democratic control over the infrastructure upon which social and economic life
increasingly depends. These requirements cannot remain indefinitely subordinate
to systems organised around private ownership, commercial competition, and wealth
accumulation.
The worker whose savings are stolen and the unemployed young
person recruited into cybercrime do not occupy morally equivalent positions.
The latter has robbed the former. But both can confront different
manifestations of the same international social order. Understanding those
relationships does not diminish the crime. It helps explain why policing its
symptoms has repeatedly failed to eradicate the underlying phenomenon.
A genuine solution ultimately requires reorganisation of
economic life according to social need rather than private profit: secure
employment, housing, and education for the world's youth, together with
democratic control over the communications infrastructure on which humanity
increasingly depends. Only on such a foundation can the extraordinary
productive and communicative power represented by the internet stop functioning
as another arena in which desperation is turned against desperation.
Bibliography
Bluesky. Bluesky 2025 Transparency Report. 29 January
2026. [bsky.social]
Canadian Centre for Child Protection. Resources &
Research: Statistics: Sextortion. Statistical data covering reports
received by Cybertip.ca and related programmes. [protectchildren.ca]
CBC News. “Sextorters are targeting young boys online — and
flaunting how rich the scam is making them.” 3 October 2025. [cbc.ca]
Hansen, Randall. “Don’t believe claims Southeast Asia scam
schemes were shut down.” Asia Times, 16 April 2026. [asiatimes.com]
Livesey, Keith.“The Bluesky Scammers Are the New Yahoo
Boys.” A Trumpet of Sedition, 3 November 2026. [Present article.]
Meta. “Combating Financial Sextortion Scams From Nigeria.”
24 July 2024. [about.fb.com]
Network Contagion Research Institute. A Digital Pandemic:
Uncovering the Role of ‘Yahoo Boys’ in the Surge of Social Media-Enabled
Financial Sextortion Targeting Minors. January 2024. [networkcontagion.us],
[networkcontagion.us]
Nigeria National Bureau of Statistics. Nigeria
Multidimensional Poverty Index (2022). [nigerianstat.gov.ng],
[nigerianstat.gov.ng]
Nigeria National Bureau of Statistics. Nigeria Labour
Force Survey Q2 2023. [nigerianstat.gov.ng]
Ojolo, Tolulope Lembola. A Criminological Investigation
into the Lived Experiences of Cybercrime Perpetrators in Southwest Nigeria.
Doctoral thesis, University of KwaZulu-Natal, 2020. [ukzn-dspac...ukzn.ac.za]
Office of the United Nations High Commissioner for Human
Rights. “Hundreds of thousands trafficked to work as online scammers in SE
Asia, says UN report.” 29 August 2023. [ohchr.org]
Snap. “Fighting back against online sexual extortion.” 12
June 2026. [values.snap.com]
