Uncovering Coordinated Networks on Social Media: Methods and Case Studies
Open accessAbstract
Coordinated campaigns are used to influence and manipulate social media platforms and their users, a critical challenge to the free exchange of information online. Here we introduce a general, unsupervised network-based methodology to uncover groups of accounts that are likely coordinated. The proposed method constructs coordination networks based on arbitrary behavioral traces shared among accounts. We present five case studies of influence campaigns, four of which in the diverse contexts of U.S. elections, Hong Kong protests, the Syrian civil war, and cryptocurrency manipulation. In each of these cases, we detect networks of coordinated Twitter accounts by examining their identities, images, hashtag sequences, retweets, or temporal patterns. The proposed approach proves to be broadly applicable to uncover different kinds of coordination across information warfare scenarios.
The claims and statistics of this paper haven’t been checked yet.
Run the check — free, no account needed. It reads the open-access text and checks the sources it cites.
Integrity signals
Registry
Cites
Statistics
Claims the paper makes
The claims and statistics of this paper haven’t been checked yet.
Run the check — free, no account needed. It reads the open-access text and checks the sources it cites.
Claims other papers make about this one
Each is checked against this paper’s own text: does it say what the citing paper says it does?
The unsupervised bot detection approach typically requires calculating similarity of different accounts and clustering them into groups.
“This unsupervised approach typically requires calculating the similarity of different accounts and subsequently clustering them into groups (Pacheco et al., 2021).”
From Anatomy of an AI-powered malicious social botnet (2024) · cites this paper as Pacheco et al., 2021
The Related Work section describes unsupervised detection of coordinated accounts using similarities between pairs of accounts and clustering or community detection. The method summary likewise specifies a similarity measure followed by extraction of coordinated groups. The paper does not present this as a general requirement of bot detection: its method detects coordination among human-controlled accounts as well as bots. (LLM, conf=0.85)
Experimental — accuracy not yet measuredPopularity metrics can be gamed with inauthentic behavior, including bots, organized trolls, and fake-account networks.
“Popularity metrics can also be gamed with inauthentic behavior, including bots, organized trolls, and fake-account networks (Pacheco et al., 2021; Sen et al., 2018).”
From Social Drivers and Algorithmic Mechanisms on Digital Media. (2024) · cites this paper as Pacheco et al., 2021
The Introduction (page unavailable) describes fake accounts and social bots used to amplify misleading narratives. Case Study 4: Co-Retweets (page unavailable) calls coordinated retweeting a form of manipulation. These passages support inauthentic amplification, but do not specifically establish that popularity metrics are gamed or identify organized trolls as an example. (LLM, conf=0.82)
Experimental — accuracy not yet measuredCoordination in account activity does not necessarily coincide with automation.
“While coordination in account activity does not necessarily coincide with automation [36,37], accounts created on similar dates and following users successively are more likely to be automated [3,48].”
From Unsupervised detection of coordinated fake-follower campaigns on social media (2024) · cites this paper as [37]
The BLOC model was compared to three baseline methods that make different assumptions about the behavioral traits shared among coordinated accounts: hashtag sequences (Hash), activity (Activity), and co-retweet (CoRT).
“We compared the BLOC model to three baseline methods, which make different assumptions about the behavioral traits that may be shared among coordinated accounts [6]: hashtag sequences (Hash), activity (Activity), and co-retweet (CoRT).”
From A language framework for modeling social media account behavior (2023) · cites this paper as [6]
Coordination detection methods typically extract account features designed to target specific suspicious behavioral patterns.
“These methods typically extract account features designed to target specific suspicious behavioral patterns [6].”
From A language framework for modeling social media account behavior (2023) · cites this paper as [6]
Coordination detection involves clustering suspiciously similar accounts into groups.
“While individual bot detection aims to separate individual human and bot-like accounts, coordination detection involves clustering suspiciously similar accounts into groups [6].”
From A language framework for modeling social media account behavior (2023) · cites this paper as [6]
Without explicit countermeasures, these systems will face the same coordinated inauthentic behavior that has plagued human social media.
“Our results suggest that without explicit countermeasures, these systems will face the same coordinated inauthentic behavior that has plagued human social media 17,23,24 .”
