DigitalMANIPULATIVE

Source Hacking

What it is

Manipulating journalists and other trusted intermediaries into carrying a false or engineered story by planting material where they will find it and shaping it to fit their verification habits.

How it works

Reporters, moderators, and fact-checkers are the gatekeepers whose endorsement turns a rumor into news, and they work under deadline with predictable routines. Source hacking targets those routines rather than the audience directly. Donovan and Friedberg (2019) identify four tactics: viral sloganeering (a deliberately ambiguous slogan designed to provoke coverage), leak forgery (forged documents inserted into real leaks), evidence collages (screenshots and documents arranged to look like an investigation), and keyword squatting (seizing the names and handles audiences search for). Each exploits a specific gatekeeper habit: the impulse to cover a trending controversy, the assumption that a leak is authentic if most of it checks out, the visual grammar of research, and the presumption that a matching name is the real source. The payoff is laundering — once a legitimate outlet reports the material, the operator can cite the outlet rather than the forum where the story was built. Phillips (2018) showed how coverage of extremist trolling in 2016 supplied the oxygen the trolls wanted, which is why source hackers design bait for newsrooms rather than for readers.

Real-world examples

•The 2017 It's Okay to Be White poster campaign was planned on 4chan explicitly as bait: a slogan innocuous enough that critical coverage would look like an overreaction, which organizers predicted would recruit sympathizers through the resulting news cycle.
•The 2017 MacronLeaks dump mixed genuine emails from Emmanuel Macron's campaign with forged documents, so that any outlet vouching for the archive would vouch for the forgeries too; French media largely held off under the election-eve reporting blackout.
•Pizzagate in 2016 was assembled through evidence collages — annotated screenshots of leaked emails and restaurant Instagram posts — whose investigative appearance gave the claim a credibility its content lacked.
•The same gatekeeper habits are exploited commercially: media manipulator Ryan Holiday described in 2012 how he planted stories on small blogs knowing larger outlets would pick them up without re-verification.

Ethical guidelines

●Engineering a story so that journalists will carry it without checking is a fraud on the audience that trusts those journalists.
●Newsrooms have a duty not to launder: material that originates in an anonymous forum should be reported as such, with its provenance, or not at all.
●Covering a manipulation campaign can be the campaign's goal; the ethical calculation must include whether coverage serves the operator.

How to defend against it

►Ask where the story lived before it reached the outlet you saw it in; trace the earliest appearance with date-filtered search and the Wayback Machine, and treat a forum origin as unverified.
►Recognize the evidence-collage aesthetic — dense annotated screenshots, red circles, arrows — as a persuasion format, not a form of proof, and check each underlying item separately.
►For leaked archives, ask whether anyone independent has authenticated the specific documents being quoted, not merely the archive as a whole.
►When a controversy seems designed to provoke you, apply Phillips's question before amplifying: who benefits from my outrage being visible?
►Newsrooms and communicators can use the SIFT routine (Stop, Investigate the source, Find better coverage, Trace claims to the original) as a pre-publication checklist.

From the Defense Playbook

The SIFT Methodminutes

A four-move routine for anything you meet online: Stop, Investigate the source, Find better coverage, and Trace claims, quotes, and media to their original context; it takes under a minute and replaces the instinct to study the page itself.

The Two Independent Sources Ruleminutes

Do not treat a consequential claim as established until two sources that obtained the information separately both support it, and check that they really are separate, because ten outlets repeating one origin are still one source.

Do Not Repeat the Myth in the Headlineminutes

When you correct a falsehood, put the true statement in the headline, subject line, first sentence, and image, and keep the false claim out of those positions, because most of the audience will see only that part and will carry away whatever it says.

Every playbook entry states how strong its evidence is and when not to use it. Browse the full playbook.

References

Donovan, J., & Friedberg, B. (2019). Source Hacking: Media Manipulation in Practice. Data & Society Research Institute · link
The four-tactic framework and the It's Okay to Be White, MacronLeaks, and evidence-collage cases.
Phillips, W. (2018). The Oxygen of Amplification: Better Practices for Reporting on Extremists, Antagonists, and Manipulators Online. Data & Society Research Institute · link
How news coverage of manipulators in 2016 served the manipulators, and reporting practices that avoid it.
Jeangène Vilmer, J.-B. (2019). The Macron Leaks Operation: A Post-Mortem. Atlantic Council and IRSEM
The mixing of forged and genuine documents in the 2017 dump and the French media response.

Last reviewed 2026-09-07

Suggest a correction

Detect Source Hacking in any text

Paste any message, email, or article into our free Manipulation Detector to see if Source Hacking or other techniques are being used on you.

Try the Detector Free Create Free Account

Dark Patterns in UX: How Apps Manipulate Your Behavior

Subscription traps, misleading interfaces, and engineered addiction. Understanding the persuasion techniques built into the apps you use every day.

7 min read

OSINT for Beginners: Open Source Intelligence Explained

Open Source Intelligence (OSINT) uses publicly available data to gather actionable insights. Here is a beginner-friendly guide to what OSINT is and how it is used.

10 min read