Peru Economy Ministry's X Account Hacked in Fake Token Scam

iconCCPress
Share
AI summary iconSummary
Peru’s Ministry of Economy and Finance confirmed on September 14, 2026, that its X account was hacked to promote a fake token, $HYLO. Attackers urged users to claim tokens by September 25. The ministry has not verified losses or restored the account. On-chain data shows similar scams have cost victims over $133 million in the U.S. between 2021 and 2022. Traders are advised to monitor altcoins to watch for emerging risks.

Peru Economy Ministry’s X account compromised

The account belongs to Peru’s Ministerio de Economía y Finanzas, the government body that manages the country’s public finances, and operates on X under the handle that links back to gob.pe/mef. For related coverage, see Strategic Bitcoin Reserve Bill Set for Wednesday Markup.

Crypto Briefing reported that the MEF confirmed its official X account was compromised on September 14, 2026. That report is the only account of the incident retrieved, and no official ministry statement was independently located. For related coverage, see Wyoming Cites LayerZero Security Failures, Switches to CCIP.

The compromise, according to that reporting, hit the ministry’s social media presence. The available evidence does not establish any breach of the ministry’s internal systems or public finance infrastructure.

Crypto scammers used the account to promote a fake token

With control of the feed, the attackers posted promotional messages urging Peruvians to check their allocations for a token the report labels $HYLO, according to unconfirmed reporting from the same source. The label is not a verified token identity, and it should not be mapped to any legitimate project sharing that name.

The scam advertised September 25 as the date for claims and trading, a promotional promise rather than a verified launch schedule. The posts carried the weight of a government account, but the promotion came from the scammers, not the ministry.

Government impersonation is a familiar playbook. The U.S. Federal Trade Commission found that business and government impersonation scams together accounted for $133 million in reported cryptocurrency losses from January 1, 2021 through March 31, 2022. That figure is historical U.S. data and is not a measure of losses from the Peru incident.

Historical context · FTC · Jan. 2021–Mar. 2022

$133 million

Reported crypto losses to business and government impersonation

Business and government impersonation scams combined accounted for $133 million in cryptocurrency losses reported to the FTC from January 1, 2021–March 31, 2022. Source: FTC, June 3, 2022. Historical context; these are not losses from the reported Peru ministry incident.

Social media is where much of this fraud tends to begin. In the same FTC reporting period, 49% of fraud reports identifying cryptocurrency as the payment method said the scam started on social media.

Historical context · FTC · Jan. 2021–Mar. 2022

49%

Crypto-payment fraud reports that identified social media as the starting point

Of fraud reports to the FTC identifying cryptocurrency as the payment method, 49% specified that the scam started on social media. Reporting period: January 1, 2021–March 31, 2022. Source: FTC, June 3, 2022. Historical context; this is not a statistic about the reported Peru ministry incident.

Account recovery and scam impact remain unconfirmed

The ministry advised the public to disregard the unauthorized posts, activated security measures and later deleted the messages, according to the same unconfirmed report. A dated official confirmation that the ministry fully regained control was not located.

No verified victim count, transaction data or financial loss figure exists for this incident. The report says no losses were reported, but that does not establish that none occurred.

Peru’s institutions have drawn crypto-related confusion before, as when BCP denied offering regulated crypto access in the country. Government impersonation online has also shadowed policy fights elsewhere, from stalled U.S. crypto legislation to state attorneys general opposing the CLARITY Act.

So who was on the other side of those posts, and did anyone act on a September 25 promise that a hijacked government account was never authorized to make?

Disclaimer: This article is for informational purposes only and does not constitute financial or investment advice. Cryptocurrency and digital asset markets carry significant risk. Always do your own research before making decisions.

Disclaimer: The information on this page may have been obtained from third parties and does not necessarily reflect the views or opinions of KuCoin. This content is provided for general informational purposes only, without any representation or warranty of any kind, nor shall it be construed as financial or investment advice. KuCoin shall not be liable for any errors or omissions, or for any outcomes resulting from the use of this information. Investments in digital assets can be risky. Please carefully evaluate the risks of a product and your risk tolerance based on your own financial circumstances. For more information, please refer to our Terms of Use and Risk Disclosure.