Security

XRP Fake Bank Token Scam: How It Works and How to Avoid It

Scammers are issuing fake bank-named tokens on the XRP Ledger. How the sign-here trick works, four rules to follow and a five-question check before you sign.

Video: XRP Fake Bank Token Scam: How It Works and How to Avoid It

Key takeaways

  • Anyone can issue a token with any name on the XRP Ledger, so a bank-named token on an explorer proves nothing about who is behind it.
  • The dangerous request is usually not your seed phrase but a prompt to sign, such as adding a regular key or a trust line.
  • A regular key can authorize most of the same actions as your main key, and XRP Ledger transactions can't be reversed.
  • Confirm any bank news only on the bank's own press page or Ripple's verified channels, and keep your main wallet away from anything new.
  • If you think you signed something suspicious, the video says to move funds to a brand new wallet you set up yourself, then report it.

Scammers are using real bank names to target XRP holders on the XRP Ledger. According to the video, an XRP Ledger Foundation contributor warned on October 18 that fake bank-named addresses and tokens are circulating. They come paired with websites that ask holders to verify a wallet, sign a transaction or swap XRP for the new token.

The trick works because it rides on genuine news. The scam doesn’t need your seed phrase. A single signature can be enough, and on the XRP Ledger no admin can reverse a transaction once it goes through. In the video, the Bullrunners host covers three things: how the scam works, the signing request he says to watch for, and a short checklist to run before signing anything.

Why are scammers using bank names now?

Scammers are using bank names because the XRP Ledger had a run of real bank headlines in October. According to the video:

  • On October 12, Standard Chartered began holding Ripple’s RLUSD stablecoin on the XRP Ledger for institutional clients through its Dubai branch.
  • On October 15, US-based Cross River Bank said it is plugging RLUSD into its core banking system.
  • Evernorth has been moving its 473 million XRP treasury through major exchanges.

That is real news, and that is the problem. The video says that once a bank’s name appears next to the XRP Ledger, scammers copy it. According to the warning, they generate wallet addresses that start with something resembling a bank’s name, such as “r-bank” followed by random characters. They also issue tokens with bank-sounding names. Then they push people to a website with one of three requests: verify your wallet, sign a transaction, or swap your XRP for the new bank token.

The video points out that no loss total has been published for this wave yet. The host declines to put a number on it.

Does a token on an XRP explorer prove it’s real?

A token appearing on an XRP explorer proves only that someone created it. According to the official XRP Ledger documentation cited in the video, anyone can issue a token with any name they like.

So you can look up a token, see that it exists and see “bank” in its name. That tells you nothing about who issued it or whether any bank is involved. The host compares an explorer to a price chart. A chart shows a price, but not who is on the other side of the trade. An explorer shows that a token exists, but not who you are dealing with.

Why does good news make the scam work?

According to the video, scammers wait for good news because headlines make holders feel early. When a bank adopts RLUSD, the instinct is to get in before everyone else. The video calls that fear of missing out and says it is the emotion the scammers are selling to. Traders call it chasing: you see a move, fear missing it and click before you think.

The video also notes that a Ripple Swell event is taking place in New York this month. It says more announcements usually mean more copycat tokens, so the host suggests staying on guard through the end of October.

Why is signing a transaction the real danger?

Signing a transaction is the real danger because on the XRP Ledger a signature is how everything gets authorized, and no one can undo it afterward. Most people already know not to hand over a seed phrase. The scam request looks harmless instead, with wording like “confirm to claim your bank token” or “approve to verify.”

The video highlights two transaction types to understand.

Regular key changes. A regular key is a second key added to your account. The official docs say a regular key can authorize most of the same things as your main key. If you sign a transaction that adds someone else’s key to your account, you never gave them your seed phrase. As the host puts it, you gave them a key to the front door.

Trust lines. On the XRP Ledger, you can’t hold a token until you sign a transaction saying you are willing to hold it. That permission is called a trust line. The video says a “claim” button is often you saying yes to the scammer’s token. Bullrunners has a separate guide on how XRP trust lines work.

The advice from the warning, as relayed in the video, was blunt: sit on your hands and do nothing. To see what a signing prompt actually shows, read our guide on how to read an Xaman sign request.

Four rules to protect your XRP

The host lays out four rules he would follow.

