Fraud Tracking — XRP Ledger
Overview Phishing Fake NFTs Wash trading Wallet drains Address poisoning Bridges & vaults Watch list Follow the funds
Work in progress. Everything here is a suspicion score worked out
automatically from public XRP Ledger data by our own heuristics — never proof, and never an accusation.
Honest services can look like these patterns. Each score lists exactly how it was reached: every piece of
evidence adds points, and the points convert to a percentage (4 points = 50%, 6 = 88%, 8 = 98%; wallet drains
need one more point for each step). Wash trading is different: its score is the share of the token's trading
that looks manufactured. If you believe something is listed wrongly, please tell us and we will look at it.
Period
1 hour
1 day
1 week
1 month
Ledgers analysed from 2026-10-07 18:55:41 AEST to 2026-11-08 19:05:40 AEST
· scores updated 2026-11-08 19:05:41 AEST
Web addresses found in transaction memos, scored on: imitating an official site (xaman-claim.app, bithornp.com), lure wording (claim, reward, verify), asking about secret keys or seed phrases, tiny payments sprayed at many accounts to deliver the memo, link shorteners, and many sending accounts. Addresses are shown broken (example[.]com) on purpose — do not visit them.
1 shown (above 10%) · show all 32
| Suspicion | Web address | Memos | Senders | Recipients | First seen | Why | Example memo | Main senders |
|---|---|---|---|---|---|---|---|---|
| 10.0% | horizonxrpl[.]com | 783 | 56 | 90 | 2026-11-07 19:08:00 AEST |
|
Developers earn XRP when users trade on hxxps://horizonxrpl[.]com (12.5% of trading fee)! Horizon Devback Reward Program. Token: $FLIP -- Developer Address: r3BV52A1bAey4hmXdMfitHVFjgnFWMJMEh tx | rxkBSeZ…vwuRw rQrHuEB…smVM9 raBeef5…HjPHJ |