Guide · Coordinated Attacks

Banned by bots: the mass-reporting attack, explained.

You broke no rules. But hundreds of coordinated accounts reported your posts in a single night, automated moderation did the math, and your account is gone. This is mass reporting — and it is used as a weapon, most visibly against Iranian activists, journalists, and diaspora voices.

Definition: a mass-reporting attack (bot brigading) is the coordinated filing of hundreds or thousands of false abuse reports against one account, exploiting automated moderation to get an innocent account disabled.

Why it works

Platforms moderate billions of posts with automation; a sudden spike of reports against one account is a strong statistical signal that something is wrong. Attackers — troll farms, state-aligned networks, or paid “ban services” openly sold on Telegram — manufacture that signal on command. The account holder is guilty until they can get a human to look, and getting a human to look is the entire battle.

Who gets targeted

Persian-language accounts are among the most heavily hit: activists covering protests inside Iran, journalists, and diaspora creators have documented waves of coordinated takedown campaigns for years. But the tactic is universal — business rivals purchase attacks on competitors, and harassment mobs aim it at anyone. If your account vanished right after you angered someone organized, suspect mass reporting.

Fighting back

Appeal immediately through the official channel and state plainly that you believe the account was mass-reported — wrongful-disable reversals happen, especially where a human reviews the actual content. Document everything: threat messages, the attack's timing, screenshots. For high-value accounts, appeals specialists and attorneys can escalate through channels ordinary users cannot reach. And because targeted communities are also heavily targeted by recovery scammers — often operating in the victims' own language — the payment rule matters doubly here: never pay upfront.

Recover with your money protected

Middleman holds your payment in escrow and releases it only after automated probes verify your account is publicly live again and stays live 7 consecutive days — which matters specifically for mass-reporting victims, because attackers often re-report the moment an account returns. A restoration that gets re-banned on day two pays nothing; the stability window means you pay for restorations that hold. The full case flow is available in Persian: میدل‌من به فارسی.