Suspected wallet drains — XRPL Fraud Tracking

Fraud Tracking — XRP Ledger

Overview Phishing Fake NFTs Wash trading Wallet drains Address poisoning Bridges & vaults Watch list Follow the funds

Work in progress. Everything here is a suspicion score worked out automatically from public XRP Ledger data by our own heuristics — never proof, and never an accusation. Honest services can look like these patterns. Each score lists exactly how it was reached: every piece of evidence adds points, and the points convert to a percentage (4 points = 50%, 6 = 88%, 8 = 98%; wallet drains need one more point for each step). Wash trading is different: its score is the share of the token's trading that looks manufactured. If you believe something is listed wrongly, please tell us and we will look at it.

Period 1 hour 1 day 1 week 1 month Ledgers analysed from 2026-10-07 19:15:41 AEST to 2026-11-08 19:25:31 AEST · scores updated 2026-11-08 19:25:41 AEST

Accounts that received the entire XRP balance of other accounts with no destination tag — the pattern of stolen keys being emptied. One account moving everything once is often just the owner; it scores high when several established accounts are emptied into the same place, when an account's keys were changed just before, or when the receiver is new. Exchanges, swap services and their deposit addresses are left out, and so are senders that had dealt with the receiver before (usually the owner moving their own wallets). Use Follow to see where the money went next.

0 shown (above 10%) · show all 69

Suspicion	Receiving account	Accounts emptied	Received	Why	Emptied accounts (latest)
Nothing in this period.