Common Scams and How to Avoid Them
The recurring scam patterns that specifically target XRP holders, and how to recognize them before it's too late.
XRP's large, high-profile community (see The XRP Community and Culture) has unfortunately made it a particularly frequent target for scammers. The patterns below have proven durable over many years — recognizing the pattern matters more than memorizing any specific example, since scammers constantly change specific details.
Fake "giveaway" livestreams and videos
The pattern: A video (often a hijacked or spoofed livestream, sometimes using deepfaked or recycled footage) appears to feature Ripple's CEO or another well-known figure, announcing a "giveaway" that will double or multiply any XRP sent to a specific address.
The reality: No legitimate giveaway requires you to send crypto first to receive more back. This is a fake, and any address shown is controlled entirely by the scammer. This pattern has been used against Bitcoin, Ethereum, and essentially every major crypto asset — XRP is simply one of the most frequently targeted, given its community size.
Fake customer support
The pattern: After posting a question or complaint about an exchange or wallet on social media, you receive a direct message from an account impersonating that company's official support, asking you to "verify your wallet" by sharing your recovery phrase or private key, or by connecting your wallet to a malicious site.
The reality: Legitimate support will never ask for your private key or recovery phrase. Verify any support contact only through the company's official website or verified app — never through a reply to a public post.
Phishing sites and fake apps
The pattern: A fake website or mobile app closely mimics a legitimate wallet (such as Xaman — see Popular Wallets) or exchange, designed to capture your credentials or recovery phrase the moment you enter them.
The reality: Always navigate to wallet and exchange sites directly (via a bookmark or by typing the address yourself) rather than clicking links from search ads, social media posts, or messages. Check that a mobile app has a substantial, plausible install history and matches the developer name shown on the official project's own site before installing.
Fake "XRP will be added to [major institution]" pump narratives
The pattern: Fabricated or wildly exaggerated claims about imminent XRP adoption by a specific bank, government, or payment network circulate to drive urgency around buying — sometimes accompanied by fake official-looking documents or doctored screenshots.
The reality: Verify major claimed partnerships against Ripple's own official announcements or credible financial press — not screenshots or forwarded messages with no traceable original source.
Romance and "pig butchering" investment scams
The pattern: A long-con scam beginning with an online relationship (romantic or otherwise), eventually steering the victim toward sending increasingly large crypto "investments" — sometimes specifically XRP — to a platform that is entirely fraudulent, often showing fake gains to encourage larger deposits before disappearing with the funds.
The reality: No legitimate romantic or investment contact will ever need you to move funds to a platform they specifically direct you to, especially one you can't independently verify. If you haven't independently researched and chosen a platform yourself, be extremely cautious.
SIM-swap attacks
The pattern: An attacker convinces (or bribes) a mobile carrier to transfer your phone number to a SIM card they control, then uses SMS-based account recovery or two-factor authentication to break into exchange accounts or email tied to your crypto holdings.
The reality: Where possible, use an authenticator app or hardware security key instead of SMS for two-factor authentication on any account tied to crypto holdings, and set a carrier-level PIN or additional verification requirement on your mobile account if your carrier offers one.
General rule of thumb
If a message creates urgency ("act now"), promises guaranteed or unusually large returns, or asks you to send funds or share your keys/recovery phrase first — stop, and independently verify through an official channel before doing anything. See Wallet Security Best Practices for broader account-hygiene practices that reduce your exposure to these patterns in the first place.