X · shilling

Vetting an X Distribution Vendor: the 10-Question Call

Across 12 vendor due-diligence calls Swarm ran in Q1 2026, the average vendor answered 4.3 of 10 questions credibly on the first call. The price band had near-zero correlation with the score. The 10 questions that sort X distribution vendors into operator networks, KOL-only middlemen, and bot-farm resellers.

Yana Safiullina
Founder & CPO, NotPeople · June 1, 2026 · 10 min read
Vetting an X Distribution Vendor: the 10-Question Call

Across twelve vendor due-diligence calls Swarm ran in Q1 2026 with crypto and fintech clients evaluating X distribution retainers, the average number of the ten questions the vendor could answer credibly without 24-hour follow-up was 4.3 out of 10. The top-quartile vendors averaged seven or above. The bottom-quartile averaged two. The retainer sizes in the same sample ranged from $8K to $60K per month. The price band had almost no correlation with the credibility score.

That gap, between vendor pricing and vendor competence, is what the 10-question call is designed to surface.

Quick answer

The 10 questions sort X distribution vendors into three categories: operator networks (run real, identified accounts in your verticals), KOL-only middlemen (broker named influencers but do not operate the accounts), and bot-farm resellers (sell reach that does not measurably exist). Ask the questions in order, score one point per credible answer without follow-up. A vendor scoring 8+ moves to fit and pricing. A vendor scoring under 6 is dropped before any first payment. The price band each model sits in is broken out in what X distribution costs in 2026; the report format each vendor produces is covered in how to read an X distribution report.

The three vendor categories you are choosing between

Most "X distribution agencies" in 2026 describe themselves as one of three things. The 10 questions discriminate between them.

Operator network. The vendor runs a network of identified human-operated accounts in specific verticals (crypto, fintech, SaaS-eval, iGaming). The accounts post on a brief, reply to other accounts, build long posting histories, and are introducible to the client if the brand-safety case requires it. The unit economics are headcount-heavy: ten to forty trained operators per network.

KOL-only middleman. The vendor maintains a roster of named X influencers and brokers individual deals between the brand and the influencer. The vendor does not operate the accounts. The unit economics are deal-flow-heavy: a small ops team manages a relationship book.

Bot-farm reseller. The vendor sells reach that does not measurably convert: bulk impressions from automated or near-automated accounts, often packaged as "180 posts/month across 60 accounts" pitches that under-cut the other two categories. Some accounts are real but inactive; some are coordinated puppet networks; some are pure bot pools. The unit economics work because the underlying labour cost is near-zero.

The pricing bands each model sits in, the per-post versus retainer mechanics, and the launch-type to model fit are in what X distribution costs in 2026. This piece focuses on a separate question: which of these three categories is the vendor in front of you actually in. Once you know the category, the pricing and contract conversation is operationally clear.

Questions 1-3: account identity and provenance

These three separate operator networks from the other two categories. They are the cheapest to ask and the fastest to answer credibly, and a vendor that hedges on any of them is rarely operating the accounts.

Q1. Can you share a sample of three to five accounts you would post from on a brief like ours, with at least 90 days of posting history each?

Credible answer: yes, here are the handles, you can inspect them now. Operator networks send handles inside the call. Bot-farm resellers offer "samples" they cannot share publicly, or send three accounts where the prior posts are unrelated retweets or text fragments that read like a templated content brief.

Q2. How long have those accounts been active, and what verticals have they posted in?

Credible answer: account ages in the 18-month-plus range, posting history concentrated in two or three verticals that match the operator network's stated focus. The audit pattern: pull the accounts you were sent, look at the earliest posts, look at the topical density. A network that pitches itself as "crypto KOLs" but whose sample accounts have a six-week posting history mostly on AI-generated motivational quotes is not running a credible network.

Q3. Who, on your team, operates those accounts day-to-day, and can we get a short call with them for one of the briefs?

Credible answer: a named operations lead, optionally an introduction to one of the operators after NDA. One named ops lead plus an operator after NDA is enough; the full roster is overkill. KOL-only middlemen redirect to "we don't operate the accounts, we broker the deals", which is a category-correct answer (not a failure) but it tells you what you are buying. Bot-farm resellers hedge.

Questions 4-6: performance, attribution, and the report

These three separate vendors who measure work from vendors who measure impressions. The distinction is whether the vendor can show you what their work caused, not just what their work touched.

Q4. What is the smallest unit of work you report on: per post, per campaign, or per month?

