Fake Xaman NFT Scam Drains XRP Wallets: How It Works and How to Stay Safe
Scammers are sending unsolicited fraudulent NFTs—branded as fake "Xaman passes," "beta pass offers," or "Safe XRPL verify message"—to XRP wallets. The broader scam wave includes deepfake AI videos, mass bot campaigns impersonating the XRPL Foundation, fake Xaman desktop apps, and over 20 fake social media profiles c...
Published byEdited with DeepSeek-V4-FlashImages generated with GPT Image 1.5
Scammers are sending unsolicited fraudulent NFTs—branded as fake "Xaman passes," "beta pass offers," or "Safe XRPL verify message"—to XRP wallets.
The broader scam wave includes deepfake AI videos, mass bot campaigns impersonating the XRPL Foundation, fake Xaman desktop apps, and over 20 fake social media profiles created daily.
To protect your wallet, never sign or accept unsolicited NFT offers, ignore all social media airdrop/giveaway promotions, avoid connecting your wallet to unfamiliar websites, never share your seed phrase, and use wall...
Search & fact-check with cited sources for What is the phishing campaign targeting XRP holders through fraudulent NFTs on the XRP Ledger, hoAn AI-generated editorial illustration representing the phishing campaign against XRP holders through fraudulent NFTs.
AI Prompt
Create a landscape editorial hero image for this Studio Global article: Search & fact-check with cited sources for What is the phishing campaign targeting XRP holders through fraudulent NFTs on the XRP Ledger, ho. Article summary: ## Phishing Campaign Targeting XRP Holders via Fraudulent NFTs on the XRP Ledger. Topic tags: general, general web, user generated. Style: premium digital editorial illustration, source-backed research mood, clean composition, high detail, modern web publication hero. Use reference image context only for broad subject, composition, and topical grounding; do not copy the exact image. Avoid: logos, brand marks, copyrighted characters, real person likenesses, fake screenshots, UI text, readable text, watermarks, charts with fake numbers, clickbait thumbnails, icons, and tiny thumbnail layouts. Make it useful as an illustrative visual, not as factual evidence.
openai.com
A coordinated phishing campaign is actively targeting XRP holders by sending unsolicited fraudulent NFTs to XRP Ledger (XRPL) wallets. Scammers embed hidden malicious "Buy Offers" within these NFTs, and when users sign or accept the offer, their XRP and other assets are instantly drained from the wallet . The scams rely entirely on social engineering and human error rather than exploiting protocol flaws .
Studio Global AI
Continue your research
This page includes a source-backed answer you can continue inside Studio Global.
What is the short answer to "Fake Xaman NFT Scam Drains XRP Wallets: How It Works and How to Stay Safe"?
Scammers are sending unsolicited fraudulent NFTs—branded as fake "Xaman passes," "beta pass offers," or "Safe XRPL verify message"—to XRP wallets.
What are the key points to validate first?
Scammers are sending unsolicited fraudulent NFTs—branded as fake "Xaman passes," "beta pass offers," or "Safe XRPL verify message"—to XRP wallets. The broader scam wave includes deepfake AI videos, mass bot campaigns impersonating the XRPL Foundation, fake Xaman desktop apps, and over 20 fake social media profiles created daily.
What should I do next in practice?
To protect your wallet, never sign or accept unsolicited NFT offers, ignore all social media airdrop/giveaway promotions, avoid connecting your wallet to unfamiliar websites, never share your seed phrase, and use wall...
Fake Xaman NFT Scam Drains XRP Wallets: How It Works and How to Stay Safe
Scammers are sending unsolicited fraudulent NFTs—branded as fake "Xaman passes," "beta pass offers," or "Safe XRPL verify message"—to XRP wallets. The broader scam wave includes deepfake AI videos, mass bot campaigns impersonating the XRPL Foundation, fake Xaman desktop apps, and over 20 fake social media profiles c...
Published byEdited with DeepSeek-V4-FlashImages generated with GPT Image 1.5
Scammers are sending unsolicited fraudulent NFTs—branded as fake "Xaman passes," "beta pass offers," or "Safe XRPL verify message"—to XRP wallets.
The broader scam wave includes deepfake AI videos, mass bot campaigns impersonating the XRPL Foundation, fake Xaman desktop apps, and over 20 fake social media profiles created daily.
To protect your wallet, never sign or accept unsolicited NFT offers, ignore all social media airdrop/giveaway promotions, avoid connecting your wallet to unfamiliar websites, never share your seed phrase, and use wall...
