Tariff Tirade
China-Aligned Network Poses as Grassroots Voices in Effort to Covertly Boost Online Narratives Critical of US Tariffs and Trade Policies
- We identified a network of over 1,000 X accounts engaged in coordinated and inauthentic behavior in an effort to influence the online information environment around the U.S.-China trade war and global tariffs. This included using fake personas purporting to be users in the U.S. and other countries, stealing content from authentic users, and the coordinated amplification of hashtags and media articles.
- The network advanced narratives critical of U.S. trade policy, casting President Donald Trump’s tariffs as an act of economic self-injury that would hurt Americans and the global economy. Subsets of accounts in the network focused on the U.K., Canada, and Japan, framing these countries as resisting pressure and bullying from Washington.
- The network also seeded and amplified content that supports China’s geopolitical agenda on non-trade issues. This included criticism of U.S. forces stationed in Japan and promotion of Chinese government tourism initiatives.
- Based on open-source indicators, we were not able to attribute this activity to a known influence operation (IO) or specific actor. However, based on an analysis of content disseminated by the operation and similarities between the identified behaviors and past IOs attributed to Chinese state actors, we assess that the network operator(s) were very likely aligned with the interests of China.
- Despite an apparent de-escalation in tensions between the U.S. and China, we assess that efforts by these and other actors to covertly influence online conversations about U.S. trade policy and tariffs will almost certainly continue.

Jean le Roux
Senior Investigator
Jean le Roux leverages open-source intelligence (OSINT) and network analysis to identify, map, and analyze online influence operations and platform abuse for Graphika. Previously, Jean was a Research Associate with the Atlantic Council's Digital Forensic Research Lab (DFRLab), where he led investigations into disinformation campaigns and information operations across Sub-Saharan Africa.
Download the complete PDF
The full report includes the complete network graph maps, raw attribution indicators, cross-platform topology analysis, and the full takedown timeline with platform-level data.
- Full network graph visualizations
- Attribution indicators with confidence scores
- Raw behavioral modeling data
- Takedown coordination timeline
Related Reports

Likes for Lorestan
On Oct. 11, Facebook said it had removed a network of 93 profiles, 15 groups, 14 pages and 194 Instagram accounts in September that originated in Iran and engaged in “coordinated inauthentic behaviour” to target domestic audiences in the country. We identified multiple open-source indicators that appear to corroborate Facebook’s attribution to individuals associated with the Islamic Revolutionary Guard Corps (IRGC).
Read the Report
Summit Old, Summit New
Russia-Linked Actors Leverage New and Old Tactics in Influence Operations Targeting Online Conversations About NATO Summit
Read the Report
Lights, Camera, Coordinated Action!
A Network of Fake Media Outlets Paid Actors and Journalists to Spread Political Narratives Supporting Pakistan’s Government and Military
Read the ReportSee How Graphika Can Help Your Team Act on This Intelligence
This report is one of 600+ investigations Graphika’s team has published. Our platform gives your analysts continuous access to the same intelligence — plus the tools to apply it to your specific threat environment.