Fake Accounts and Hijacked Profiles Target XRP Holders With Scams

XRP holders are facing a phishing campaign that uses accounts posing as verified profiles and compromised X accounts to spread fake airdrops and wallet-draining links.

XRP analyst Zach Rector said the schemes have cost the community millions of XRP. He urged holders to be wary of unsolicited outreach on social media and email.

Xaman founder Wietse Wind said scammers set up more than 20 fake X accounts and 10 malicious domains each day to impersonate Xaman. The campaigns promote a nonexistent desktop app and fraudulent XRP airdrops. Some cloned sites mimic xaman.app, displaying fake governance badges and wallet connection buttons intended to drain connected wallets.

Wind also said Xaman has no token after a compromised verified account promoted a fake XMN token.

A fake X account posing as Ripple promoted an “XRP Holder Tiers” offer that directed users to a site to claim badges. Ripple did not issue the offer, and neither Ripple nor the XRP Ledger asks holders to claim badges or register for perks. Instagram and Telegram accounts have also impersonated Ripple CEO Brad Garlinghouse and Chief Technology Officer David Schwartz.

Rector has also made a free Crypto Basics course available through Patreon, with its first lesson focused on crypto asset security.