XRP Scams Explained: Fake Giveaways, Fake Tokens and How to Stay Safe

The most common XRP scams are fake Ripple giveaway livestreams, fake upgrade or airdrop claims, support impostors, lookalike tokens and recovery scams. Each breaks on a simple rule: Ripple will never ask you to send it XRP, upgrades never need you to act, and nobody legitimate needs your seed phrase.

Scammers time these pushes around rallies, Ripple announcements and XRP Ledger upgrades. This guide covers the five most common XRP scams, what Ripple and US authorities have said about them, and a checklist you can keep.

The five XRP scams at a glance

Scam	What it looks like	The rule that beats it
Fake giveaway	A “Ripple” livestream promising to double your XRP	Ripple never asks you to send XRP
Fake upgrade or airdrop	“Migrate”, “activate” or “claim” your XRP before a deadline	Upgrades never need you to act
Support impostor	A helpful DM after you post a question	If they contacted you first, it isn’t support
Fake token	A token named after a real stablecoin or company	Check the issuer address, not the name
Recovery scam	A “law firm” or “tracer” offering to get stolen XRP back	Real agencies don’t charge recovery fees

Why do fake Ripple giveaway livestreams keep working?

They borrow trust that isn’t theirs. Scammers take over YouTube channels with large followings, rename and rebrand them to look like Ripple’s, and stream old or edited footage of Ripple CEO Brad Garlinghouse next to an address and a promise: send XRP, receive more back.

The problem is old enough that Ripple and Garlinghouse sued YouTube in April 2020, arguing the platform failed to stop channels impersonating them. The two sides settled in March 2021 and said they would work together to prevent, detect and take down these scams. The scams continued, and newer versions use AI-generated deepfakes rather than recycled clips.

Ripple’s position is unambiguous. Its scam-awareness page says: “Ripple will never ask you to send us XRP.” The same page warns that Garlinghouse is increasingly used in deepfakes promising free XRP giveaways. The US Federal Trade Commission warns that promises to double your money or hand out free crypto are scam signs, and says “only scammers demand payment in cryptocurrency.”

Do XRP Ledger upgrades or airdrops require you to do anything?

No. XRP Ledger upgrades, called amendments, switch on for the whole network once enough validators support them. Holders don’t vote and don’t need to move, migrate, activate or sync their XRP. It stays at the same address before and after.

That makes any message with a deadline, such as “activate your wallet before the upgrade”, a scam by definition. The same goes for surprise airdrops that send you to a website to “claim” tokens, where the site asks for your seed phrase or a signature. Bullrunners covers seven upgrade-season versions, including requests to sign a permission delegation, in XRP Ledger upgrade scams.

How do support impostors find you?

They watch for questions. Post “Is my XRP safe?” or “My transfer is stuck” on X, Reddit or Telegram, and accounts calling themselves Ripple Support, Xaman Support or a wallet help desk reply or message you within minutes. Some use the real profile picture with one letter changed in the name.

Real support doesn’t work that way. The FTC says no legitimate business or government agency will demand payment in cryptocurrency. Wallet makers go further about your keys:

• Xaman says that if someone asks for your secret numbers, “that person is trying to steal your funds,” and that Xaman will never ask you to claim anything.
• Ledger says neither Ledger nor its support will ever ask for your 24 recovery words.

The rule: if someone contacted you first, close the chat. Reach support only through the official app or a website address you type yourself. For more on why your backup must stay private, see What is a seed phrase?

How do fake tokens work on the XRP Ledger?

Anyone can create a token on the XRP Ledger and give it a familiar name. What identifies a real token is its issuer, the account that created it. A token called RLUSD from an account unrelated to Ripple isn’t Ripple’s stablecoin, however it appears in a wallet.

To hold any token, you open a trust line to its issuer, which tells the ledger whose token you’ll accept. That is the step scammers aim for. They promote lookalike tokens in posts and messages, hoping holders will open a trust line to the wrong issuer.

The protection is the same every time: before opening a trust line, compare the full issuer address, every character, with the address the real issuer publishes on its own website. One detail helps here. According to the XRP Ledger’s documentation, the currency code “XRP” can’t be used for issued tokens at all, so any token presented as “XRP” with an issuer is not real XRP. Bullrunners explains trust lines and reserves in XRP trust lines explained.

What is a crypto recovery scam?

It is a second scam aimed at people who have already lost money. After a theft, victims are contacted by “law firms”, “blockchain investigators” or “government partners” offering to recover the funds for an upfront fee.

The FBI has warned about this directly. In a June 2024 public service announcement, it said scam victims who were further targeted by fictitious law firms reported losses of more than $9.9 million between February 2023 and February 2024, and that “law enforcement does not charge victims a fee for investigating crimes.” A 2025 FBI update added that no law firms are officially authorized partners of US government agencies, and listed red flags such as requests for payment in crypto or gift cards, refusals to appear on video, and moving victims into private group chats.

Bullrunners saw this pattern after the D’CENT wallet drain, when fake support numbers appeared online. See the D’CENT wallet drain.

XRP scam checklist

1. Never send XRP to get XRP back. No exceptions, whatever the face or logo.
2. Ignore deadlines. No upgrade, migration or airdrop requires you to act.
3. Never share your seed phrase or Xaman secret numbers, with anyone, for any reason.
4. Close any chat you didn’t start. Contact support through the official app or a site you type in yourself.
5. Check the issuer address before opening any trust line.
6. Read every signature request. If you can’t tell what it does, reject it.
7. Send a small test transaction first on any new transfer, and copy addresses from the original source, never from your history.
8. Treat recovery offers as scams until proven otherwise, and never pay one upfront.

If you’ve already been targeted

Stop sending funds and don’t engage further. In the US, report the scam to the FBI at ic3.gov and to the FTC at ReportFraud.ftc.gov, with addresses, transaction IDs, usernames and screenshots. Elsewhere, contact your national police. If you shared a seed phrase or secret numbers, move what remains to a new wallet with a new backup, starting with a small test.

What to watch next

Expect scam volume to rise around Ripple events, price rallies and XRP Ledger upgrades, because each gives scammers a fresh story. Before you act on any XRP news, check Ripple’s own website and verified accounts, or official XRP Ledger channels, rather than a giveaway livestream, a DM or a search ad.

Sources

• Ripple: Crypto Scams, How to Identify, Avoid and Report
• FBI IC3: Fictitious Law Firms Targeting Cryptocurrency Scam Victims (June 24, 2024)
• FBI IC3: Fictitious Law Firms update (Aug 13, 2025)
• XRP Ledger docs: Currency Formats
• Xaman Help Center: Airdrop Scams
• Decrypt: YouTube and Ripple settle lawsuit (Mar 2021)