← DOOMRADAR
Cyber & digital services34 / 100 · Doom score

China-linked Spamouflage accounts pose as U.S. voters ahead of 2026 midterms

Graphika says a long-running influence campaign has returned to X with accounts posing as U.S. voters and posting divisive election content. The operation targets confidence in voting and U.S. democracy rather than backing one presidential candidate, according to observers.

By DoomRadar · Published on DoomRadar . Updated .

Geographic context

Places in the report

United States of America, People's Republic of ChinaWestern SaharaCanadaUnited States of AmericaKazakhstanUzbekistanSudanChadHaitiDominican RepublicRussiaThe BahamasMexicoGuatemalaBelizeFrancePuerto RicoJamaicaCubaSenegalMaliMauritaniaNigerIsraelLebanonPalestineTunisiaAlgeriaJordanUnited Arab EmiratesQatarKuwaitIraqOmanThailandLaosMyanmarVietnamNorth KoreaSouth KoreaMongoliaIndiaBangladeshBhutanNepalPakistanAfghanistanTajikistanKyrgyzstanTurkmenistanIranSyriaArmeniaSwedenBelarusUkrainePolandAustriaHungaryMoldovaRomaniaLithuaniaLatviaGermanyBulgariaGreeceTurkeyAlbaniaCroatiaSwitzerlandLuxembourgBelgiumNetherlandsPortugalSpainIrelandPeople's Republic of ChinaTaiwanItalyDenmarkUnited KingdomAzerbaijanGeorgiaPhilippinesSloveniaSlovakiaCzech RepublicEritreaJapanYemenSaudi ArabiaTurkish Republic of Northern CyprusCyprusMoroccoEgyptLibyaBosnia and HerzegovinaNorth MacedoniaSerbiaMontenegroKosovoUnited StatesPeople's Republic of China

Countries named in the cited reporting. Highlighting does not show the area affected. Map: Natural Earth.

How the effects could reach youConditional effectsConditional impact diagram. Reported development: China-linked Spamouflage accounts pose as U.S. voters ahead of 2026 midterms. digital: U.S. users may encounter divisive political posts presented as authentic local voter opinion. Only if: The accounts must remain active and their posts must reach substantial audiences. security: Public confidence in election information could weaken without any change to voting systems themselves. Only if: The campaign’s content must gain sustained attention during the midterm election period. These are possible effects, not probabilities or a forecast.
A possible pathway, conditional on the factors shown.Reported basis: [1][2][3]

Event date: Graphika identified the activity in a blog posted on October 30, 2026, ahead of the U.S. midterm elections. [1][2][3]

What happened

Graphika, a New York-based firm that tracks online networks, said it found Spamouflage-linked activity on X ahead of the U.S. midterm elections. The analysts said the accounts likely linked to China pose as U.S. voters while posting about politics, social issues and the elections. [1][2][3]

References for this detail (3)

Graphika said the accounts’ content questions election integrity and the legitimacy of U.S. democracy. The campaign’s stated effect in the reporting is distrust: observers said China has focused less on choosing between candidates than on weakening confidence in voting and the United States. [1][2][3]

References for this detail (3)

One account identified by Graphika appears to have replaced a removed account previously linked to Spamouflage. It posted attacks on Democratic Party leadership during the U.S. government shutdown in October 2025 and criticized immigration policy. [1][2][3]

References for this detail (3)

Graphika flagged four accounts with a history of Spamouflage activity that now amplify MAGA-styled personas. It also identified an account with more than 200,000 followers that presents itself as a Philippine culture blog while posting pro-China and divisive U.S.-focused material. [1][2][3]

References for this detail (3)

Context from the sources

U.S. intelligence and national security officials have long warned that Russia, China and Iran have operated online influence campaigns aimed at voters before elections. The reporting identifies this finding as part of that broader documented threat environment. [1][2][3]

What happened before, and what is different now

A documented earlier episode helps explain a possible mechanism. Its outcome does not predict this event.

