Looks like phishing on "x" platform is an inside job.

They block every method to officially report it.

"The absence of a three-dot menu on the message suggests X’s interface may hide reporting options for group messages, especially in scam groups that manipulate settings to evade moderation (e.g., disabling report functions or burying messages)."

Best to ignore any Direct messages, I suppose.