A fraudulent social media campaign targeting the XRP community has surfaced, involving fake announcements that attempt to lure users into handing over their digital assets. Hussein Zangana, director of community at the XRP Ledger Foundation, warned users about the scam in a recent post.
Phishing scam impersonates Ripple
A popular XRP-focused X account, BankXRP, called attention to a deceptive post claiming Ripple would launch “XRP Holder Tiers.” The message, presented through an impersonation of the official Ripple X account, encouraged users to visit a fake website to claim exclusive XRP badges.
Scammers stated that these tiers would unlock special benefits for holders. By driving traffic to the fraudulent link, they aimed to trick users into connecting their wallets or entering sensitive information, such as seed phrases, which would allow attackers to steal their XRP tokens.
BankXRP emphasized that the real Ripple organization did not issue the announcement, and stressed that neither Ripple nor the XRP Ledger prompts holders to claim badges or register for perks. Security advocates advised the community to avoid interacting with suspicious links, and to be wary of any requirement to share wallet credentials.
XRP leaders: Stay vigilant amid sophisticated scams
Hussein Zangana confirmed that the circulating announcement was entirely fraudulent and urged the XRP community to remain alert for similar attempts.
Community leaders pointed to a rising trend of attackers impersonating leading blockchain projects, imitating official messaging, and promoting malicious sites or tokens to deceive users and compromise their funds.
Wietse Wind, a prominent developer in the XRPL ecosystem, separately warned users that there is no “Xaman token,” highlighting an emerging pattern of fake token announcements designed to mislead investors.
Firelight and Flare Network targeted by impersonators
The operators of Firelight, an XRP-based liquid staking protocol running on the Flare Network, issued their own alert. In an official statement, Firelight cautioned users to interact only with its verified X account, Discord server, and website, as several fake accounts had begun impersonating the project. The team urged people to ignore these false profiles and to avoid providing any information or assets to fraudulent sources.
The incident highlights the challenges digital asset holders face in monitoring for scams, especially as cybercriminals persistently develop new methods to exploit unsuspecting users. As the ecosystem evolves, platforms like 1stepSwap are emerging to address transparency and security concerns. Through its innovative structure, 1stepSwap makes it possible to access real-world assets such as major US company shares and commodities directly on the blockchain using a personal wallet, streamlining portfolio diversification and ensuring users always receive the best prices available, while eliminating unnecessary intermediaries.
Law enforcement intervention
Responding to the surge in crypto-related scams, authorities in Seoul arrested three people this week accused of operating a fraudulent XRP staking platform. Investigators reported that the group impersonated Flare Network and FXRP projects, tricking 71 victims into transferring approximately 3.4 million XRP. The suspected scammers ultimately amassed digital assets worth 27.3 billion won, equal to about $19 million, in their wallets.
Officials noted an increase in criminal tactics such as launching fake staking opportunities or issuing counterfeit utility tokens, underscoring the importance of verifying every detail before engaging with any blockchain project.
The series of incidents underscores the persistent risk facing holders of XRP and other digital assets, who are advised to maintain vigilance and ensure they interact solely with trusted sources for all transactions and project updates.
