Xaman Pockets founder Wietse Wind has stated {that a} “huge XRPL focused rip-off effort” is underway, warning customers about faux signal requests, phishing emails, and impersonation accounts.
His alert factors to an increase in social engineering assaults geared toward crypto holders moderately than flaws within the blockchain code.
A Multi-Pronged Assault on XRPL Customers
Wind wrote on X on February 16 that he had spent the weekend including new filters and alerts to Xaman Pockets after detecting coordinated makes an attempt to trick customers into signing malicious transactions.
He listed a number of strategies seen in latest days, together with rip-off NFTs that promise token swaps, faux desktop pockets apps, and direct messages posing as assist workers. The official pockets account repeated the warning, telling customers to not click on hyperlinks, reply to DMs, or join wallets to unknown web sites.
In response to Wind, the assaults often give attention to manipulating customers moderately than breaching software program, with the scammers increasing past social media and sending phishing emails regardless that Xaman doesn’t retailer consumer electronic mail addresses, suggesting attackers are counting on leaked information from unrelated breaches.
The tricksters are additionally reportedly selling faux “desktop wallets,” regardless of Xaman being a strictly cell software. Some fraudulent initiatives are even promising free tokens in change for customers’ secret keys.
Wind confused that funds will keep secure if folks keep away from approving unknown transactions or sharing their keys.
“Regardless of the quantity of warnings, detection, filtering, alerts within the app and right here on social: no scammer can get you in case you don’t willingly / unknowingly work together with them,” he suggested. “Your funds are completely secure in Xaman Pockets: simply don’t signal any transaction you don’t belief, and don’t work together with anybody promising you free tokens.”
Scams Transferring Past DeFi Exploits
The XRPL rip-off wave displays a troubling industry-wide development, with a PeckShield report from earlier within the 12 months revealing that crypto scams and hacks drained greater than $4.04 billion in 2025.
Of that complete, $1.37 billion got here from scams alone, a 64% enhance from 2024. The agency stated attackers are shifting towards tailor-made phishing campaigns that focus on people with giant holdings as a substitute of relying solely on technical exploits.
Moreover, the PeckShield report additionally discovered that centralized platforms and corporations accounted for about 75% of stolen funds final 12 months, up from 46% in 2024.
These high-value thefts tied to deception prolong past software program wallets. On January 17, 2026, blockchain investigator ZachXBT reported {that a} sufferer misplaced about $282 million in Bitcoin (BTC) and Litecoin (LTC) via a {hardware} pockets rip-off. In response to his findings, the attacker later moved the funds via THORChain and transformed them to Monero (XMR).
Wind’s posts framed the most recent marketing campaign as a reminder that pockets safety typically will depend on consumer choices.
“It is a cat and mouse ‘recreation,’ and the scammers won’t win,” he acknowledged.
The put up Pockets Founder Warns of Coordinated Rip-off Focusing on XRPL Customers appeared first on CryptoPotato.