XRP dev warns on fake wallet passes

TLDR

An XRP Ledger developer has warned that scammers are sending fake wallet passes and NFTs that impersonate Xaman to trick XRP users into dangerous actions.

1. Xaman founder Wietse Wind reported fake passes and NFTs being sent to XRP wallets, falsely implying they come from the Xaman team.
2. The goal is to lure users into accepting offers, visiting phishing sites, or signing transactions that can compromise funds or wallet security.
3. XRP users should treat all unsolicited passes or NFTs as suspicious, verify domains and support channels, and never share wallet secrets or sign unclear transactions.

Deep Dive

1. How The Scam Works

XRP Ledger developer and Xaman founder Wietse Wind has raised an alert about fake passes and NFTs that scammers are sending to XRP wallets, pretending they are official Xaman items in a recent report.

In his warning, Wind stressed that We are NOT sending passes or NFTs! These are sent by SCAMMERS!! Do not engage, do not accept, CANCEL their offer. Some scams also use fake Xaman-branded websites promising access to a closed beta in exchange for interacting with these passes.

2. Why It Matters For XRP Users

These schemes try to exploit trust in Xaman and XRPL tools to get users to do one of three things: accept a fraudulent NFT offer, trade against a fake asset, or interact with a phishing site.

If a user follows the flow, they may end up signing malicious transactions or revealing sensitive details, which can allow attackers to drain funds or lock them out of their wallets.

3. Practical Safety Checks

Winds guidance boils down to strict hygiene around unsolicited offers and support channels:

1. Do not accept or engage with unexpected passes or NFTs, even if they mention Xaman, beta access, or special rewards.
2. Only use official in app or website support, and ignore DMs or accounts that ask for seed phrases or to verify your wallet by signing transactions.
3. Always verify domains and project handles manually, and cancel any pending offers that you did not intentionally initiate.

Following these rules helps protect you not only from this specific fake pass scam but from most NFT and wallet related phishing attempts on XRPL.

Conclusion

The warning from a core XRP Ledger developer highlights that current scams increasingly target users through seemingly legitimate wallet passes and NFTs, not just obvious phishing links. For XRP holders, the edge is simple but powerful: assume unsolicited passes are hostile by default, verify everything inside trusted apps and domains, and never sign what you do not fully understand.