  1. Banks don’t need you. Standard Chartered’s RLUSD service is for eligible institutional clients. A bank won’t DM you, won’t airdrop you a token and won’t ask you to swap your XRP. If something “from a bank” needs your wallet, it isn’t from the bank.
  2. One source of truth. The only confirmation that counts is the bank’s own official press page or Ripple’s verified channels. A Telegram group doesn’t count, a reply under a post doesn’t count, and a token on an explorer doesn’t count.
  3. Separate your wallets. The wallet holding your main balance never connects to anything new. If you want to try something, use a separate wallet holding an amount you are fine losing. Traders do the same with accounts: you don’t test a new strategy on your main one.
  4. Unknown means no. If your wallet shows a transaction type you don’t recognize, reject it immediately. Examples include a regular key change or a trust line for a token you never went looking for.

If you think you’ve already signed something suspicious, the video says to move your funds to a brand new wallet you set up yourself, then report it. Bullrunners covers the broader steps in what to do if your crypto is stolen.

The five-question check before you sign

The video ends with a five-question check worth saving. Ask these before connecting, signing or swapping anything:

  1. Did I go looking for this, or did it find me?
  2. Is it on the bank’s own press page?
  3. Am I being asked to connect, sign or swap?
  4. Is this my main wallet?
  5. Do I know exactly what this transaction does?

If any answer is wrong, the host says to walk away.

What to watch next

The video says more announcements usually bring more copycat tokens, and Ripple’s Swell event in New York falls this month. When you see a bank headline, check the bank’s own press page rather than links in social posts. Review your wallets for any trust lines or keys you don’t recognize. Bullrunners also covered scams tied to XRP Ledger upgrades, which follow the same pattern of using real news as bait.

Frequently asked questions

What is the fake bank token scam on the XRP Ledger?

Scammers create wallet addresses and tokens with bank-sounding names, then send holders to a website asking them to verify a wallet, sign a transaction or swap XRP for the new token. According to the video, an XRP Ledger Foundation contributor warned about it on October 18.

Does a token showing on an XRP explorer mean a bank issued it?

No. According to the official XRP Ledger docs cited in the video, anyone can issue a token with any name. An explorer only shows that someone created the token, not who.

What is a regular key on the XRP Ledger?

A regular key is a second key added to an account. The official docs say it can authorize most of the same things as the main key. Signing a transaction that adds a scammer's regular key can give them that power without your seed phrase.

Will a bank ever airdrop me a token or ask me to swap XRP?

According to the video, no. Services like Standard Chartered's RLUSD custody are for eligible institutional clients. The video says a bank won't DM you, airdrop you a token or ask you to swap your XRP.

What should I do if I already signed a suspicious transaction?

The video advises moving your funds to a brand new wallet you set up yourself, then reporting what happened.

Full video transcript

From the video's captions, lightly formatted. Captions can mishear names and numbers, so check figures against the article above.

Scammers are now using real bank names to steal XRP. And here's how the trick works and the one rule that makes you immune to it. Now, on the 18th of October, an XRP Ledger Foundation contributor warned holders about fake bank tokens on the ledger. I'm going to break it down for you and I'll show you the one request that empties wallets and give you a checklist at the end of this video. Now, quick disclaimer, education and commentary only, not financial advice.

Crypto is volatile and you can lose money. I'm Josh, I'm and we're going to jump straight into it.

[music]

This month, the XRP Ledger had a run of real bank headlines. On the 12th of October, Standard Chartered started holding Ripple stablecoin r l USD on the XRP Ledger for institutional clients through its Dubai branch. And on the 15th, Cross River Bank in the US said it's plugging r l USD into its core banking system. And Evernode has been moving its 473 million XRP treasury through major exchanges. Now, that's genuine news and that's the problem because the moment a bank's name shows up next to the XRP Ledger, scammers copy it.

Now, according to the warning, they generate wallet addresses that look like a bank's name, think r-bank and then loads of random characters. And they issue tokens with bank-sounding names. Then, they send you to a website and ask you to do one of three things: verify your wallet, sign a transaction, or swap your XRP for the new bank token. No loss total has been published for this wave yet, so I'm not going to throw you a scary number at you because you don't need one. You've seen how this ends.

And if you appreciate me making this type of content, let me know by gently tapping that like button. Now, if you're holding that $50,000 or more, want help putting this into a proper system, put your XRP to work link is at the very top of the description. More into that later. Point one, a token on the explorer proves nothing. So, on the XRP ledger, anyone can issue a token with any name they like.

That's straight from the official XRP ledger docs. So, you can look a token up on an explorer, it's there, it's got bank in the name. All that tells you is someone created it, not who and not that any bank is actually behind it. But, here's how I think about this as a trader. A chart shows you a price.

