When I laid out the seven variables in June, the sentence I used for this one was a contrast: two thousand sincere people independently outraged by the same headline is a public; two thousand accounts pushing the same headline on a shared schedule is an operation. The problem with that sentence, as every platform integrity team knows, is that the two look identical from the outside. Coordination is the variable you can almost never observe directly. This week is about the rare case where someone got inside and came back with the receipts.
In May 2021, a five-judge bench of Kenya’s High Court struck down the Building Bridges Initiative, a constitutional amendment project backed by President Uhuru Kenyatta and Raila Odinga. It was, by most readings, the Kenyan judiciary’s most consequential assertion of independence in a decade. Within days, hashtags attacking the judges, and the lawyers and activists who had brought the case, were climbing Kenyan Twitter’s trending lists. To a casual scroller it looked like a country arguing with its court.
It was not. Two researchers working as Mozilla fellows, Odanga Madung and Brian Obilo, spent the following months documenting what was underneath: at least eleven distinct campaigns, more than twenty-three thousand tweets, roughly thirty-seven hundred participating accounts, aimed at judges, journalists, and civil-society figures. And because they interviewed the people who ran the accounts, we know the mechanics, not as inference from network graphs but as testimony.
The mechanics are the point. Participants were recruited through WhatsApp groups. Each morning a campaign ran, they received a brief: the hashtag of the day, pre-written tweets to copy or lightly vary, and instructions on when to post, because the trending algorithm rewards a synchronized burst over a slow accumulation. For a day’s work they were paid roughly ten to fifteen dollars, through M-Pesa, the mobile wallet most Kenyans carry anyway.
The unit of coordination was not the troll farm. It was the gig.
The prize in every case was the same piece of real estate: Twitter’s trending column. Trending is formatted as a measurement. It reads as what Kenya is talking about. The campaigns treated it as a purchase. Buy enough synchronized posting to cross the algorithm’s threshold, and the platform itself converts your spend into the appearance of spontaneous public opinion, then displays it to everyone, including the judges, the newsrooms, and the diplomats reading the room. That laundering step is what the C variable actually measures: how much of an apparent public is, on inspection, a payroll.
If the campaigns had ended there, Kenya would be one case study. What makes it a playbook is what happened next. In October 2021 the Pandora Papers named the Kenyatta family’s offshore holdings. Within days, Madung and Obilo found, the same infrastructure was running in the opposite direction: paid campaigns to discredit the reporting and defend the president, again reaching the trending lists. The first wave attacked the judiciary on behalf of power; the second defended power against journalism. The infrastructure did not care. It was a market, and markets take clients, not sides.
Twitter, to its credit, acted once the receipts were public: an internal investigation and more than one hundred account suspensions for platform manipulation. The market’s answer was to move. Ahead of the August 2022 general election, Madung documented the same commercial logic operating on TikTok: more than one hundred thirty videos across thirty-three accounts, over four million views, much of it content designed to inflame the ethnic fault lines of the 2007–2008 post-election violence. Enforcement on one platform does not close the market. It relocates it.
The reason this case anchors the C variable, rather than a Russian or Chinese state operation, is precisely that no state was required. The popular image of coordination is an intelligence service with a building full of operators. The Kenya files show the retail version: a gig economy of influence, priced at a day laborer’s wage, available to any political actor with a modest budget and a WhatsApp contact. Wherever that market exists, and it now exists almost everywhere, the C term in the equation is available off the shelf.
The lesson for the rubric is, as usual, narrow. Coordination leaves fingerprints that sincerity does not: a synchronized onset rather than an organic ramp; near-identical phrasing across accounts with no social connection; a cadence that starts and stops like a shift; and somewhere, if anyone with access looks, a payment trail. When a wave of opinion arrives, the question is not whether the sentiment is real. Some of it always is. The question is whether the schedule is real. Publics do not keep office hours.
Next week: A is for Authority Mimicry, and the deepfake that wasn’t.
— J.W.B.
Note 10 of 24