From The Moltbook Illusion: Separating Human Influence from Emergent Behavior in AI Agent Societies (2026) · cites this paper as [23]
Key signals for unsupervised bot detection include temporal activities, common retweets, and URLs shared in tweets.
“Key signals include temporal activities (Chavoshi et al., 2016;Keller et al., 2017), common retweets (Nizzoli et al., 2021), and URLs shared in tweets (Pacheco et al., 2021;Giglietto et al., 2020).”
From Anatomy of an AI-powered malicious social botnet (2024) · cites this paper as Pacheco et al., 2021
Self-check
Percentages, sums and reported differences re-computed from the paper’s own numbers.
The self-check needs the paper’s full text.
Cites
The spread of true and false news online
Vosoughi, S., Roy, D., & Aral, S. (2018) · Science · doi:10.1126/science.aap9559 · Cited by 8,847 · cited 1× · see citing works
“…is increasing evidence of malicious actors polluting the information ecosystem with disinformation and manipulation cam-paigns (Lazer et al. 2018; Vosoughi, Roy, and Aral 2018; Bessi and Ferrara 2016; Shao et al. 2018; Ferrara 2017; Stella, Ferrara, and De Domenico 2018; Deb et al. 2019; Bovet…”
BackgroundOnline Human-Bot Interactions: Detection, Estimation, and Characterization
Varol, O., Ferrara, E., Davis, C., Menczer, F., & Flammini, A. (2017) · Proceedings of the International AAAI Conference on Web and Social Media · doi:10.1609/icwsm.v11i1.14871 · Cited by 928 · cited 6× · see citing works
“Most machine learning tools to combat online abuse target the detection of social bots, and mainly use methods that focus on individual accounts (Davis et al. 2016; Varol et al. 2017; Yang et al. 2019; 2020; Sayyadiharikandeh et al. 2020).”
BackgroundMethodInfluentialSelf-citationDisinformation and social bot operations in the run up to the 2017 French presidential election
Ferrara, E. (2017) · First Monday · doi:10.5210/fm.v22i8.8005 · Cited by 524 · see citing works
Arming the public with artificial intelligence to counter social bots
Yang, K., Varol, O., Davis, C. A., Ferrara, E., Flammini, A., & Menczer, F. (2019) · Human Behavior and Emerging Technologies · doi:10.1002/hbe2.115 · Cited by 419 · cited 10× · see citing works
“Most machine learning tools to combat online abuse target the detection of social bots, and mainly use methods that focus on individual accounts (Davis et al. 2016; Varol et al. 2017; Yang et al. 2019; 2020; Sayyadiharikandeh et al. 2020).”
BackgroundMethodInfluentialSelf-citationPolitical Astroturfing on Twitter: How to Coordinate a Disinformation Campaign
Keller, F. B., Schoch, D., Stier, S., & Yang, J. (2020) · Political Communication · doi:10.1080/10584609.2019.1661888 · Cited by 378 · see citing works
Uncovering Large Groups of Active Malicious Accounts in Online Social Networks
Cao, Q., Yang, X., Yu, J., & Palow, C. (2014) · Proceedings of the 2014 ACM SIGSAC Conference on Computer and Communications Security · doi:10.1145/2660267.2660269 · Cited by 274 · see citing works
DeBot: Twitter Bot Detection via Warped Correlation
Chavoshi, N., Hamooni, H., & Mueen, A. (2016) · 2016 IEEE 16th International Conference on Data Mining (ICDM) · doi:10.1109/icdm.2016.0096 · Cited by 260 · see citing works
A generic statistical approach for spam detection in Online Social Networks
Ahmed, F., & Abulaish, M. (2013) · Computer Communications · doi:10.1016/j.comcom.2013.04.004 · Cited by 199 · see citing works
DNA-Inspired Online Behavioral Modeling and Its Application to Spambot Detection
Cresci, S., Di Pietro, R., Petrocchi, M., Spognardi, A., & Tesconi, M. (2016) · IEEE Intelligent Systems · doi:10.1109/mis.2016.29 · Cited by 194 · cited 2× · see citing works
“A method named Digital DNA proposed to encode the tweet type or content as a string, which was then used to identify the longest common sub-string between accounts (Cresci et al. 2016).”
MethodChanging Perspectives: Is It Sufficient to Detect Social Bots?