It doesn't show you who's on the other side of the table. An explorer is the same. It shows you a token exists. It doesn't show you who you're dealing with. Point number two is the bait is always the good news.

Scammers don't wait for bad news. They wait for headlines that make you feel early. So, for example, a bank adopts RUSD and your brain goes, I want in before everyone else. But, that's fear of missing out and that's the exact emotion they are selling to. In trading, we call it chasing.

You see a move, you're scared to miss it. You click before you think and that's the same thing here, just a different button. A Ripple Swell event runs from the 27th to the 19th of October in New York. More announcements usually means more copycat tokens. So, keep your guard up through the end of this month and stay with me because the next one is where I see real money going missing.

And if you're new here, please hit that subscribe button. I break this stuff down every week so you don't have to find out the hard way and we are pushing for 400,000 subscribers before the end of 2026. Now, let's jump straight into point number three. The signature is the hack. Now, here's the request that doesn't look like a scam.

You're not asked for your seed phrase and most people know not to hand that over. You're asked to sign something, confirm to claim your bank token or approve to verify. Now, that looks harmless, but on the XRP ledger, a signature is how everything gets authorized and there's no admin who can reverse a transaction after it's gone through. There's one type of transaction that adds a second key to your account, and it's called a regular key. The official docs say a regular key can authorize most of the same things as your main key.

So, if you sign a transaction that adds someone else's key to your account, you never gave them your seed phrase, but you gave them a key to the front door. And that's the same idea with tokens. On the XRP ledger, you can't hold a token until you sign a transaction saying you're willing to hold it. So, that claim button is often saying yes to that token. And that's why Vet's advice was so blunt.

Just sit on your hands and do nothing. So, that's the request I promised you. It's not give me your seed, it's just sign here. And this is where most people realize they don't actually have a system. They've got XRP on an exchange, some in a phone wallet, maybe a hardware wallet in a drawer, and no rules for what they will and won't sign.

But that's what the XRP to work link down below is built for. And here's what one of our member, Vance, wrote on Trustpilot. The education from this group has been top-notch. Every one of the educators want you to be successful. So, if your crypto adds up to $50,000 or more, XRP and everything else, become your own bank and operate from a repeatable system instead of holding and hoping.

So, tap that top link in the description, you'll get a free training first, and then you can book a strategy call with the team. But I want to jump into how I would have handled this as a trader. And I would follow four rules. Rule number one, banks don't need you. So, Standard Chartered's USD service is for eligible institutional clients.

And that's who it's for. A bank won't DM you, it won't airdrop you a token, and it won't ask you to swap your XRP. If something from a bank needs your wallet, it's not from the bank. Rule number two, one source of truth. So, the only confirmation that counts is the bank's own official press page or Ripple's own verified channels.

Not a Telegram group, not a reply under a post, not even a token on an explorer. Rule number three is separate your wallets. The wallet that holds your main bag never connects to anything new. And if you want to try new stuff, use a separate wallet with an amount you're actually fine losing. Traders do this with accounts.

You don't test a new strategy on your main account. Rule number four, unknown means no. So, if your wallet shows a transaction type that you just don't recognize, a regular key change, a trust line for a token that you never went looking for, you reject it instantly. Because the unknown means no every single time. And if you think you've already signed something dodgy, move your funds to a brand new wallet you set up yourself and then report it.

So, quick recap, real bank news is the bait, a token on the explorer proves nothing, the signature is the hack, and your four rules, banks don't need you, one source of truth, separate wallets, unknown means no. And here's the bonus I promised. So, get ready to screenshot this and it's five questions. Did I go looking for this or did it find me? Is it on the bank's own press page?

Am I being asked to connect, sign, or swap? Is this my main wallet? And do I know exactly what this transaction does? And if you get one wrong answer, walk away, nice and simple. And if you want help building rules like this into your whole portfolio and your crypto adds up to $50,000 or more XRP and every other coin, tap that first link in the description, follow the free training, and then join a call with a team.

They will go through your entire portfolio and give you the honest truth. If If you're ready for what is in store for crypto, they will be honest on the call and tell you. If not, they will give you the advice you need to be ready for this next bull run. And if you missed my breakdown of the seven scams around the last XRP ledger upgrade, it's on screen now. Watch that next.

Thank you very much for watching. You know what to do. I see you at the top. Stay bullish. Peace.

Education and commentary only, not financial advice. Crypto is volatile and you can lose money. Do your own research and speak to a qualified advisor before making investment decisions. Figures and quotes are as reported in the video on October 24, 2026 and may have changed since.