Ripple CTO Warns XRP Holders: Fake Airdrop Scams Surge on XRPL Network

The XRP Ledger (XRPL) is facing a surge in fraudulent activities, including fake airdrops and impersonation scams, as the network attracts more institutional activity, higher transaction volumes, and renewed attention from XRP traders. On May 14, 2024, David Schwartz, former chief technology officer at Ripple, issued a public warning about the escalating scam efforts targeting the XRPL ecosystem.

Schwartz, a prominent figure in the XRP community, cautioned users that malicious actors are increasingly deploying fake airdrops and impersonation accounts to drain user funds. The XRP Ledger Foundation echoed these concerns, stating that scams targeting the XRP community had risen sharply. The foundation advised users to avoid airdrops, giveaways, and fake customer support offers on social media platforms like X (formerly Twitter), where impersonation campaigns often spread rapidly around trending XRP narratives.

The warnings come as XRPL activity, institutional tokenization experiments, and XRP market flows have drawn renewed attention to the network. This increased visibility has created opportunities for fraudsters, who are repackaging old scams under the guise of airdrops, governance votes, DeFi rewards, and institutional adoption.

Scam reports rise across XRP social channels

The most common pattern involves impersonation accounts posing as well-known XRPL developers, executives, influencers, or ecosystem projects. These accounts often replicate profile photos, display names, and recent posts before directing users to claim a reward, vote on a proposal, or connect a wallet to a third-party site. Once a user signs the transaction, their wallet can be drained. In some cases, the malicious prompt is framed as a routine governance vote or a claim for a free token. In others, users are told they have qualified for an NFT reward, only to be prompted to approve a transaction that swaps their XRP for a worthless asset.

New tactics include fake NFT rewards and urgent prompts

Krippenreiter, an XRPL supporter who has tracked several recent scam patterns, noted that fraud attempts now include fake NFT rewards, airdrop campaigns tied to XRP-linked projects like Flare and Firelight, and private messages from bots posing as familiar community accounts. The common thread is urgency: users are pressured to act before verifying the account, transaction details, or destination address.

Historical context and evolving threats

These tactics are not new to XRP holders. Over the years, Ripple has consistently warned about fake XRP giveaways and deepfake promotions, including edited videos that falsely imply support from company executives. Panos Mekras, co-founder of Anodos Finance, also raised concerns last year about fraudulent projects using XRPL’s growing visibility to market vague token offerings and poorly defined products.

However, the scale of these scams has intensified. XRP’s online community is larger, and XRPL-based projects have become more visible due to recent developments within the network. As a result, scammers now have more real developments to imitate, making fraudulent posts appear plausible to casual users. This underscores the importance of thorough transaction review before taking any action.