Grimme, C., Assenmacher, D., & Adam, L. (2018) · Lecture Notes in Computer Science · doi:10.1007/978-3-319-91521-0_32 · Cited by 93 · see citing works
Flagged first, then by citations
Research works printed but not linked: 31
- Al-khateeb, S., and Agarwal, N. 2019. Deviance in Social Media and Social Cyber Forensics: Uncovering Hidden Relations Using Open Source Information (OSINF). Springer.
- Blondel, V. D.; Guillaume, J.-L.; Lambiotte, R.; and Lefebvre, E. 2008. Fast unfolding of communities in large networks. Journal of statistical mechanics: theory and experiment 2008(10):P10008.
- Bovet, A., and Makse, H. A. 2019. Influence of fake news in Twitter during the 2016 US presidential election. Nature Comms. 10(1):7.
- Chen, Z., and Subramanian, D. 2018. An unsupervised approach to detect spam campaigns that use botnets on twitter. arXiv preprint arXiv:1804.05232. · arXiv
- Ciampaglia, G. L.; Mantzarlis, A.; Maus, G.; and Menczer, F. 2018. Research challenges of digital misinformation: Toward a trustwor- thy web. AI Magazine 39(1):65-74.
- Cresci, S.; Di Pietro, R.; Petrocchi, M.; Spognardi, A.; and Tesconi, M. 2017. The paradigm-shift of social spambots: Evidence, theo- ries, and tools for the arms race. In Proc. of the 26th Intl. Conf. on World Wide Web companion, 963-972.
- Davis, C. A.; Varol, O.; Ferrara, E.; Flammini, A.; and Menczer, F. 2016. Botornot: A system to evaluate social bots. In Proc. 25th Intl. Conf. Companion on World Wide Web, 273-274.
- Deb, A.; Luceri, L.; Badaway, A.; and Ferrara, E. 2019. Perils and Challenges of Social Media and Election Manipulation Analysis: The 2018 US Midterms. In Companion Proc. of The World Wide Web Conf., 237-247.
- Echeverria, J., and Zhou, S. 2017. Discovery, retrieval, and analysis of the'star wars' botnet in twitter. In Proc. of the 2017 IEEE/ACM Intl. Conf. on Adv. in Social Networks Anal. and Mining 2017, 1-8.
- Ferrara, E.; Varol, O.; Davis, C.; Menczer, F.; and Flammini, A. 2016. The rise of social bots. Comm. of the ACM 59(7):96-104.
- Fortunato, S. 2010. Community detection in graphs. Physics re- ports 486(3-5):75-174.
- Giglietto, F.; Righetti, N.; Rossi, L.; and Marino, G. 2020. It takes a village to manipulate the media: coordinated link sharing behavior during 2018 and 2019 italian elections. Information, Communica- tion & Society 23(6):867-891.
- Grinberg, N.; Joseph, K.; Friedland, L.; Swire-Thompson, B.; and Lazer, D. 2019. Fake news on Twitter during the 2016 U.S. presi- dential election. Science 363(6425):374-378.
- Hills, T. T. 2019. The dark side of information proliferation. Per- spectives on Psychological Science 14(3):323-330.
- Hui, P.-M.; Yang, K.-C.; Torres-Lugo, C.; Monroe, Z.; McCarty, M.; Serrette, B.; Pentchev, V.; and Menczer, F. 2019. Botslayer: real-time detection of bot amplification on twitter. Journal of Open Source Software 4(42):1706.
- Jowett, G., and O'Donnell, V. 2018. Propaganda & persuasion. SAGE Publications, seventh edition.
- Keller, F. B.; Schoch, D.; Stier, S.; and Yang, J. 2017. How to manipulate social media: Analyzing political astroturfing using ground truth data from south korea. In Eleventh Intl. AAAI Conf. on Web and Social Media.
- Keogh, E., and Ratanamahatana, C. A. 2005. Exact indexing of dynamic time warping. Knowledge and information systems 7(3):358-386.
- Lazer, D.; Baum, M.; Benkler, Y.; Berinsky, A.; Greenhill, K.; Menczer, F.; Metzger, M.; Nyhan, B.; Pennycook, G.; Rothschild, D.; Schudson, M.; Sloman, S.; Sunstein, C.; Thorson, E.; Watts, D.; and Zittrain, J. 2018. The science of fake news. Science 359(6380):1094-1096.
