A reusable West African X farm mass-followed Swedish…

Filed

September 17, 2026, 04:05 UTC

Actor

Unnamed commercial X amplification farm documented by Trollrensics and Alliance4Europe, with assets geolocated mainly in Benin and Nigeria and reused from Dutch 2025 and Hungarian April 2026 election cycles

Target

Swedish voters, journalists, and party staff who read X follower counts and view totals as a map of domestic opinion in the 13 September 2026 Riksdag election

Source

Impersonated Source falsified: fake personas, outlets or documents

Confidence

high Multiple independent open sources, low disagreement about the facts

Techniques

Astroturfing Manufactured consensus Bandwagon Card stacking

Where

Sweden, Netherlands, Hungary, Benin, Nigeria

Channels

X mass-follow and view inflation on authentic Swedish political accounts
Swedish-language names, bios, and stolen profile photos on Benin- and Nigeria-geolocated handles
Alliance4Europe and Trollrensics report PDF dated 1 September 2026, data through 8 September
SVT Verifierar broadcast and text, 12 September 2026
Euronews restack, 16 September 2026
Prior Dutch October 2025 and Hungarian April 2026 deployments of the same asset pool

Summary

On 12 September 2026, two days before Sweden voted, SVT published a joint investigation with Trollrensics and Alliance4Europe into a standing commercial amplification farm on X. Researchers processed 8,505 Benin-geolocated accounts that matched markers first mapped on Dutch 2025 and Hungarian April 2026 races: Swedish-looking names and stolen photos, almost no original posts, and coordinated mass-follows of real Swedish political accounts. A 24-account high-confidence sample followed Moderate and other right-leaning voices far more often than left-leaning ones, and inflated view counts on authentic posts without matching likes. Euronews restated the 8,505 figure on 16 September as preliminary counts still showed a three-seat centre-left lead. Alliance4Europe calls the stack a guns-for-hire product, not a named ministry desk. Robert van der Noordaa told SVT Russian money is a probable payer; that claim is an analyst judgment, not a payment record. Score the farm and the follow graph as high. Score a Kremlin purchase order as contested.

Analysis

The last two briefs in this vault covered a House witness restacking a PRC-origin data-center farm and Iranian offices using Claude as a staff shop. This cycle moves the watch to a commercial amplification product aimed at a European ballot that closed on 13 September, with final seats still unsettled on the 16th.

Primary layers agree on the furniture and split on the invoice. Alliance4Europe and Trollrensics, in a 1 September PDF with captures through 8 September, processed 8,505 Benin-based X accounts that carried the same markers they had already logged on more than 550 Dutch assets in October 2025 and on a Hungarian branch in April 2026: localised names and bios, stolen photographs, almost no original posts, and coordinated following of real national political accounts rather than content creation. A purposive 24-account Benin sample produced 3,344 overlapping follows; twenty of those twenty-four followed Susanna Silfverskiold and Jan Ericson, nineteen followed Lars Beckman, and all twenty-four followed the authentic Swedish account @cajsa123. A post from that account criticising Magdalena Andersson showed 10,400 views against 709 likes. SVT Verifierar, 12 September, put one real Swedish woman with about 9,000 followers next to more than a thousand Nigeria-geolocated follows plus hundreds from Benin, Cote d'Ivoire, and Ghana. Euronews, 16 September, restated the 8,505 figure after preliminary results gave the centre-left bloc a three-seat edge. Score the farm, the stolen-photo handles, the follow graph, and the view-to-like mismatch as high. Score a named client as contested. Alliance4Europe writes only the hypothesis of a commercial guns-for-hire shop. Van der Noordaa told SVT the operators look like mercenaries and that Russian money is a probable funder. Darren Linvill, reviewing the SVT material, called the extremist-amplification pattern consistent with older Russian operations and the operators one or more African marketing companies. No ledger, FARA filing, or platform attribution names a ministry.

Mechanism is astroturf first. The handles perform Swedish neighbours. Manufactured-consensus is the follow graph: many apparent locals arriving independently at the same right-leaning accounts. Bandwagon is the view count that travels without the like count; X's ranking treats the inflated watch as proof that a post is already moving. Card-stacking is the tilt. Left-leaning accounts appear in the sample, including Annika Strandhall, but the dense follows sit on Moderate and other right-anti-establishment voices. The pile that remains can be read as a domestic rightward surge. The same stack ran the other way in prior cycles only in national costume: Dutch right and anti-Ukraine copy in 2025, pro-Orban copy in Hungary in April. That reuse is the tell that this is inventory, not a Swedish grassroots bloom.

This is propaganda on the method test even if the payer stays unnamed. Origin is concealed. Form is a neighbour who never posts. Goal is to move identification so a journalist or staffer treats an X crowd as Sweden. A same-method test applies in reverse. A Stockholm shop that stood up 8,500 Benin-looking accounts to mass-follow Social Democrat backbenchers before a close count would be this brief with the nouns swapped. Do not collapse this farm into the Matryoshka deepfake brief filed earlier on 17 September; that was cloned celebrity video. This is silent follower inventory.

Literacy counter: keep three objects apart. One: the 8,505 Benin-marker accounts, the 24-account follow table, and the 10,400-to-709 view-like pair. Those are investigation records. Two: the 13 September ballot and the three-seat preliminary margin. Those have a count. Three: the instruction that object two is how you know object one bought the Riksdag, or that asking who paid is itself a cover story. If the payload is two or three, the farm is doing method work after the polls close. If the payload is one, open the Alliance4Europe PDF, the SVT Verifierar item, and the Euronews 16 September restack on the same screen and leave the payer line marked contested until a contract appears.

Tells

Swedish names and stolen faces on handles X lists in Benin or Nigeria
Accounts that follow dozens of political voices and almost never post
View counts several times larger than likes on the same authentic post
The same asset pool reappearing in a new national costume within twelve months
A payer sentence that travels farther than the follow-table appendix

A reusable West African X farm mass-followed Swedish voices so a mid-September election looked more right-wing and more crowded than the follower graph was.

Summary

Analysis

Tells

Evidence