DigitalMANIPULATIVE
Keyword Squatting
What it is
Seizing the accounts, hashtags, domains, or search terms associated with a group, person, or idea so that the squatter — often an opponent — controls what audiences find when they look for it.
How it works
Real-world examples
- •In June 2020, Twitter removed the account @ANTIFA_US, which had called for violence in white suburbs, after finding it was run by the white-nationalist group Identity Evropa; screenshots of its posts had already circulated as proof of antifa intent.
- •Google bombing was bipartisan sport in the 2000s: in 2003 the phrase miserable failure was linked to President George W. Bush's official biography, and in 2004 the word waffles was bombed to John Kerry's campaign page; Google changed its algorithm in 2007 to defuse the technique.
- •The largest Black Lives Matter page on Facebook in 2018, with roughly 700,000 followers, was run by a man in Australia and had raised money through the name, as CNN reported; the Internet Research Agency likewise ran Blacktivist and other squatted-identity pages.
- •In 2003, columnist Dan Savage organized readers to define the surname of Senator Rick Santorum as a crude neologism, and the site held the top search result for years — a squat aimed at a politician's own name.
Ethical guidelines
- ●Registering a handle or domain to impersonate a group you oppose is deception regardless of how repugnant you find the group.
- ●Parody and criticism are legitimate when clearly labeled; the harm arises when audiences cannot tell the squatter from the real thing.
- ●Journalists should verify that an account speaks for the movement it is named after before quoting it as such.
How to defend against it
- ►Before treating an account as a group's voice, check the basics: creation date, follower history, whether the group's own known channels link to it, and whether its posts match the group's documented positions.
- ►When a screenshot shows a group saying something outrageous, search the handle plus the word fake or suspended before sharing — squatted accounts are often exposed within days.
- ►For search results about a person or group, skip the first result and read laterally across several sources, including the group's own site and established news coverage.
- ►If you run an organization, register the obvious handles and domains across platforms before someone hostile does, and publish a canonical list of your official accounts.
From the Defense Playbook
Every playbook entry states how strong its evidence is and when not to use it. Browse the full playbook.
DISARM framework
How analysts would file this in the open DISARM framework (v1.6.1, CC BY-SA 4.0). Closest matches, mapped by Persuasion Lab.
T0049.006Conduct Keyword SquattingT0046Use Search Engine Optimisation
References
- Donovan, J., & Friedberg, B. (2019). Source Hacking: Media Manipulation in Practice. Data & Society Research Institute · linkDefinition of keyword squatting as a source-hacking tactic and the fake-antifa account cases.
- Golebiewski, M., & boyd, d. (2019). Data Voids: Where Missing Data Can Easily Be Exploited. Data & Society Research Institute · linkHow strategic new terms and low-competition queries let a squatter own the result page.
Last reviewed
Suggest a correctionRelated Articles
Dark Patterns in UX: How Apps Manipulate Your Behavior
Subscription traps, misleading interfaces, and engineered addiction. Understanding the persuasion techniques built into the apps you use every day.
7 min read
OSINT for Beginners: Open Source Intelligence Explained
Open Source Intelligence (OSINT) uses publicly available data to gather actionable insights. Here is a beginner-friendly guide to what OSINT is and how it is used.
10 min read