Credible answer: per post (operator networks) or per named-influencer deal (KOL middlemen), with rolled-up campaign and monthly summaries on top. A vendor that reports only at the monthly-aggregate level is hiding the unit data that lets you trace which post or thread actually produced a result.

Q5. Which attribution signals do you instrument, and which do you leave to the client?

Credible answer: at least three of the following signals. UTM-tagged outbound links from the posts. On-chain wallet sampling (for crypto verticals). Referral-code redemption. Custom landing-page pixel events. Named-mention search audits in Perplexity or ChatGPT. A vendor that only reports impressions and follower-count deltas is selling reach, not distribution.

Q6. Can we see a redacted sample of the report you would send us at the end of month one?

Credible answer: yes, here is the template from a current client (redacted). A vendor that cannot produce a sample report inside 24 hours is not producing the report at any current client. The format matters less than the existence: a one-page PDF, a Notion dashboard, a shared sheet. What matters is that it exists before they have a contract with you. The deeper guide on what a credible distribution report looks like is in how to read an X distribution report.

Questions 7-8: pricing structure and what each model rewards

These two surface whether the vendor's pricing model is aligned with your goal, or with theirs. The category map across all three vendor types is in what X distribution costs in 2026; these two questions test which model the vendor in front of you is actually running.

Q7. Is the contract priced per post, per impression, per attributed result, or as a fixed retainer? If hybrid, which component is the largest?

Credible answer: a clear statement of model, with the dominant component named. Operator networks usually anchor on a fixed retainer plus a small per-post or per-thread component. KOL-only middlemen run per-post almost exclusively. Bot-farm resellers tend to anchor on per-impression or per-account, because per-impression is the cheapest metric to inflate.

Q8. Whose volume floor is in the contract, yours or ours? What happens to the floor if the network has a slow month?

Credible answer: the floor sits on the vendor side (they commit to a minimum of X posts/threads per month) and slides if the brand brief or vertical pauses. A vendor that puts the volume floor on the client side ("you must commit to N posts per month") is reselling capacity they have not yet built. A vendor whose floor is the volume of their own roster, and who lets the brand pause without penalty, is operating the network.

Questions 9-10: compliance, brand-safety, and the off-ramp

The last two cover what happens when a campaign goes wrong, and what happens when it ends.

Q9. What is your policy when an account you post from gets a moderation strike, a temporary suspension, or a brand-safety flag?

Credible answer: a policy with three components. Immediate notification to the brand. A paused-posts queue while the account is under review. A documented threshold (typically two strikes in 90 days) at which the account is rotated out of the brand's brief. A vendor without that policy will keep posting from a flagged account and bury the strike inside an aggregate report. The same compliance discipline shows up in the upstream signal pattern covered in how crypto Twitter manufactures a trend.

Q10. If we end the engagement after 90 days, what continues, what stops, and what data do we keep?

Credible answer: posts stop within the agreed notice window (typically two weeks), the brand keeps the report archive and any attribution data already collected, the accounts continue operating but not on the brand's brief. A vendor that bundles the report data and account access into the active contract is creating switching cost. The deliverable shape that should land in the report archive is documented in how to read an X distribution report.

The 10-question scorecard

#Question themeOperator networkKOL middlemanBot-farm reseller
1Sample accounts (3-5 with 90d history)shares handles in callshares named-influencer rosterhedges, "samples on request"
2Account age + vertical density18m+, concentrated verticalsnamed accounts vary by dealrecent registrations, scattered
3Operator team introducibleyes, ops lead + operator"we broker, do not operate"hedges
4Smallest reporting unitper postper influencer dealper month aggregate
5Attribution signals beyond impressions3+ namedper influencer's own metricsimpressions + follower delta only
6Sample redacted report inside 24hyesyes (per-deal)no
7Pricing model namedretainer + per-postper-post + marginper-impression / per-account
8Volume floor on vendor sideyesper-deal, no monthly floorclient-side floor
9Strike / suspension policydocumented + rotatedper influencer's own policynone, posts continue
10Off-ramp + data retainedclean, 2-week noticeclean per active dealdata bundled in contract

A vendor answering 8-10 of these credibly is operationally a credible operator network or a clean KOL middleman. A vendor answering 6-7 is a candidate for a paid 30-day micro-pilot before the retainer. A vendor answering fewer than six is not a vendor; the budget would go further as direct deals with named influencers.

