Protect Your XRP: 6 New Phishing Tactics Identified by XRPL Contributor Wietse Wind
The post Protect Your XRP: 6 New Phishing Tactics Identified by XRPL Contributor Wietse Wind appeared on BitcoinEthereumNews.com.
Wietse Wind, the lead developer of the Xaman wallet and a prominent figure in the XRP Ledger (XRPL) ecosystem, has issued a technical advisory regarding a coordinated scam campaign active this February 2026. Following a weekend of deploying emergency filters and in-app warnings, Wind outlined six specific attack methods currently targeting the community. Six attack vectors and social engineering with XRP According to Wind, the current threat landscape reveals an increasingly sophisticated shift toward deceptive social engineering. The first and most prevalent method involves fraudulent sign requests that trick users into authorizing seemingly routine transactions that actually trigger the immediate transfer of XRP to addresses controlled by attackers. Next is the use of malicious NFTs distributed via unsolicited airdrops. These assets often include “swap offers” designed to lure holders into exchanging their legitimate balances for worthless tokens. Morning Crypto Report: Europe Leads Ripple USD Activity on XRP Ledger, Dormant Ethereum Wallet With 6,335x Profit Fails 1 ETH Deposit, Solana Records $31 Million Weekly ETF Inflows Amid ‘Buoyant’ Sentiment 50 Million XRPs Sold in Less Than 24 Hours Third, impersonation accounts on social platforms such as X and Telegram pose as official support staff to manufacture a sense of urgency and bypass user caution. Furthermore, phishing emails referencing wallet activity are used in the fourth vector. There is a massive XRPL targeted scam effort going on. I’ve been working all weekend (day+night) to do what we can to add more warnings & filters, but at the end of the day nothing works as well as our own vigilance. We’re seeing:– Scam sign requests (they try to trick you… https://t.co/FGNCtvNPDo?from=article-links — Wietse Wind – 🪝🛠 Xaman® + XRPL + Xahau (@WietseWind) February 16, 2026 Wind specifies that since the Xaman infrastructure, the one he is heavily engaged in, does not collect user email addresses, these…
Filed under: News - @ February 16, 2026 11:28 pm