A convincing clone of Ripple's official website is circulating online, designed to drain the wallets of long-term $XRP holders. The fraudulent page replicates Ripple's branding, color scheme,
A convincing clone of Ripple's official website is circulating online, designed to drain the wallets of long-term $XRP holders. The fraudulent page replicates Ripple's branding, color scheme, and typography in close detail, and uses a loyalty angle to lower victims' guard, promising a reward for HODLers who never sold their tokens.
The fake site presents a "Get Early Access" button aimed at committed XRP holders. Clicking it triggers a crypto drainer, a malicious script that, once a wallet is connected, executes an outbound transaction before the user realizes what has happened. Users are directed to a fraudulent site where connecting a non-custodial wallet triggers a malicious script that executes a single authorized transaction to empty holdings. The authorization step is the trap: once signed, the transaction is irreversible on-chain.
XRP Ledger chief architect David Schwartz (@JoelKatz) called out the site publicly on X, posting a blunt warning: "IT'S A SCAM!" Ripple does not run free XRP giveaways, and posts claiming otherwise on behalf of the company or its executives should be treated as scams. Ripple will never ask you to send XRP.
The fake Ripple site is not an isolated incident. Scammers have deployed sophisticated phishing campaigns that bypass email authentication checks, while over 50 fake Ripple executive accounts were reported on Instagram and Telegram in Q1 2026. Fresh security warnings have targeted XRP users amid an ongoing scam wave, with fake sites cloning Flare Network, XORA, and other XRP-adjacent brands.
Blockchain analytics firm Chainalysis estimates that as much as $17 billion was stolen globally through crypto scams in 2025, the highest level ever recorded. Impersonation scams posted 1,400% year-over-year growth, driven in large part by AI tools that make fraudulent content faster to produce and harder to detect.
Schwartz's verified presence remains limited to his @JoelKatz handle on X. Fake Schwartz accounts have appeared on Telegram, Instagram, and other platforms. Holders are urged to verify all announcements through official channels, avoid clicking unsolicited links, and never connect a wallet to a site promoted through social media posts or direct messages.
Sources:Ripple: How to Identify Crypto ScamsCryptoNews: Ripple CTO David Schwartz Warned of AI-Cloned ExecutivesCoinDesk: Chainalysis Report on AI and Impersonation Scams
