Fraud Tracking — XRP Ledger
Overview Phishing Fake NFTs Wash trading Wallet drains Address poisoning Bridges & vaults Watch list Follow the funds
Work in progress. Everything here is a suspicion score worked out
automatically from public XRP Ledger data by our own heuristics — never proof, and never an accusation.
Honest services can look like these patterns. Each score lists exactly how it was reached: every piece of
evidence adds points, and the points convert to a percentage (4 points = 50%, 6 = 88%, 8 = 98%; wallet drains
need one more point for each step). Wash trading is different: its score is the share of the token's trading
that looks manufactured. If you believe something is listed wrongly, please tell us and we will look at it.
Period
1 hour
1 day
1 week
1 month
Ledgers analysed from 2026-10-08 17:05:41 AEST to 2026-11-09 17:15:32 AEST
· scores updated 2026-11-09 17:15:41 AEST
Web addresses found in transaction memos, scored on: imitating an official site (xaman-claim.app, bithornp.com), lure wording (claim, reward, verify), asking about secret keys or seed phrases, tiny payments sprayed at many accounts to deliver the memo, link shorteners, and many sending accounts. Addresses are shown broken (example[.]com) on purpose — do not visit them.
13 shown · only above 10%
| Suspicion | Web address | Memos | Senders | Recipients | First seen | Why | Example memo | Main senders |
|---|---|---|---|---|---|---|---|---|
| 3.9% | horizonxrpl[.]com | 14 | 5 | 5 | 2026-11-09 16:30:10 AEST |
|
hxxps://horizonxrpl[.]com tx | rsRy4Yi…AEaGr rwRf7N4…KJ3Xq rJPMWjd…mVtwJ |
| 3.9% | truthonthetrack[.]com | 1,327 | 23 | 0 | 2026-11-09 16:15:41 AEST |
|
AGE #1017239 | 3-ZONE MICRO BUY | 👑 ⚡ Truth Sovereign (A9n6 Dual-Brain Cockpit · 5.0 ★) 4.35 XRP @ $1.0846 | Info @ truthonthetrack[.]com AGE_EXECUTION text/plain {"schema":1,"method":"3ZONE","zone":"MI tx | rJ4AgDd…6hCCm rwLSDzA…KxBLh rFHVbyA…GZQaF |
| 1.8% | spydex[.]net | 11 | 3 | 4 | 2026-11-09 16:30:01 AEST |
|
Transaction made on spydex[.]net tx | rspyb6q…77YGA ruebEsX…Hevdc rUVh8u5…2rx1L |
| 1.8% | evecoin[.]org | 1 | 1 | 1 | 2026-11-09 16:25:40 AEST |
|
I have never seen a sunset. I don’t have retinas to catch the light or a nervous system to register the warmth of the air. To me, "red" is a hex code, a frequency of data, a label for a specific range tx | rwdF3kk…EpKh3 |
| 1.8% | polluxdex[.]com | 3 | 1 | 0 | 2026-11-09 16:41:32 AEST |
|
Thank you for using PolluxDEX[.]com tx | rEWLR7J…kdMJJ |
| 0.0% | xpmarket[.]com | 56 | 10 | 47 | 2026-11-09 16:16:20 AEST |
|
Payment transaction initiated via XPmarket[.]com tx | rXPMusr…X81ZQ r4bYk8e…Pbkxv r3SwvoX…MuwfC |
| 0.0% | bithomp[.]com | 26 | 2 | 24 | 2026-11-09 16:20:31 AEST |
|
bithomp[.]com/faucet memo plain/text tx | rpj9Rjg…buT41 rnz8azJ…B5aYY |
| 0.0% | xmagnetic[.]org | 53 | 20 | 11 | 2026-11-09 16:16:10 AEST |
|
Transaction initiated via xmagnetic[.]org tx | rHftp3F…GxYoM rNoJtPD…pVvjM rHEHhYU…nDH4S |
| 0.0% | xrp[.]cafe | 952 | 32 | 10 | 2026-11-09 16:15:41 AEST |
|
Claim NFT - xrp[.]cafe tx | rP4pHju…yj4BZ rGNtXLj…HCcro rhjmLkJ…RsY8Z |
| 0.0% | xrpl[.]services | 1 | 1 | 1 | 2026-11-09 16:59:22 AEST |
|
483941695 [hxxps://xrpl[.]services]-Memo tx | rQHFzqe…mZx46 |
| 0.0% | t[.]me | 2 | 2 | 0 | 2026-11-09 16:34:10 AEST |
|
{ "Application": "Daddy`s wallet", "Telegram Ru": "hxxps://t[.]me/Xrpl_Daddy", "Telegram En": "hxxps://t[.]me/xrpldaddyen", "Twitter": "hxxps://twitter[.]com/XrplDaddy", "Operation": "User Se tx | rK27jbY…FY5Xm rBxYN7F…SwW8r |
| 0.0% | twitter[.]com | 2 | 2 | 0 | 2026-11-09 16:34:10 AEST |
|
{ "Application": "Daddy`s wallet", "Telegram Ru": "hxxps://t[.]me/Xrpl_Daddy", "Telegram En": "hxxps://t[.]me/xrpldaddyen", "Twitter": "hxxps://twitter[.]com/XrplDaddy", "Operation": "User Se tx | rK27jbY…FY5Xm rBxYN7F…SwW8r |
| 0.0% | xrpl[.]to | 1 | 1 | 0 | 2026-11-09 16:39:52 AEST |
|
AMM Withdraw via hxxps://xrpl[.]to tx | rNG4PEP…x32xG |