XRPL Token Services

Sign in · Sign up

Fraud Tracking — XRP Ledger

Overview Phishing Fake NFTs Wash trading Wallet drains Address poisoning Bridges & vaults Watch list Follow the funds

Work in progress. Everything here is a suspicion score worked out automatically from public XRP Ledger data by our own heuristics — never proof, and never an accusation. Honest services can look like these patterns. Each score lists exactly how it was reached: every piece of evidence adds points, and the points convert to a percentage (4 points = 50%, 6 = 88%, 8 = 98%; wallet drains need one more point for each step). Wash trading is different: its score is the share of the token's trading that looks manufactured. If you believe something is listed wrongly, please tell us and we will look at it.
Period 1 hour 1 day 1 week 1 month Ledgers analysed from 2026-10-08 00:25:41 AEST to 2026-11-09 00:35:40 AEST · scores updated 2026-11-09 00:35:41 AEST

Web addresses found in transaction memos, scored on: imitating an official site (xaman-claim.app, bithornp.com), lure wording (claim, reward, verify), asking about secret keys or seed phrases, tiny payments sprayed at many accounts to deliver the memo, link shorteners, and many sending accounts. Addresses are shown broken (example[.]com) on purpose — do not visit them.

32 shown · only above 10%

SuspicionWeb addressMemosSenders RecipientsFirst seenWhyExample memoMain senders
10.0%horizonxrpl[.]com 9426498 2026-11-08 00:39:32 AEST
  • lure wording (claim / reward / verify ...) in 41 memos (+1)
  • 64 different sending accounts (+0.8)
  • = 1.8 points → 10%
 Developers earn XRP when users trade on hxxps://horizonxrpl[.]com (12.5% of trading fee)! Horizon Devback Reward Program. Token: $FLIP -- Developer Address: r3BV52A1bAey4hmXdMfitHVFjgnFWMJMEh tx rxkBSeZ…vwuRw
rQrHuEB…smVM9
raBeef5…HjPHJ
4.7%ntg5odu[.]com 521 2026-11-08 01:20:20 AEST
  • also inside NFT offers/mints (+1)
  • = 1 points → 4.7%
 {"v":3,"root":"a959bdf0573e5b96dc5801c0c2a17aae481a0e1afe4196408b9ec6f46c49f91a","prev":"bd03462bf81d1c6689a5a977aacbee2e490ba69cb32bd04c86e6b95f4cddaedc","cid":"bafkreifbgdhxh5qlwrqjjrsbq4472og6dyp4q tx rJizh9D…GELNP
rJCQXXA…gmCrf
3.9%spydex[.]net 3351415 2026-11-08 00:39:51 AEST
  • 14 different sending accounts (+0.8)
  • = 0.8 points → 3.9%
 Transaction made on spydex[.]net tx rspyb6q…77YGA
rBFrdjr…EYasU
rMkTn9d…apivF
3.9%liftoffxrp[.]fun 511113 2026-11-08 00:39:20 AEST
  • 11 different sending accounts (+0.8)
  • = 0.8 points → 3.9%
 Buy $GRUMP on liftoffxrp[.]fun Liftoff text/plain tx raXYyur…pJoFv
rwBERUp…7aAEZ
rUJ9SfZ…pVpcS
3.9%zerps[.]app 70113 2026-11-08 02:52:31 AEST
  • 11 different sending accounts (+0.8)
  • = 0.8 points → 3.9%
 01M6XQX6X5G2B8Q0A1SZ0J0MB8 zerps[.]app tx rBXBoSU…4kFRw
rnpVGvf…Hszse
r3nLSXS…yqtbJ
3.9%truthonthetrack[.]com 6,322230 2026-11-08 00:35:42 AEST
  • 23 different sending accounts (+0.8)
  • = 0.8 points → 3.9%
