Illustration: a split dossier collage contrasting a 1950s intelligence briefing room with an analog newsroom monitoring wall.

A reusable West African follow-farm on X inflated Swedish political accounts so rented consensus would look like local demand.

Illustration, not an archive object

Filed
September 18, 2026, 17:16 UTC
Actor
Unnamed commercial coordinated-inauthentic-behavior network operating X accounts geolocated mainly in Benin and Nigeria, documented by Trollrensics, Alliance4Europe and SVT Verifierar as a reusable guns-for-hire follow farm
Target
Swedish X users and voters asked to treat inflated follower graphs and boosted right-wing posts as homegrown demand, and platform ranking systems asked to treat mass follows as genuine attention
Source
Unidentified Source blurred: contractors, cutouts, buried disclosure
Confidence
high Multiple independent open sources, low disagreement about the facts
Techniques
AstroturfingManufactured consensusBandwagonCard stackingFlooding the zone
Where
Sweden, Benin, Nigeria, Netherlands, Hungary
Channels
  • X follow graph and recommender on Swedish political accounts
  • Stolen profile photographs and invented Swedish display names
  • SVT Verifierar investigation with Trollrensics and Alliance4Europe, 12 September 2026
  • Alliance4Europe dossier From the Netherlands to Sweden, 1-12 September 2026
  • Euronews The Cube restatement, 16 September 2026
  • Prior Dutch October 2025 and Hungarian April 2026 election cycles on the same infrastructure
  • Riksdag election 13 September 2026; Speaker tasking Magdalena Andersson 18 September 2026

Summary

On 12 September 2026 SVT Verifierar, with Trollrensics and Alliance4Europe, reported thousands of X accounts geolocated to Nigeria, Benin, Côte d'Ivoire and Ghana mass-following Swedish political users days before the 13 September Riksdag election. The Alliance4Europe dossier, released with SVT, counted 8,505 Benin-marked assets in the processed window and tied the same infrastructure to the Dutch October 2025 and Hungarian April 2026 cycles. Accounts used stolen photographs and invented Swedish names, posted little, and followed hyperactive authentic users so X's recommender would treat those users as more popular. Euronews restated the 8,500 figure on 16 September after the vote. Trollrensics co-founder Robert van der Noordaa told SVT the operators look like mercenaries and that Russian money probably finances the African layer. Score the follow pattern, stolen-image examples, country tags, and three-cycle reuse as high. Score a named vendor, a signed Russian tasking order, and any proof the farm moved the 176-173 seat result as not shown.

Analysis

The last two active briefs covered an Israeli anti-Qatar WhatsApp cell and a British NGO sting against Meta's Brazil ad filters. Rotation this cycle is a commercial follow-farm aimed at a European vote, not another ministry cell and not another platform auto-desk.

SVT Verifierar published on 12 September 2026, the day before Swedes voted. Trollrensics and Alliance4Europe supplied the account map. One authentic Swedish woman with about 9,000 followers had more than a thousand Nigeria-tagged followers plus hundreds more tagged Benin, Côte d'Ivoire and Ghana. Dummy accounts used stolen photographs and invented Swedish names such as Klara Larsson and Ingrid Karlsson, posted little or nothing, and mass-followed smaller, high-output political accounts so X would treat those accounts as more in demand. Alliance4Europe's dossier, coordinated with SVT, recorded 8,505 Benin-consistent assets in the window it processed and said the same reusable stack had already run against the Dutch October 2025 election and the Hungarian April 2026 election. Euronews on 16 September restated the 8,500 figure after Sunday's vote. Van der Noordaa told SVT the operators look like mercenaries who built an army of accounts, and that Russian money probably pays the African layer. Alliance4Europe itself does not name a state or a vendor. Score the dated follow pattern, the stolen-image examples, the X country tags, the three-cycle reuse, and the 8,505 processed count as high. Score a signed Russian or other ministry order, a named Lagos or Cotonou shop on a contract, and any causal claim that the farm produced the 176-173 seat split as not shown.

The 13 September result is now a separate object. The Election Authority's count gave the centre-left bloc 176 seats and the outgoing right bloc 173. Prime Minister Ulf Kristersson resigned on 17 September. On 18 September the Speaker tasked Magdalena Andersson with exploring a government. That sequence is civic procedure. It is not evidence the follow-farm decided the seat chart.

Mechanism is astroturf first. Personas that claim to be Swedish women in Benin are rented grassroots. Manufactured-consensus is the costume of many independent locals arriving at the same follows. Bandwagon is the load-bearing trick on this platform: X ranks by apparent attention, so a pile of silent follows is sold as proof that a post already won the room. Card-stacking is the follow list. The investigators found the pile skewed to right-wing, anti-immigration, pro-Russian and anti-Ukrainian accounts, with a thinner left-side sample; that is a real skew in the farm, not a census of Swedish opinion. Flooding-the-zone is operational rather than verbal. The farm does not need to write a second manifesto. It occupies the attention meter so slower checking never finishes the graph.

This is propaganda on the method test where origin is an undeclared commercial network, form is a follower count, and the design goal is to move identification so rented attention reads as Swedish demand. Gray color does not cancel the method. Real Swedes posting about immigration or Ukraine is not the violation. Buying silent African and Southeast Asian follows so those posts look bigger than the humans who wrote them is the influence layer. A same-method test applies in reverse. A Stockholm shop that stood up 8,000 Benin-tagged accounts with stolen Lagos names, mass-followed Swedish left accounts the week before a vote, and then called the resulting graph the will of the people would be this brief with the bios swapped.

Literacy counter: keep three objects apart. One: the 12 September SVT item, the 8,505 processed Benin-marked assets, the stolen-image examples, the Dutch and Hungarian prior cycles, and the 13-18 September election calendar. Those are records. Two: van der Noordaa's Russian-money sentence and Alliance4Europe's guns-for-hire label. Those are hypotheses about who paid. Three: the instruction that object one proves Moscow bought the 176-173 result, or that object two proves every Nigeria-tagged follow is a tourist. If the payload is two or three, the stack is still doing method work. If the payload is one, open the SVT 12 September piece, the Alliance4Europe dossier, the Euronews 16 September restatement, and the Riksdag 18 September Speaker note on the same screen.

Tells

Evidence

  1. SVT Verifierar, 12 Sep 2026: thousands of Nigeria- and Benin-tagged accounts mass-following Swedish political users
  2. Alliance4Europe dossier with Trollrensics and SVT: 8,505 Benin-marked assets, Dutch and Hungarian prior cycles
  3. Euronews, 16 Sep 2026: restates 8,500-account follow farm after the 13 September vote
  4. Expressen, 12 Sep 2026: van der Noordaa mercenary line and probable Russian-money assessment
  5. Sveriges riksdag, 18 Sep 2026: Speaker tasks Magdalena Andersson after the 13 September election
  6. Reuters, 17 Sep 2026: Kristersson resigns; centre-left 176 seats, right bloc 173