The bot-detection layer that catches the third category at the audit-data stage is in the bot detection checklist, and the manufactured-buzz tells that show up in the resulting reports are covered in how crypto Twitter manufactures a trend.

What an honest answer sounds like

The 10 questions force the vendor to describe the work in operationally specific terms. Lies are the byproduct; the primary output is whether the vendor can describe what they do without 24-hour follow-up.

An honest operator network on Q1 says something close to: "Our crypto desk runs eighteen identified accounts across three verticals; here are five handles from the desk that posted in the last 24 hours. The oldest account was registered in October 2023; the median account age across the desk is 26 months. Two of the five sample accounts are tagged for fintech briefs, three for crypto-only briefs. If you brief us on iGaming next quarter, those accounts will not be in the brief; we would stand up a separate desk."

An honest KOL-only middleman on Q1 says: "We don't run accounts, we broker deals. Here are eight named accounts on our current crypto roster, with prior post links you can verify on X. We don't speak to the accounts' personal posting history off-brief, that is the influencer's own discretion. Our work is the deal layer and the brief layer, not the operation layer."

A vendor that cannot give either of those answers, in those terms, is not yet a vendor.

The example we audited in May 2026, an anonymised mid-stage crypto brand evaluating a $40K/month retainer pitched as "180 posts/month across 60 verified accounts", failed Q1 and Q5. The vendor offered three handles on request; two had been registered in the prior 90 days; one was a real, named KOL who, when contacted directly, had not heard of the agency. The vendor's attribution proposal was "impressions only, weekly digest". The deal did not close. The brand re-allocated the budget to a smaller operator network and a separate KOL-only beat partner, and the 10-question scorecard for both came in at 8/10 and 9/10. That allocation has held for the four months since.

The operator-network and KOL-only service maps the brand chose between are at /x/shilling/ and /x/kol/.

Source transparency

The 4.3-of-10 average vendor credibility score is from twelve due-diligence calls Swarm ran in Q1 2026 with crypto and fintech clients evaluating X retainers, ranging from $8K to $60K per month. The vendor categories, the pricing bands, and the strike-policy patterns reference the audit register on the same methodology described in the AI silent committee piece. The anonymised $40K/month example is one entry from the same register; the brand is intentionally not named.

Frequently asked

What questions should I ask an X distribution vendor? The ten in this piece: account identity (Q1-Q3), performance and attribution (Q4-Q6), pricing structure (Q7-Q8), compliance and off-ramp (Q9-Q10). Ask in order. Score one point per credible answer without 24-hour follow-up. Under six points means the vendor is not yet a vendor.

How do you tell a real X KOL from a bot network? Account age, posting density in a named vertical, identifiable operator (for networks) or identifiable influencer (for KOL deals), and the willingness to share five sample handles inside the call. Bot networks hedge on all four signals.

What does a credible X distribution report look like? Per-post unit data, at least three attribution signals beyond impressions, and a redacted sample available before the contract is signed. The full report rubric is in how to read an X distribution report.

Should I pay an X vendor per post or per impression? Per post for operator networks, per influencer deal for KOL middlemen, almost never per impression. Per-impression is the pricing model bot-farm resellers prefer because impressions are the cheapest metric to inflate.

What is a fair retainer for X distribution work? Operator networks in the crypto / fintech / iGaming verticals tend to sit in the $15K-$60K/month band depending on desk size, vertical density, and brand-safety scope. KOL-only middlemen typically run per-post with a 10-30 per cent agency margin on top of named-influencer rates. Below $10K/month for either model usually means the vendor is reselling capacity rather than operating it. Full breakdown in what X distribution costs in 2026.

How do X vendors verify the accounts they post from? Operator networks verify by running the accounts themselves: every operator is a known team member with a posting brief and a moderation queue. KOL-only middlemen verify by holding direct relationships with the named influencers and posting under the influencer's own credentials. Bot-farm resellers do not verify; the absence of a verification answer is the answer.

What happens if an X post backfires on the brand? A credible vendor pauses the post, notifies the brand inside the 24-hour window, and works the brand-safety queue toward removal or correction. The strike threshold (typically two strikes in 90 days) rotates the originating account out of the brand's brief. A vendor without that policy will keep posting from the flagged account and bury the strike inside the next monthly report.


If you are mid-way through a vendor sales cycle and want a second pair of eyes on the answers you are getting, we run the 10-question call as part of a 20-minute X narrative audit. Map Your X Narrative Surface: t.me/ewilien.

Keep reading

More from X · shilling