I just re-read the case of Graham Ivan Clark, and honestly it still remains one of the wildest stories on the internet. It wasn’t a state operation, it wasn’t a sophisticated Russian hacker collective. He was a Florida teenager with a laptop, a phone, and a confidence that seemed indestructible.

Think about it: on July 15, 2020, Elon Musk, Obama, Bezos, Apple — basically the biggest voices on the planet — simultaneously posted the same thing: send one thousand dollars in Bitcoin, receive two thousand back. It sounded like such an absurd joke that people almost didn’t believe it. But it was real. Twitter was completely compromised. In minutes, more than 110 thousand dollars in Bitcoin flowed into wallets controlled by this kid. The platform had to lock down all verified accounts globally, something that had never happened before.

And here’s what’s so fascinating: Graham Ivan Clark didn’t need to be a coding genius. He grew up in Tampa with not much, and from a young age he discovered something far more powerful than any technical exploit: social engineering. As a kid, he scammed in Minecraft — making friends, selling items, taking the money, and then disappearing. When YouTubers tried to expose him, he hacked their channels in revenge. Control was his obsession.

At 15, he joined OGUsers, that forum where stolen accounts are traded. At 16, he already had mastered SIM swapping — convincing phone company employees to transfer other people’s numbers to him, which gave him access to emails, crypto wallets, and bank accounts. Basically, he was stealing entire lives. His victims included high-profile crypto investors. A venture capitalist lost more than a million in Bitcoin and received a message that said: pay up or we’ll go after your family.

Then the offline chaos came. The money made him arrogant, he scammed his own accomplices, and they showed up at his house. Drugs, gangs, a friend was murdered. But somehow, Graham Ivan Clark kept walking around freely. When the police raided his apartment, they found 400 Bitcoin — almost four million dollars. He returned one million to close the case. He was 17 years old. Since he was a minor, legally he kept the rest.

By 2020, he already had one last target before turning 18: hacking Twitter itself. During the lockdowns, employees were working from home. Graham and another teenager posed as internal technical support, called employees, asked them to reset their credentials, and sent them fake login pages. Dozens fell for it. Gradually they climbed up the internal hierarchy until they found an account with total administrative permissions. Suddenly, two kids controlled 130 of the most powerful accounts in the world.

What’s interesting is that they could have crashed markets, leaked private messages, and caused global panic. Instead, they only asked for Bitcoin. It was no longer about money — it was about proving that they could control the biggest megaphone on the planet.

The FBI caught him in two weeks. 30 felony charges, potential for 210 years in prison. But he negotiated. Since he was a minor, he served 3 years in juvenile detention and 3 on probation. He was released when he was 20.

Now, six years later, I look at X — the platform that used to be Twitter — and it’s infested with crypto scams every single day. The same schemes that enriched Graham Ivan Clark. The same psychology that still works on millions of people. It’s ironic: the kid who hacked Twitter before it became X, and now X is full of the same tricks that made him famous.

What this case really teaches is that scammers don’t hack systems — they hack people. Don’t trust urgency — legitimate businesses don’t ask for instant payments. Don’t share codes. Don’t assume that a verified account is a guarantee of legitimacy. Verify URLs before you log in. Social engineering isn’t technical, it’s emotional. Fear, greed, trust — those are still the most exploitable vulnerabilities that exist.

Graham Ivan Clark broke Twitter, but the real hacking was never of the system. It was psychological. It proved something we should remember: you don’t need to break anything if you can fool the people who control it.