{"id":72668,"date":"2026-02-17T04:35:41","date_gmt":"2026-02-17T04:35:41","guid":{"rendered":"https:\/\/dogewisperer.com\/?p=72668"},"modified":"2026-02-17T04:35:41","modified_gmt":"2026-02-17T04:35:41","slug":"wallet-founder-warns-of-coordinated-scam-targeting-xrpl-users","status":"publish","type":"post","link":"https:\/\/dogewisperer.com\/?p=72668","title":{"rendered":"Wallet Founder Warns of Coordinated Scam Targeting XRPL Users"},"content":{"rendered":"
\n

Xaman Wallet founder Wietse Wind has said that a \u201cmassive XRPL targeted scam effort\u201d is underway, warning users about fake sign requests, phishing emails, and impersonation accounts.<\/p>\n

His alert points to a rise in social engineering attacks aimed at crypto holders rather than flaws in the blockchain code.<\/p>\n

A Multi-Pronged Attack on XRPL Users<\/h2>\n

Wind wrote<\/a> on X on February 16 that he had spent the weekend adding new filters and alerts to Xaman Wallet after detecting coordinated attempts to trick users into signing malicious transactions.<\/p>\n

He listed several methods seen in recent days, including scam NFTs that promise token swaps, fake desktop wallet apps, and direct messages posing as support staff. The official wallet account repeated<\/a> the warning, telling users not to click links, respond to DMs, or connect wallets to unknown websites.<\/p>\n

According to Wind, the attacks usually focus on manipulating users rather than breaching software, with the scammers expanding beyond social media and sending phishing emails even though Xaman does not store user email addresses, suggesting attackers are relying on leaked data from unrelated breaches.<\/p>\n

The tricksters are also reportedly promoting fake \u201cdesktop wallets,\u201d despite Xaman being a strictly mobile application. Some fraudulent projects are even promising free tokens in exchange for users\u2019 secret keys.<\/p>\n

Wind stressed that funds will stay safe if people avoid approving unknown transactions or sharing their keys.<\/p>\n

\n

\u201cNo matter the amount of warnings, detection, filtering, alerts in the app and here on social: no scammer can get you if you don\u2019t willingly \/ unknowingly interact with them,\u201d he advised. \u201cYour funds are perfectly safe in Xaman Wallet: just don\u2019t sign any transaction you don\u2019t trust, and don\u2019t interact with anyone promising you free tokens.\u201d<\/p>\n<\/blockquote>\n

Scams Moving Beyond DeFi Exploits<\/h2>\n

The XRPL scam wave reflects a troubling industry-wide trend, with a PeckShield report from earlier in the year revealing<\/a> that crypto scams and hacks drained more than $4.04 billion in 2025.<\/p>\n

Of that total, $1.37 billion came from scams alone, a 64% increase from 2024. The firm said attackers are shifting toward tailored phishing campaigns that target individuals with large holdings instead of relying only on technical exploits.<\/p>\n

Furthermore, the PeckShield report also found that centralized platforms and companies accounted for about 75% of stolen funds last year, up from 46% in 2024.<\/p>\n

These high-value thefts tied to deception extend beyond software wallets. On January 17, 2026, blockchain investigator ZachXBT reported<\/a> that a victim lost about $282 million in Bitcoin (BTC) and Litecoin (LTC) through a hardware wallet scam. According to his findings, the attacker later moved the funds through THORChain and converted them to Monero (XMR).<\/p>\n

Wind\u2019s posts framed the latest campaign as a reminder that wallet security often depends on user decisions.<\/p>\n

\n

\u201cThis is a cat and mouse \u2018game,\u2019 and the scammers will not win,\u201d he stated.<\/p>\n<\/blockquote>\n

The post Wallet Founder Warns of Coordinated Scam Targeting XRPL Users<\/a> appeared first on CryptoPotato<\/a>.<\/p>\n<\/div>\n","protected":false},"excerpt":{"rendered":"

Xaman Wallet founder Wietse Wind has said that a \u201cmassive XRPL targeted scam effort\u201d is underway, warning users about fake sign requests, phishing emails, and impersonation accounts. His alert points to a rise in social engineering attacks aimed at crypto holders rather than flaws in the blockchain code. A Multi-Pronged Attack on XRPL Users Wind […]<\/p>\n","protected":false},"author":1,"featured_media":0,"comment_status":"closed","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"iawp_total_views":0,"footnotes":""},"categories":[2],"tags":[3,4,5],"class_list":["post-72668","post","type-post","status-publish","format-standard","hentry","category-news","tag-crypto","tag-doge","tag-news"],"_links":{"self":[{"href":"https:\/\/dogewisperer.com\/index.php?rest_route=\/wp\/v2\/posts\/72668","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/dogewisperer.com\/index.php?rest_route=\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/dogewisperer.com\/index.php?rest_route=\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/dogewisperer.com\/index.php?rest_route=\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/dogewisperer.com\/index.php?rest_route=%2Fwp%2Fv2%2Fcomments&post=72668"}],"version-history":[{"count":0,"href":"https:\/\/dogewisperer.com\/index.php?rest_route=\/wp\/v2\/posts\/72668\/revisions"}],"wp:attachment":[{"href":"https:\/\/dogewisperer.com\/index.php?rest_route=%2Fwp%2Fv2%2Fmedia&parent=72668"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/dogewisperer.com\/index.php?rest_route=%2Fwp%2Fv2%2Fcategories&post=72668"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/dogewisperer.com\/index.php?rest_route=%2Fwp%2Fv2%2Ftags&post=72668"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}