Don’t use X block checker. They can get your account hacked

More websites now claim that they can show “who has blocked you” or “how many people have blocked you” on X.

When you log in to your X account on these websites, attackers may hijack your account. Do not use block checker sites.

Don’t log in to X block checker sites

You may find websites that claim to offer X block checker tools through posts on X or Google Search.

When you open one of these websites, you may see a login screen. Do not enter your email address, password, or other information.

Watch out for websites that make claims like these:

• They claim they can show which users have blocked you.
• When you open the website, it shows a login screen that asks for your X account email address, password, or other information.
• They claim they can show how many people have blocked you or a list of accounts that have blocked you for free.
• They say you may receive a login notification from X, but that there is no problem.

Many login screens that appear on these websites are fake. If you enter your email address, password, or other information, attackers will use it to hijack your account.

Even when a mutual follower shares a block checker tool, you need to stay careful. An attacker may have hijacked that person’s account and posted the recommendation from it.

In a fake block checker tool I investigated in the past, the site sent the entered information to the attacker’s Discord.

I published a detailed analysis in this article.

Xのブロック確認ツールでアカウント乗っ取り？生成AI使用のフィッシングが展開中

「ブロックされているかを確認！ | X (旧Twitter) ブロック確認ツール」——。このサイトを開いたところ、Xのアカウントにログインできなくなったというポストが拡散されています。

October 24, 2025

Why tools that check who blocked you on X are dangerous

Some websites once let users check information such as how many people had blocked them on X.

X then started charging for the API that outside websites need to connect with X. As a result, most free block checker sites that people used at scale shut down.

Most block checker sites that still exist now fall into one of two groups: paid tools for companies and influencers, or dangerous websites that claim to be free while stealing login information and hijacking accounts.

When X started charging for API access, free block checker tools that could not make money could no longer continue operating.

To keep running, operators now have to use unofficial methods such as asking users to enter login information, or they have to charge users.

A legitimate developer would not ask users for login information through an unofficial method that creates security risks.

As a result, most block checker tools that remain today are either paid tools or tools built to hijack accounts.

Websites built to hijack accounts ask users to enter their X login information. After users enter it, the sites may show the number of people who have blocked them.

But the operators have little reason to count the number of people who blocked you with care, so they likely show a random number.

In any case, stay cautious around websites that claim to offer X block checker tools.

What to do if you opened a block checker site

If you only opened a block checker site, you have little risk of getting your account hijacked.

If you did not enter anything, close the page.

If you entered information on the login screen that appeared after opening a block checker site, take action right away, such as changing your password.

• Change the password for the account whose password you entered.
• Check for suspicious login history.
• Enable two-factor authentication if you have not set it up yet.

On X, you can change your password from [Settings and privacy] > [Account] > [Change your password].

You can check your login history from [Settings and privacy] > [Security and account access] > [Apps and sessions] > [Account access history].

You should also enable two-factor authentication if you have not set it up yet. Two-factor authentication requires you to enter extra information in addition to your password before you can log in, so it can protect your account even if your password leaks.

You need a dedicated app, but you can enable two-factor authentication from [Settings and privacy] > [Security and account access] > [Security] > [Two-factor authentication].

If you can no longer log in, go to the X Help Center and start the account recovery process.

If you use the same email address and password for accounts outside X, you should change those passwords as a precaution.

Be careful with account connections too

Even if a website does not ask for your password or other information, you need to be careful with websites that ask you to connect your X account.

If you authorize account access for a malicious website, it may post without your permission, follow unfamiliar accounts, or send DMs.

They are not block checker tools, but sites often seen on X, such as “My Twitter Interaction Circle,” “My Twitter Family,” and “Twitter Family Tree,” are spam sites that may fund criminal organizations. If you connect your account, the operators can make you follow unfamiliar accounts without your permission.

「私のTwitter家族」「私のTwitterやりとりークル」は危険なスパム　犯罪組織が関わっている可能性も

Twitter（X）で「私のTwitter家族」「私のTwitterやりとりークル」などを見かけたことはありませんか？実は、これは悪質なスパムです。また、犯罪組織がかかわっている可能性もあります。この記事では、「私のTwitter家族」「私のTwitterやりとりークル」などの問題点や危険性について解説します。

February 5, 2024

Conclusion

More websites now claim that they can show “who has blocked you” or “how many people have blocked you” on X.

When you log in to your X account on these websites, attackers may hijack your account.

Even when a site does not ask you to log in, use great caution with account connections.