Search & fact-check with cited sources for What is the phishing campaign targeting XRP holders through fraudulent NFTs on the XRP Ledger, hoAn AI-generated editorial illustration representing the phishing campaign against XRP holders through fraudulent NFTs.
AI Prompt
Create a landscape editorial hero image for this Studio Global article: Search & fact-check with cited sources for What is the phishing campaign targeting XRP holders through fraudulent NFTs on the XRP Ledger, ho. Article summary: ## Phishing Campaign Targeting XRP Holders via Fraudulent NFTs on the XRP Ledger. Topic tags: general, general web, user generated. Style: premium digital editorial illustration, source-backed research mood, clean composition, high detail, modern web publication hero. Use reference image context only for broad subject, composition, and topical grounding; do not copy the exact image. Avoid: logos, brand marks, copyrighted characters, real person likenesses, fake screenshots, UI text, readable text, watermarks, charts with fake numbers, clickbait thumbnails, icons, and tiny thumbnail layouts. Make it useful as an illustrative visual, not as factual evidence.
openai.com
A coordinated phishing campaign is actively targeting XRP holders by sending unsolicited fraudulent NFTs to XRP Ledger (XRPL) wallets. Scammers embed hidden malicious "Buy Offers" within these NFTs, and when users sign or accept the offer, their XRP and other assets are instantly drained from the wallet . The scams rely entirely on social engineering and human error rather than exploiting protocol flaws .
Studio Global AI
Continue your research
This page includes a source-backed answer you can continue inside Studio Global.
What is the short answer to "Fake Xaman NFT Scam Drains XRP Wallets: How It Works and How to Stay Safe"?
Scammers are sending unsolicited fraudulent NFTs—branded as fake "Xaman passes," "beta pass offers," or "Safe XRPL verify message"—to XRP wallets.
What are the key points to validate first?
Scammers are sending unsolicited fraudulent NFTs—branded as fake "Xaman passes," "beta pass offers," or "Safe XRPL verify message"—to XRP wallets. The broader scam wave includes deepfake AI videos, mass bot campaigns impersonating the XRPL Foundation, fake Xaman desktop apps, and over 20 fake social media profiles created daily.
What should I do next in practice?
To protect your wallet, never sign or accept unsolicited NFT offers, ignore all social media airdrop/giveaway promotions, avoid connecting your wallet to unfamiliar websites, never share your seed phrase, and use wall...
Scammers send counterfeit NFTs branded as fake "Xaman passes" and "beta-pass offers" to mimic the legitimate Xaman wallet ecosystem . Some NFTs carry misleading verification messages such as "Verification: Safe XRPL verify message". A variant uses fake memos in payment requests promising monthly rewards to trick users into signing a malicious transaction .
The Malicious Transaction Users Are Tricked Into Signing
An unsolicited NFT is deposited into the victim's wallet, often with a title or description suggesting a prize, giveaway, or "verification" step .
The NFT contains a hidden Buy Offer. When the user signs or accepts the offer—mistaking it for a reward claim or verification—the transaction authorizes the scammer to drain XRP and other assets from the wallet .
Another variant involves fake payment requests disguised as "safe XRPL verification" messages. Victims who approve the request lose their funds immediately .
Reported Financial Losses
A victim lost 14,646 XRP (approximately $16,800) in June 2026 after approving a fraudulent payment request disguised as a wallet verification prompt .
Another holder lost 6,000 XRP after accepting a fake NFT buy-offer, as reported in May 2026 .
Ripple CTO David Schwartz has emphasized that because XRP has no central issuer, stolen tokens cannot be frozen, revoked, or recovered — losses are permanent .
Broader Context: "Huge Escalation" in XRP Scams
The NFT phishing campaign is part of a much broader wave of fraud targeting the XRP community.
David Schwartz's Warning (May 14, 2026)
Ripple CTO David Schwartz posted an urgent alert on X (Twitter), stating there has been "a huge escalation lately in airdrop and giveaway scams targeting XRPL users." He warned that nearly all such promotions seen on social media are fraudulent, and that anyone impersonating him on Instagram, Telegram, or elsewhere is a scammer .
XRPL Foundation Warning
The XRP Ledger Foundation issued a parallel alert, confirming that scams targeting the XRP community "had increased sharply" and urging users to avoid airdrops, giveaways, and fake customer support offers on X .
Other Scam Tactics in the Same Wave
Mass bot campaigns impersonating the XRPL Foundation and Xaman wallet to push fake "RLUSD Season 1" airdrops.
