Skip to main content

How I Investigated a Bot Network Hiding in Plain Sight on YouTube

 A real-world case of Positive Sentiment Masking and what it reveals about YouTube's comment moderation gap

One afternoon, while scrolling through the comment section of a YouTube manifestation video, I noticed something odd.

Photo by NordWood Themes on Unsplash

The top comments all looked genuine personal stories of transformation, gratitude, life changes. But something felt off. Each one casually mentioned a different book. Different titles, different authors, different wordings. And yet the structure was identical every single time:

"I was struggling → my friend/I discovered this book → my life completely changed → you need to read this."

I kept scrolling. More comments. More books. More transformations. All sitting comfortably in the Top Comments section with thousands of likes.

This was not organic. This was a bot network and it had found a way to hide in plain sight.

🔍 What I Found — The Evidence

Across a single manifestation video, I documented five different bot accounts promoting five different books using the exact same template:

@RajeshSharma-vq8fm (2.3K likes): "Whoever is reading this and wanting a change in their life, just go read forbidden manifestation by zara blackthorn"

@zinkyoe (1.5K likes): "The number of people who've never heard of the book by Lana Cressel is honestly shocking. It's the best piece of material on manifestation ever."

@BayuWahyudin-o9q (320 likes): "3 months ago I was broke, anxious, and completely lost. My friend sent me Manifest and Receive by Eva Hartley and I read it in one sitting. My whole energy shifted. people don't sleep on this."

@deborahcarla3653 (286 likes): "My life has been amazing lately... I achieved this with a manifestation technique I learned in a video named 'The Technique That Opens the Sky'"

@user-ou2cg1lx1d (895 likes): "It's kinda crazy how nobody's talking about the forbidden ebook called hidden laws of the game on borlest."

Five accounts. Five different books. Five different wordings. One video. One coordinated network.

And YouTube's automated system had flagged none of them.

🧠 How They're Doing It — 3 Bypass Techniques

After documenting the evidence, I identified three specific techniques this bot network was using to evade YouTube's spam detection. I named them based on what they actually do.

1. Positive Sentiment Masking

YouTube's spam filters are trained to catch toxic, aggressive, or overtly commercial language. These bots deliberately do the opposite — they use exclusively warm, emotional, high-vibrational language. Words like "life-changing," "grateful," "my whole energy shifted," and "blessings."

A comment with 100% positive sentiment does not trigger a commercial spam classifier. It reads — to any automated system — exactly like a genuine personal testimonial. The bot has reverse-engineered what authentic community engagement looks like and replicated it to deceive both the platform and the viewer.

2. Coordinated Engagement Hijacking (Like-Farming)

These comments are not just posted — they are amplified. Through coordinated self-liking or by genuinely deceiving real users into upvoting them, these comments accumulate thousands of likes rapidly. A comment with 2.3K likes sits at the very top of the comment section.

YouTube's algorithm surfaces the most-liked comments first. This means the bot comment is not just present — it is algorithmically promoted to the most visible position on the page, creating false social authority. When viewers see a top comment with thousands of likes recommending a book, they assume it represents the genuine view of the community.

3. Title-Baiting — The Invisible Link

Here is the most clever part. These comments contain no links at all. Instead they refer users to a book title or video name and let the user search for it independently — "just go read forbidden manifestation by zara blackthorn" or "search for hidden laws of the game on borlest."

By doing this, the bot bypasses YouTube's URL blocklist entirely. There is nothing to block because there is no link. The user is redirected into an unmoderated search environment where YouTube has no visibility. A book title used as a verbal funnel is functionally identical to a malicious link — but completely invisible to any detection system scanning for URLs.

If you’re interested in deeper analyses of bot behavior and platform manipulation patterns, feel free to explore my portfolio.

I’m always open to conversations around research, security, and opportunities in this space—connect with me via email or LinkedIn.

Comments

Post a Comment

Popular posts from this blog

Scope and Types of Companies with Trust & Safety Teams

 If you’re planning to begin or advance your career in Trust & Safety (T&S) , it’s helpful to know where these roles exist. Today, many companies across different industries have dedicated teams focused on user protection, content moderation, and platform integrity . Photo by Microsoft 365 on Unsplash Let’s look at the major sectors that rely on Trust & Safety professionals: 1. Social Media Platforms Social media companies like Meta (Facebook, Instagram) , X (Twitter) , TikTok , YouTube , and Reddit depend heavily on T&S teams. These professionals work to moderate user-generated content , prevent the spread of hate speech or misinformation, and maintain positive, safe online communities. 2. Online Marketplaces & E-Commerce Platforms such as Amazon , eBay , and Etsy use Trust & Safety teams to detect fraud, verify sellers, ensure product authenticity , and protect buyers from scams or harmful listings. Their focus is to keep transactions transparent and tr...
Post a Comment
Read more

Exploring Careers in Trust & Safety: The Guardians of the Digital World

 In a world where billions of people connect online every day, keeping digital spaces safe has never been more important. Behind every social media platform, video site, and search engine, there’s a dedicated team working tirelessly to protect users the Trust & Safety (T&S) professionals. But what exactly does this field involve? And what roles exist within it? Let’s dive in. Photo by Hunters Race on Unsplash What Is Trust & Safety? Trust & Safety teams ensure that users can engage online without exposure to harmful, misleading, or illegal content. Their mission is to build a safe, respectful, and authentic online environment while balancing free expression and platform integrity. This domain spans several areas, from content moderation and policy development to risk investigation and data analysis. Key Roles in Trust & Safety 🛡️ 1. Content Moderator / Review Specialist Content Moderators are the frontline defenders. They review user-generated content...
Post a Comment
Read more

How to Build a Career in Trust & Safety: Skills, Resources, and Preparation Part -1

There are  currently no formal degrees in  Trust and Safety . But there are  plenty of resources  to help you get started. Photo by Samson on Unsplash While hands-on experience is the most common way to learn, there are many ways to build skills outside of work, too. Whether you’re fresh out of college, transitioning from a related field, or an experienced professional wanting to stay current, here’s a structured way to build your Trust & Safety foundation. We’ll cover four main areas: Industry Guides and Resources Publicly Shared Work by T&S Teams Building Core Skills Topical & Ongoing Learning 1. Industry Guides and Curated Resources Start by exploring materials created specifically for Trust & Safety professionals . New ones are added all the time, so search for terms like “Trust & Safety resources” or “Risk management” on YouTube and LinkedIn to stay current. Some great starting points include: TSPA’s Trust & Safet...
Post a Comment
Read more