The XRP community is facing an urgent wave of fraudulent activity, including fake airdrops, impersonation schemes and phishing campaigns targeting holders and wallet users. On September 17, 2026, warnings from key figures such as Ripple CTO David Schwartz and XRPL ecosystem developer Wietse Wind emphasized the growing threat to community trust. Schwartz highlighted fake airdrops and impersonation attempts as significant risks, while Wind alerted users to phishing campaigns aimed at stealing funds through fraudulent applications.
The situation escalated on September 18, 2026, when David Schwartz directly intervened in a scam thread under posts from a hacked account belonging to the culture magazine NplusOneMag. Scammers had launched an aggressive promotional campaign for a fake airdrop. Instead of waiting for official statements, Schwartz posted two text GIFs saying: “I can spot a scam from a mile away” and “This is a scam.” His personal response triggered a wave of user reports, and accounts impersonating the crypto wallet Xaman were rapidly suspended before unsuspecting investors could lose funds.
Schwartz has maintained a pinned warning on his profile for months, stating that anyone claiming to be him on Instagram or Telegram is a scammer. Across the XRP Ledger ecosystem, attacks targeting wallets have become systematic. Scammers use hidden buy offers through NFT spam campaigns, and once a user approves a transaction while pursuing a supposed bonus, a malicious transaction can drain their XRP balance. Retail security still depends heavily on personal vigilance and rapid manual response from senior figures and community members.
No specific price action was reported, but the long-term issue is reputational. XRP is designed for cross-border payments and transaction efficiency, and adoption depends on regulatory clarity and community confidence. The current scam surge could deter potential users and investors if not addressed through continued education and verified sources.
