Every month, the Rolli IQ research team reviews the platform's investigation data, signal patterns, and detection outcomes to identify the trends that matter most for communications, security, and research professionals. The March 2026 brief covers a period of elevated coordinated narrative activity — particularly in the financial services and regulatory sectors — and documents three platform-level trends that we expect to affect monitoring and detection work through the spring. This brief is published for our community of practitioners. The underlying data is drawn from Rolli IQ's monitoring infrastructure across 8 platforms.
Platform trends
X (formerly Twitter) continued to show the highest volume of coordinated financial narrative activity in March, consistent with its documented role as the primary amplification venue for pre-earnings campaigns. Notable this month: the platform's community notes feature intervened in three documented coordination events, adding context labels to narratives before Rolli IQ's authenticity analysis was complete — the first time we have observed community notes functioning as an early-detection mechanism ahead of behavioral analysis in our monitoring dataset.
Reddit moderation response times improved materially in March across the finance-related communities that have historically been targeted by CIB campaigns. The r/investing and r/stocks communities both showed evidence of proactive moderation — removing coordinated content before it achieved significant upvote momentum — in two of the five events Rolli IQ tracked targeting those communities. Telegram remains the primary seeding venue for financial sector campaigns, with an estimated 80% of the coordinated campaigns we tracked in March showing Telegram activation preceding X deployment by 12–36 hours.
Emerging narratives to watch
Three narrative themes are showing early-stage velocity signals that the Rolli IQ research team is monitoring for potential coordinated amplification in the coming weeks. The first is a cluster of content around central bank digital currency implementation timelines — a topic that has historically attracted both organic policy discussion and coordinated amplification from actors with ideological opposition to CBDC adoption. The current velocity pattern is within organic range, but the account activation profile around the narrative shows characteristics consistent with pre-positioning. The second theme involves a regulatory approval process in the healthcare sector, where an emerging narrative about safety data completeness is showing the kind of platform-simultaneous activation that often precedes a coordinated campaign. No confirmation yet — we will update if the pattern develops. The third is an emerging international trade dispute narrative that is attracting amplification from account clusters previously documented in foreign influence operation takedowns. The narrative itself reflects a real policy dispute; the amplification layer is what warrants monitoring.
For communications and security teams whose organizations intersect with any of these three spaces: the appropriate posture at this stage is monitoring and preparation, not public response. None of these narratives has crossed the authenticity threshold that would warrant treating them as confirmed coordinated campaigns. What the velocity data suggests is that conditions are favorable for coordinated amplification if these narratives develop further — and pre-positioned monitoring, with response playbooks ready, is the most effective preparation.
Conclusion
The March 2026 data reinforces a pattern the Rolli IQ research team has been tracking since mid-2024: the cadence of coordinated narrative activity is no longer episodic. It is continuous — a background level of influence operation activity that organizations operating in contested information spaces need to monitor persistently, not reactively. The briefings, the detection tools, and the response infrastructure that served organizations well in a world of periodic crises are not calibrated for an environment where low-level coordination is the baseline condition. Building persistent monitoring capacity is the operational priority that March's data makes clearest. We will continue publishing these monthly briefs as part of our commitment to keeping the practitioner community informed about what the platform is seeing. If you have questions about specific narratives or trends in your sector, reach out at intelligence@rolli.ai.
Related reading
About the Author
Co-founder & CEO, Rolli
Co-founder of Rolli. Former CNN en Español Washington DC Bureau Chief and Senior Producer. Building the narrative intelligence layer for organizations that can't afford to be wrong.
Explore Rolli's narrative intelligence platform