Graphika Detects China-Linked Spamouflage Activity on X

Graphika, a New York-based firm that monitors online networks, reported on Friday that a Chinese influence campaign known as Spamouflage is active on X. The firm stated that accounts linked to the network are posing as U.S. voters and posting content about American politics and social issues. This activity occurs ahead of the upcoming midterm elections. The tactics closely resemble those documented by analysts in 2024 during the presidential election cycle.

The Spamouflage network has operated for several years. Intelligence and national security officials have previously warned that China, Russia, and Iran run online influence operations targeting U.S. voters. Observers noted that China’s efforts generally focus on undermining confidence in the U.S. election process rather than supporting specific presidential candidates. The Chinese Embassy in Washington did not immediately respond to a request for comment regarding the new findings.

Graphika’s blog details specific account behaviors. One account appears to have replaced a removed Spamouflage-linked account. This account posted divisive content during the U.S. government shutdown in October 2025. The posts included attacks on Democratic Party leadership and criticism of immigration policy. The firm also identified four other accounts with a history of Spamouflage activity. These accounts now amplify personas associated with the MAGA movement. Additionally, Graphika flagged an account with more than 200,000 followers. This profile presents itself as a Philippine culture blog but now posts pro-China and U.S.-focused content.

Darren Linvill co-directs Clemson University's Watt Family Innovation Center Media Forensics Hub. He has tracked Spamouflage activity in the past. Linvill said the network is "famously bad at mimicking real Americans." He added that the operation is "outside their wheelhouse." Linvill stated there is "no chance it tips the balance in any real political conversation." Instead, he said the network has been more effective at suppressing information. The accounts frequently attack and harass members of the Chinese diaspora community, which is part of a wider effort by Beijing to silence views it dislikes.

Graphika said it could not determine how the Philippine culture blog account came under Spamouflage control. The firm noted it did not know whether the account was hijacked or if the original operator sold or lost control of it. The network’s current activity aligns with its long-standing goal of questioning election integrity and the legitimacy of U.S. democracy.

The findings from Graphika provide a snapshot of the current online environment leading up to the midterms. The firm continues to track the network’s movements. The accounts identified in the report remain active on the platform. The data reflects a sustained effort by the network to insert itself into ongoing political debates in the United States.