The earlier episode

Graphika documented closely similar Spamouflage tactics ahead of the 2024 U.S. presidential election. [1][2][3]

What connects them

Both episodes involve accounts linked to the same influence campaign presenting divisive U.S. political content to American audiences on X. [1][2][3]

What is different

The current activity is described as targeting the 2026 midterm elections, while the earlier episode preceded the 2024 presidential election.

What to watch here

The earlier documented pattern shows that posing as ordinary U.S. political voices is an established tactic, but it does not establish how widely the current accounts will spread or affect voters.

Explore the sources and reporting timeline

3 source links · 3 domains

These counts describe the references, not independent confirmations. Different outlets can repeat the same original report.

2 of these links repeat a headline already present, allowing for punctuation and publisher branding. Repeated wording is not additional confirmation.

Source timeline

Oldest to newest among the available source dates, not a chronology of the incident. Article publication dates come from the source; other recorded dates may reflect when a link was found.

  1. Article published: Oct 30, 2026, 11:51 PM UTC[1] Graphika finds China-linked Spamouflage accounts posing as US voters on Xwsls.comReferenced for: detail 1, detail 2, detail 3, detail 4
  2. Article published: Oct 30, 2026, 11:51 PM UTC[3] Graphika finds China-linked Spamouflage accounts posing as US voters on Xabcnews.comReferenced for: detail 1, detail 2, detail 3, detail 4
  3. Article published: Oct 30, 2026, 11:51 PM UTC[2] Graphika finds China-linked Spamouflage accounts posing as US voters on X - Las Vegas Sun Newslasvegassun.comReferenced for: detail 1, detail 2, detail 3, detail 4

Questions answered by the reporting

What are the accounts trying to influence?

Graphika said the posts question election integrity and the legitimacy of U.S. democracy, while observers said China’s focus has been undermining confidence in elections, voting and the United States rather than supporting one presidential candidate. [1][2][3]

What this could mean for you

Digital services

U.S. users may encounter divisive political posts presented as authentic local voter opinion.

Accounts likely linked to China use U.S.-voter personas and amplify content questioning election integrity and democratic legitimacy.

Reported basis: [1][2][3] · The possible effect is interpretation.

Depends on: The accounts must remain active and their posts must reach substantial audiences.

Possible time frame: weeks, if those conditions hold.

Safety

Public confidence in election information could weaken without any change to voting systems themselves.

Repeated claims attacking election legitimacy can blur the line between genuine political disagreement and coordinated manipulation.

Reported basis: [1][2][3] · The possible effect is interpretation.

Depends on: The campaign’s content must gain sustained attention during the midterm election period.

Possible time frame: months, if those conditions hold.

Possible consequences, not a forecast. Their relevance depends on your location and the conditions above.

For your country

Choose a country to check how this event could affect you.

What changes the outlook

Risk increases if…

More Spamouflage-linked accounts posing as U.S. voters could appear or evade removal on X.

The identified posts could gain wider circulation as the 2026 midterm elections approach.

Pressure eases if…

X could remove or restrict the identified accounts and limit their ability to amplify posts.

Independent identification of the accounts could reduce their credibility if users recognize the personas as coordinated influence activity.

Still unclear

The reporting does not establish how many people saw or shared the identified posts.

It is unclear whether X has removed or restricted the accounts identified by Graphika.

Market implications

Market impact

Loading market analysis...
Sources (3)

References for the reported details. Separate links do not necessarily mean independent confirmation.

[3] Graphika finds China-linked Spamouflage accounts posing as US voters on X ↗abcnews.com · Article published: Oct 30, 2026, 11:51 PM UTC
Available excerpt
Analysts at Graphika report that the influence campaign known as Spamouflage is active ahead of the midterm elections WASHINGTON -- The long-running influence campaign known…
A short excerpt from our source record; open the original for the full article.

First tracked by DoomRadar: . AI-assisted analysis · . Based on linked headlines and available excerpts. Methodology · Report an error.