Fake Ripple Website Targets Loyal XRP Holders In New Scam

A convincing clone of Ripple's official website is circulating online, designed to drain the wallets of long-term $XRP holders. The fraudulent page replicates Ripple's branding, color scheme, and typography in close detail, and uses a loyalty angle to lower victims' guard, promising a reward for HODLers who never sold their tokens.

How the Scam Works

The fake site presents a "Get Early Access" button aimed at committed XRP holders. Clicking it triggers a crypto drainer, a malicious script that, once a wallet is connected, executes an outbound transaction before the user realizes what has happened. Users are directed to a fraudulent site where connecting a non-custodial wallet triggers a malicious script that executes a single authorized transaction to empty holdings. The authorization step is the trap: once signed, the transaction is irreversible on-chain.

XRP Ledger chief architect David Schwartz (@JoelKatz) called out the site publicly on X, posting a blunt warning: "IT'S A SCAM!" Ripple does not run free XRP giveaways, and posts claiming otherwise on behalf of the company or its executives should be treated as scams. Ripple will never ask you to send XRP.

Part of a Broader Scam Wave Targeting XRP Holders

The fake Ripple site is not an isolated incident. Scammers have deployed sophisticated phishing campaigns that bypass email authentication checks, while over 50 fake Ripple executive accounts were reported on Instagram and Telegram in Q1 2026. Fresh security warnings have targeted XRP users amid an ongoing scam wave, with fake sites cloning Flare Network, XORA, and other XRP-adjacent brands.

Blockchain analytics firm Chainalysis estimates that as much as $17 billion was stolen globally through crypto scams in 2025, the highest level ever recorded. Impersonation scams posted 1,400% year-over-year growth, driven in large part by AI tools that make fraudulent content faster to produce and harder to detect.

Schwartz's verified presence remains limited to his @JoelKatz handle on X. Fake Schwartz accounts have appeared on Telegram, Instagram, and other platforms. Holders are urged to verify all announcements through official channels, avoid clicking unsolicited links, and never connect a wallet to a site promoted through social media posts or direct messages.

Sources:
Ripple: How to Identify Crypto Scams
CryptoNews: Ripple CTO David Schwartz Warned of AI-Cloned Executives
CoinDesk: Chainalysis Report on AI and Impersonation Scams