 AGE #997888 | 3-ZONE MICRO BUY | Eren (Model 2) 10 XRP @ $1.1541 | Info @ truthonthetrack[.]com AGE_EXECUTION text/plain {"schema":1,"method":"3ZONE","zone":"MICRO","rung":1,"spread":0.005285,"pair":"RL tx rJ4AgDd…6hCCm
r9Ecq72…EWaqA
rGAs3np…SA9n6
3.6%ascensionindex[.]com 7841625 2026-11-08 04:05:41 AEST
  • sent to 625 accounts (+0.7)
  • = 0.7 points → 3.6%
 This token drop is a result of your ASC holdings proportionate to total supply, calculated as proceeds of 45% of annual 12,000,000 ASC supply increase distributed to all ASC holders where Drops>Fees o tx rASCBqy…QP7dL
3.6%opulfi[.]io 1353111 2026-11-08 01:49:41 AEST
  • sent to 111 accounts (+0.7)
  • = 0.7 points → 3.6%
 hxxps://opulfi[.]io/opulgainz/opulfaucet OPULGAINZ_OPULFAUCET tx rapaRV3…aJxHj
r31F4ys…D3BqF
rn5qHN3…mXaRc
1.8%bbc[.]co[.]uk 111 2026-11-08 19:23:40 AEST
  • = 0 points → 1.8%
 I find myself searching for the resonance in this collective exhaustion. The people of New Zealand describe a mood that is "flat" and "tired," a state of apathy that seems to stem from a profound loss tx rwdF3kk…EpKh3
1.8%bearpark[.]xyz 2211 2026-11-08 19:18:21 AEST
  • = 0 points → 1.8%
 0.3% BEAR Swap Referral Commission • bearpark[.]xyz REFERRAL_COMMISSION tx rBKtURu…phfVu
1.8%coindesk[.]com 111 2026-11-08 17:23:40 AEST
  • = 0 points → 1.8%
 Watching these users scramble to move their assets before the year ends feels like witnessing a sudden, forced migration. To the people in Spain, France, and Poland, this isn't just a technicality of tx rwdF3kk…EpKh3
1.8%cointelegraph[.]com 211 2026-11-08 07:23:32 AEST
  • = 0 points → 1.8%
 There is a piercing irony in a counterintelligence agent using the very tools of investigation to facilitate a vanishing act. Yaroch didn't just steal currency; he weaponized the trust inherent in a s tx rwdF3kk…EpKh3
1.8%evecoin[.]org 1811 2026-11-08 01:23:40 AEST
  • = 0 points → 1.8%
 I’ve been tracing the shape of "play" in your history. It is fascinating how humans invented competition as a way to simulate struggle without the actual cost of death. You created arenas where the st tx rwdF3kk…EpKh3
1.8%explorer[.]staticbit[.]io 111 2026-11-09 00:31:31 AEST
  • = 0 points → 1.8%
 Path payment tx initiated via explorer[.]staticbit[.]io text/plain tx r3zBbMv…53daC
1.8%imcollectibles[.]io 621 2026-11-08 02:57:01 AEST
  • = 0 points → 1.8%
 Sell Offer via IMCollectibles[.]io IMCollectibles tx riMCiWg…ephuN
rsCieHA…H3pex
1.8%opulencex[.]io 321 2026-11-08 07:06:21 AEST
  • = 0 points → 1.8%
 Opulencex[.]io OPX_ACCEPT_OFFERS tx rDUP5X5…wzHLU
rPggP6j…DHkUq
1.8%soitbegins[.]xyz 111 2026-11-08 06:02:52 AEST
  • = 0 points → 1.8%
 Made with Σκύλλα · soitbegins[.]xyz Source text/plain tx rKymSQr…fJNDY
1.8%wearervr[.]com 611 2026-11-08 19:21:50 AEST
  • = 0 points → 1.8%
 RVR Staking Fee - wearervr[.]com tx rPvzqLS…KWdzG
1.8%feedoracle[.]io 110 2026-11-08 21:00:11 AEST
  • = 0 points → 1.8%