Deepfake AI videos impersonating Ripple executives to promote fake giveaways .
Phishing websites mimicking legitimate XRPL wallets, prompting users to connect their wallets or approve fraudulent transactions .
Fake Xaman desktop apps and over 20 fake social media profiles created daily .
Recommended Protective Measures
Based on warnings from David Schwartz, Wietse Wind (Xaman founder), and the XRPL Foundation:
Never sign or accept unsolicited NFT offers. Immediately cancel any unknown offers in your wallet .
Ignore all airdrop, giveaway, and "reward" promotions on social media — they are virtually always scams .
Do not connect your wallet to unfamiliar websites claiming to offer free XRP or NFT rewards .
Never share your wallet seed phrase or private keys with anyone .
Verify all communications: Ripple and the XRPL Foundation never ask users to send XRP or share wallet details .
Use wallet tools like Bithomp and Xaman to review and cancel pending offers — but recognize that once funds are stolen, recovery is rarely possible .
Be wary of impersonation accounts on X, Instagram, and Telegram. Schwartz himself warns that anyone claiming to be him on these platforms is a scammer .
whale-alert.ioMass bot campaign on X impersonates XRPL Foundation and ...
Scammers send counterfeit NFTs branded as fake "Xaman passes" and "beta-pass offers" to mimic the legitimate Xaman wallet ecosystem . Some NFTs carry misleading verification messages such as "Verification: Safe XRPL verify message". A variant uses fake memos in payment requests promising monthly rewards to trick users into signing a malicious transaction .
The Malicious Transaction Users Are Tricked Into Signing
An unsolicited NFT is deposited into the victim's wallet, often with a title or description suggesting a prize, giveaway, or "verification" step .
The NFT contains a hidden Buy Offer. When the user signs or accepts the offer—mistaking it for a reward claim or verification—the transaction authorizes the scammer to drain XRP and other assets from the wallet .
Another variant involves fake payment requests disguised as "safe XRPL verification" messages. Victims who approve the request lose their funds immediately .
Reported Financial Losses
A victim lost 14,646 XRP (approximately $16,800) in June 2026 after approving a fraudulent payment request disguised as a wallet verification prompt .
Another holder lost 6,000 XRP after accepting a fake NFT buy-offer, as reported in May 2026 .
Ripple CTO David Schwartz has emphasized that because XRP has no central issuer, stolen tokens cannot be frozen, revoked, or recovered — losses are permanent .
Broader Context: "Huge Escalation" in XRP Scams
The NFT phishing campaign is part of a much broader wave of fraud targeting the XRP community.
David Schwartz's Warning (May 14, 2026)
Ripple CTO David Schwartz posted an urgent alert on X (Twitter), stating there has been "a huge escalation lately in airdrop and giveaway scams targeting XRPL users." He warned that nearly all such promotions seen on social media are fraudulent, and that anyone impersonating him on Instagram, Telegram, or elsewhere is a scammer .
XRPL Foundation Warning
The XRP Ledger Foundation issued a parallel alert, confirming that scams targeting the XRP community "had increased sharply" and urging users to avoid airdrops, giveaways, and fake customer support offers on X .
Other Scam Tactics in the Same Wave
Mass bot campaigns impersonating the XRPL Foundation and Xaman wallet to push fake "RLUSD Season 1" airdrops.
Deepfake AI videos impersonating Ripple executives to promote fake giveaways .
Phishing websites mimicking legitimate XRPL wallets, prompting users to connect their wallets or approve fraudulent transactions .
Fake Xaman desktop apps and over 20 fake social media profiles created daily .
Recommended Protective Measures
Based on warnings from David Schwartz, Wietse Wind (Xaman founder), and the XRPL Foundation:
Never sign or accept unsolicited NFT offers. Immediately cancel any unknown offers in your wallet .
Ignore all airdrop, giveaway, and "reward" promotions on social media — they are virtually always scams .
Do not connect your wallet to unfamiliar websites claiming to offer free XRP or NFT rewards .
Never share your wallet seed phrase or private keys with anyone .
Verify all communications: Ripple and the XRPL Foundation never ask users to send XRP or share wallet details .
Use wallet tools like Bithomp and Xaman to review and cancel pending offers — but recognize that once funds are stolen, recovery is rarely possible .
Be wary of impersonation accounts on X, Instagram, and Telegram. Schwartz himself warns that anyone claiming to be him on these platforms is a scammer .
whale-alert.ioMass bot campaign on X impersonates XRPL Foundation and ...