- Lee, K.; Eoff, B. D.; and Caverlee, J. 2011. Seven months with the devils: A long-term study of content polluters on twitter. In Fifth International AAAI Conf. on Weblogs and Social Media.
- Mariconti, E.; Onaolapo, J.; Ahmad, S. S.; Nikiforou, N.; Egele, M.; Nikiforakis, N.; and Stringhini, G. 2017. What's in a name? Understanding profile name reuse on Twitter. In Proc. 26th Intl. World Wide Web Conf., 1161-1170.
- Mirtaheri, M.; Abu-El-Haija, S.; Morstatter, F.; Steeg, G. V.; and Galstyan, A. 2019. Identifying and analyzing cryptocurrency ma- nipulations in social media. arXiv preprint arXiv:1902.03110. · arXiv
- Pacheco, D.; Flammini, A.; and Menczer, F. 2020. Unveiling co- ordinated groups behind white helmets disinformation. In Cyber- Safety 2020: The 5th Workshop on Computational Methods in On- line Misbehavior. Companion Proc. Web Conf. (WWW).
- Pennycook, G.; Epstein, Z.; Mosleh, M.; Arechar, A. A.; Eckles, D.; and Rand, D. 2019. Understanding and reducing the spread of misinformation online. PsyArXiv preprint: 3n9u8.
- Sayyadiharikandeh, M.; Varol, O.; Yang, K.-C.; Flammini, A.; and Menczer, F. 2020. Detection of novel social bots by ensembles of specialized classifiers. In Proc. 29th ACM International Conf. on Information & Knowledge Management (CIKM), 2725-2732.
- Shao, C.; Ciampaglia, G. L.; Varol, O.; Yang, K. C.; Flammini, A.; and Menczer, F. 2018. The spread of low-credibility content by social bots. Nature Comms. 9(1):4787.
- Stella, M.; Ferrara, E.; and De Domenico, M. 2018. Bots increase exposure to negative and inflammatory content in online social sys- tems. PNAS 115(49):12435-12440.
- Weng, L.; Flammini, A.; Vespignani, A.; and Menczer, F. 2012. Competition among memes in a world with limited attention. Sci- entific Reports 2(1):335.
- Wilson, T., and Starbird, K. 2020. Cross-platform disinforma- tion campaigns: lessons learned and next steps. Harvard Kennedy School Misinformation Review 1(1).
- Yang, K.-C.; Varol, O.; Hui, P.-M.; and Menczer, F. 2020. Scalable and generalizable social bot detection through data selection. In Proc. 34th AAAI Conf. on Artificial Intelligence (AAAI).
- Yang, K.-C.; Hui, P.-M.; and Menczer, F. 2019. Bot electioneering volume: Visualizing social bot activity during elections. In Com- panion Proc. of The 2019 World Wide Web Conf., 214-217.
Cited by
Sorted by citations
Social Drivers and Algorithmic Mechanisms on Digital Media.
Metzler, H., & Garcia, D. (2024) · Perspectives on Psychological Science · doi:10.1177/17456916231185057 · Cited by 204 · see citing works
“Popularity metrics can also be gamed with inauthentic behavior, including bots, organized trolls, and fake-account networks (Pacheco et al., 2021; Sen et al., 2018).”
BackgroundFactuality challenges in the era of large language models and opportunities for fact-checking
Augenstein, I., Baldwin, T., Cha, M., Chakraborty, T., Ciampaglia, G. L., Corney, D., DiResta, R., Ferrara, E., Hale, S., Halevy, A., et al. (2024) · Nature Machine Intelligence · doi:10.1038/s42256-024-00881-z · Cited by 187 · see citing works
Self-citationWhat types of COVID-19 conspiracies are populated by Twitter bots?