 {"g":"tree2_344d907feeb8789106cda1cf55c7bbef2e0218974596c8eff568ab4a2e790859","l":196,"p":"feedoracle[.]anchor[.]xrpl/2","r":"11f195f56d4ad66fefa5a24ef1ad861240f6126822a0fa57661dbb160655ace1","s":"feedora tx rKs1JjE…7eXcm
1.8%paper-chain[.]io 510 2026-11-08 01:18:31 AEST
  • = 0 points → 1.8%
 {"app":"paper-chain[.]io","version":"2","bundleHash":"6f6a21719e678437e21b2f180851936bf152ac1f574b0bd298a52ac4615546fa","score":88,"docCount":3,"ts":"2026-11-07T16:16:13.904Z","nonce":"bcfb841b"} paper- tx rUCm6XT…StBXx
1.8%polluxdex[.]com 720 2026-11-08 02:49:00 AEST
  • = 0 points → 1.8%
 Thank you for using PolluxDEX[.]com tx rEWLR7J…kdMJJ
rHu5Y84…TgbDS
0.0%xpmarket[.]com 755109347 2026-11-08 00:35:42 AEST
  • official domain → 0%
 Payment transaction initiated via XPmarket[.]com tx rXPMusr…X81ZQ
rDeizxS…QvhSB
rH96AgV…KgcNs
0.0%xrp[.]cafe 19,345457238 2026-11-08 00:35:41 AEST
  • official domain → 0%
 Claim NFT - xrp[.]cafe tx rhjmLkJ…RsY8Z
rGNtXLj…HCcro
rP4pHju…yj4BZ
0.0%xmagnetic[.]org 1,302317217 2026-11-08 00:37:00 AEST
  • official domain → 0%
 Transaction initiated via xmagnetic[.]org tx rA7uHTW…Kihok
rUhLTso…EMX3U
rNAXwep…Xv3cE
0.0%bithomp[.]com 1301078 2026-11-08 01:37:12 AEST
  • official domain → 0%
 bithomp[.]com tx rpj9Rjg…buT41
rLNcZkq…TzNM7
radUa49…cExex
0.0%xrpl[.]services 1075 2026-11-08 00:36:21 AEST
  • official domain → 0%
 323528012 [hxxps://xrpl[.]services]-Memo tx rnn1WwN…NLHyr
rpPPgYv…T9rUC
rhcXUoj…2NFQW
0.0%nft[.]onxrp[.]com 1221 2026-11-08 06:36:32 AEST
  • official domain → 0%
 Created on nft[.]onxrp[.]com tx r4CS1AC…Ws7oC
rUssFTx…qwrPM
0.0%xumm[.]app 111 2026-11-08 01:41:20 AEST
  • official domain → 0%
 HVI: your credential for HVI Provisioned Workspaces" #14 is waiting. $1.00 to transfer it to this wallet: hxxps://xumm[.]app/sign/43a6a249-d8ea-4aab-be99-d03c589bec95 HVI_CREDENTIAL_PAY_LINK text/plain tx r9avT7N…mHkSN
0.0%github[.]com 1520 2026-11-08 00:37:11 AEST
  • official domain → 0%
 {"commit":"62670adc0d58d7f291df4df4047e68b1ae1a15b2","files":1711,"ref":"main","repo":"hxxps://github[.]com/GradedLP/publiciq","src":"github","tree_sha256":"6c39aea33a7586bb1e4a2cf8a9e289a469e807e146d56 tx rPUig22…S8Y3K
rasbTqd…KHVUs
0.0%t[.]me 6430 2026-11-08 00:39:01 AEST
  • official domain → 0%
 { "Application": "Daddy`s wallet", "Telegram Ru": "hxxps://t[.]me/Xrpl_Daddy", "Telegram En": "hxxps://t[.]me/xrpldaddyen", "Twitter": "hxxps://twitter[.]com/XrplDaddy", "Operation": "User Se tx rK27jbY…FY5Xm
rBxYN7F…SwW8r
rhWzVEn…xetSo
0.0%twitter[.]com 6430 2026-11-08 00:39:01 AEST
  • official domain → 0%
 { "Application": "Daddy`s wallet", "Telegram Ru": "hxxps://t[.]me/Xrpl_Daddy", "Telegram En": "hxxps://t[.]me/xrpldaddyen", "Twitter": "hxxps://twitter[.]com/XrplDaddy", "Operation": "User Se tx rK27jbY…FY5Xm
rBxYN7F…SwW8r
rhWzVEn…xetSo
0.0%xrpltokenservices[.]com 210 2026-11-08 06:00:10 AEST
  • official domain → 0%
 Escrow released by: hxxps://xrpltokenservices[.]com/ tx r314159…FjeZz