XRP users warned as fake Xaman airdrop scams spread

$XRP Ledger developer and Xaman founder Wietse Wind renewed a warning to $XRP users after scam accounts again targeted the wallet’s brand.

His latest post said fake Xaman accounts and websites continue to promote a desktop wallet and airdrop that do not exist.

The warning follows a similar alert from Ripple CTO Emeritus David Schwartz earlier this month, when he said fake airdrops, giveaways, and impersonators had increased across the $XRP Ledger community. The fresh notice keeps attention on social engineering risks around $XRP wallets.

Fake Xaman accounts target $XRP users

Wind said more than 20 new X scam accounts impersonate Xaman Wallet each day. He also said more than 10 new domains appear daily, with websites pretending to be linked to the official wallet.

🚨 Every day 20+ new Twitter scam accounts impersonating @XamanWallet

⚠️ Every day 10+ new domain names with scam websites pretending to be us

And again the ⚠️ FAKE!!! Desktop Wallet

THERE IS NO DESKTOP WALLET!
NO AIRDROP!

We report them all. New ones pop up

STAY VIGILANT! pic.twitter.com/sCTJTfWdii

— Wietse Wind – 🪝🛠 Xaman® + XRPL + Xahau (@WietseWind) May 23, 2026

He warned users in direct terms: “There is no desktop wallet! No airdrop!” He added that the team reports the accounts, but new ones continue to appear. The message was aimed at users who may see fake links in replies, posts, or search results.

Scammers push fake wallet downloads

The fake campaigns often use copied branding to make users believe they are dealing with Xaman. Some sites push a fake desktop wallet, while others promote free token claims that ask users to connect wallets or sign transactions.

Xaman is a self-custody wallet for the $XRP Ledger and Xahau ecosystem. Its official site says users control their assets through private keys held on their own devices, which makes transaction signing a key security step.

Earlier reports also described fake browser plugins, fake support pages, and direct messages from accounts posing as wallet staff. Those warnings said Xaman users should rely on in-app support and avoid outside channels that ask for wallet access.

DANGER! 🚨

⚠️ THERE IS _NO_ Xaman BROWSER PLUGIN! ⚠️

All Xaman browser plugins are FAKE & from SCAMMERS

You don’t even need one: every site in the ecosystem SAFELY interacts with Xaman via QR

If you see a Xaman browser plugin please report it to Chrome/Firefox/

RT far/wide pic.twitter.com/KShXg2Nhsj

— Wietse Wind – 🪝🛠 Xaman® + XRPL + Xahau (@WietseWind) March 5, 2026

Ripple-linked warnings continue

Related coverage reported that Schwartz warned XRPL users about a sharp rise in fake airdrops and giveaway scams. He said users should treat such posts with caution, adding that “any such posts you see are likely scams.”

Ripple has also warned users about fake support accounts and impersonation. Earlier reports said a fake Instagram account posed as Ripple CEO Brad Garlinghouse and pushed an $XRP giveaway scheme. Such scams often copy real images and company names.

$XRP users urged to avoid unknown links

The latest warning places wallet safety back at the center of the $XRP community’s security debate. Fraud attempts often rely on user action, not a failure in the $XRP Ledger itself.

Users should avoid unknown links, fake support messages, and websites asking them to connect wallets for free tokens. They should also avoid downloading any Xaman desktop app because Wind said no such product exists.

The message is direct for $XRP holders: verify the source before signing any transaction. A fake airdrop, wallet download, or support message can become a wallet-draining attempt once a user approves it.

Source