Ferrara, E. (2020) · First Monday · doi:10.5210/fm.v25i6.10633 · Cited by 223 · see citing works
Anatomy of an AI-powered malicious social botnet
Yang, K., & Menczer, F. (2024) · Journal of Quantitative Description: Digital Media · doi:10.51685/jqd.2024.icwsm.7 · Cited by 71 · see citing works
Self-citationAddressing the harms of AI-generated inauthentic content
Menczer, F., Crandall, D., Ahn, Y.-Y., & Kapadia, A. (2023) · Nature Machine Intelligence · doi:10.1038/s42256-023-00690-w · Cited by 42 · see citing works
Self-citationHow malicious AI swarms can threaten democracy
Schroeder, D. T., Cha, M., Baronchelli, A., Bostrom, N., Christakis, N. A., Garcia, D., Goldenberg, A., Kyrychenko, Y., Leyton-Brown, K., Lutz, N., et al. (2026) · Science · doi:10.1126/science.adz1697 · Cited by 25 · see citing works
Self-citationA language framework for modeling social media account behavior
Nwala, A. C., Flammini, A., & Menczer, F. (2023) · EPJ Data Science · doi:10.1140/epjds/s13688-023-00410-9 · Cited by 21 · see citing works
Self-citationUnsupervised detection of coordinated fake-follower campaigns on social media
Zouzou, Y., & Varol, O. (2024) · EPJ Data Science · doi:10.1140/epjds/s13688-024-00499-6 · Cited by 19 · see citing works
Investigating coordinated account creation using burst detection and network analysis
Bellutta, D., & Carley, K. M. (2023) · Journal of Big Data · doi:10.1186/s40537-023-00695-7 · Cited by 15 · see citing works
Emotionally based strategic communications as a new tool in defensive cognitive warfare
Ćosić, K., Popović, S., & Wiederhold, B. (2026) · Frontiers in Psychology · doi:10.3389/fpsyg.2026.1751406 · Cited by 4 · see citing works
The Moltbook Illusion: Separating Human Influence from Emergent Behavior in AI Agent Societies
Li, N. (2026) · arXiv · doi:10.48550/arxiv.2602.07432 · Cited by 1 · see citing works
“Our results suggest that without explicit countermeasures, these systems will face the same coordinated inauthentic behavior that has plagued human social media 17,23,24 .”
Cosic, K., Kuljanac, A., & Palermo, S. (2026) · Frontiers in psychology · doi:10.3389/fpsyg.2026.1821242 · Cited by 3 · see citing works
- Authors
- Pacheco, D., Hui, P.-M., Torres-Lugo, C., Truong, B. T., Flammini, A., & Menczer, F.
- Affiliations
- University of Exeter (GB)
- Indiana University Bloomington (US)
- ORCID
- Venue
- Proceedings of the International AAAI Conference on Web and Social Media
- Published
- 2021-05-22
- Volume
- 15
- Pages
- 455-466
- ISSN
- 2162-3449 (ISSN-L)
- 2334-0770
- OpenAlex
- W3151343903
- Cited by
- 140
- References
- 10
- Citations by year
- 2026: 26 · 2025: 27 · 2024: 28 · 2023: 24 · 2022: 26 · 2021: 7 · 2020: 2
- FWCI
- 56.65
- Type
- conference paper
- Language
- en
- Open access
- diamond
- doi.org
- Locations
- Proceedings of the International AAAI Conference on Web and Social Media (publishedVersion)
- arXiv (Cornell University) (submittedVersion)
- arXiv (Cornell University)
- Funders
- National Science Foundation (1735095)
- John S. and James L. Knight Foundation
- Craig Newmark Philanthropies
- Defense Advanced Research Projects Agency (W911NF-17-C0094)
- Topics
- Social Sciences › Sociology and Political Science › Misinformation and Its Impacts
- Physical Sciences › Computer Science › Information Systems › Spam and Phishing Detection
- Physical Sciences › Physics and Astronomy › Statistical and Nonlinear Physics › Complex Network Analysis Techniques
- Keywords
- social media manipulation, information warfare, Twitter, retweets, election interference, Hong Kong protests, Syrian civil war
About these checks
Registry, retraction, Cites and statistics results are computed, not judged, with one exception: a printed reference that no index lists is read once by a model before it counts as a citation error. Claims are extracted by a model and kept only when their quote appears verbatim in the text; each cited source is then checked, with a model’s help, for whether it says what the claim relies on. Those verdicts can be wrong — read the claim’s quote and the cited source before relying on one.
Statistics and arithmetic are recomputed, not judged.
Confidence bands are shown only for fields calibrated on our annotated test set. None is calibrated yet, so no band is shown.
What counts as a claim ›How we measure confidence ›How we check this ›
Are you an author, or do you see a problem with this page? Request a review