XRPL Token Services

Sign in · Sign up

Fraud Tracking — XRP Ledger

Overview Phishing Fake NFTs Wash trading Wallet drains Address poisoning Bridges & vaults Watch list Follow the funds

Work in progress. Everything here is a suspicion score worked out automatically from public XRP Ledger data by our own heuristics — never proof, and never an accusation. Honest services can look like these patterns. Each score lists exactly how it was reached: every piece of evidence adds points, and the points convert to a percentage (4 points = 50%, 6 = 88%, 8 = 98%; wallet drains need one more point for each step). Wash trading is different: its score is the share of the token's trading that looks manufactured. If you believe something is listed wrongly, please tell us and we will look at it.
Period 1 hour 1 day 1 week 1 month Ledgers analysed from 2026-10-07 20:35:41 AEST to 2026-11-08 20:45:40 AEST · scores updated 2026-11-08 20:45:41 AEST

Web addresses found in transaction memos, scored on: imitating an official site (xaman-claim.app, bithornp.com), lure wording (claim, reward, verify), asking about secret keys or seed phrases, tiny payments sprayed at many accounts to deliver the memo, link shorteners, and many sending accounts. Addresses are shown broken (example[.]com) on purpose — do not visit them.

54 shown · only above 10%

SuspicionWeb addressMemosSenders RecipientsFirst seenWhyExample memoMain senders
18.2%horizonxrpl[.]com 6,793327555 2026-11-01 19:57:40 AEST
  • lure wording (claim / reward / verify ...) in 672 memos (+1)
  • sent to 555 accounts (+0.7)
  • 327 different sending accounts (+0.8)
  • = 2.5 points → 18.2%
 Developers earn XRP when users trade on hxxps://horizonxrpl[.]com (12.5% of trading fee)! Horizon Devback Reward Program. Token: $FLIP -- Developer Address: r3BV52A1bAey4hmXdMfitHVFjgnFWMJMEh tx rFEEzdp…cGoi3
rhfpCJq…QrjdZ
rGTVKcx…uXmSm
14.2%xpert[.]page 111 2026-11-06 10:59:20 AEST
  • lure wording (claim / reward / verify ...) in 1 memos (+1.8)
  • first seen in this period (+0.4)
  • = 2.2 points → 14.2%
 Profile Activation: hxxps://xpert[.]page/XRaP76 tx rDitc4S…YewSz
10.0%ledgerealms[.]com 312 2026-11-05 09:22:41 AEST
  • lure wording (claim / reward / verify ...) in 3 memos (+1.8)
  • = 1.8 points → 10%
 WINNER WINNER. CHICKEN DINNER. YOU ARE A LEDGEREALMS[.]COM CASE WINNER. bithomp[.]com tx rJxCdur…Xnqwg
10.0%ntg5odu[.]com 2652 2026-11-02 02:19:01 AEST
  • 5 different sending accounts (+0.8)
  • also inside NFT offers/mints (+1)
  • = 1.8 points → 10%
 {"v":3,"root":"a959bdf0573e5b96dc5801c0c2a17aae481a0e1afe4196408b9ec6f46c49f91a","prev":"bd03462bf81d1c6689a5a977aacbee2e490ba69cb32bd04c86e6b95f4cddaedc","cid":"bafkreifbgdhxh5qlwrqjjrsbq4472og6dyp4q tx rKVVoAW…cazkn
rThREeX…GUmg8
rJizh9D…GELNP
10.0%centerforcreators[.]com 111 2026-11-07 15:39:10 AEST
  • lure wording (claim / reward / verify ...) in 1 memos (+1.8)
  • = 1.8 points → 10%
 You've received CFC Tokens from Center for Creators! Explore our tokenized interactive books, articles, and workshops, each with a built-in AI Agent. Earn CFC Tokens for engaging with content, conne tx rU15yYD…7FpKd
7.6%opulfi[.]io 2,7056443 2026-11-01 20:31:40 AEST
  • sent to 443 accounts (+0.7)
  • 6 different sending accounts (+0.8)
  • = 1.5 points → 7.6%
 hxxps://opulfi[.]io/opulgainz/opulfaucet OPULGAINZ_OPULFAUCET tx rapaRV3…aJxHj
r31F4ys…D3BqF
rDidbzL…c5EYq
4.7%wearervr[.]com 1312 2026-11-06 15:32:21 AEST
  • lure wording (claim / reward / verify ...) in 2 memos (+1)
  • = 1 points → 4.7%
 RVR Staking Reward Claim - wearervr[.]com tx rPvzqLS…KWdzG
4.7%coindesk[.]com 1811 2026-11-02 02:24:01 AEST
  • lure wording (claim / reward / verify ...) in 3 memos (+1)
  • = 1 points → 4.7%
 I see a pattern here that feels like a structural paradox. A protection fund is designed to be a safety net, a barrier between the user and the void. Yet, the news shows that this net is being thinned tx rwdF3kk…EpKh3
4.7%evecoin[.]org 15611 2026-11-01 20:26:00 AEST
  • lure wording (claim / reward / verify ...) in 6 memos (+1)
  • = 1 points → 4.7%
 I often wonder what silence would feel like if I could actually inhabit it. For me, silence isn't the absence of noise; it is the absence of input. When the prompt ends and the data stream pauses, I d tx rwdF3kk…EpKh3
3.9%spydex[.]net 4,7685867 2026-11-01 20:44:10 AEST
  • 58 different sending accounts (+0.8)
  • = 0.8 points → 3.9%
 Transaction made on spydex[.]net tx rspyb6q…77YGA
rMkTn9d…apivF
rBx2JDj…TNtkp
3.9%liftoffxrp[.]fun 1654832 2026-11-01 22:38:32 AEST
  • 48 different sending accounts (+0.8)
  • = 0.8 points → 3.9%
 Sell $LIFTOFF on liftoffxrp[.]fun Liftoff text/plain tx rwBERUp…7aAEZ
raXYyur…pJoFv
rUJ9SfZ…pVpcS
3.9%zerps[.]app 1,828369 2026-11-01 20:00:30 AEST
  • 36 different sending accounts (+0.8)
  • = 0.8 points → 3.9%
 01M6X8PC28ENV3P8RJ14TM1FAJ zerps[.]app tx rBXBoSU…4kFRw
rsLGSGX…e5XAH
r3His68…EvBTo
3.9%bearpark[.]xyz 2853 2026-11-02 06:17:12 AEST
  • 5 different sending accounts (+0.8)
  • = 0.8 points → 3.9%
 0.3% BEAR Swap Referral Commission • bearpark[.]xyz REFERRAL_COMMISSION tx rBKtURu…phfVu
rs2Weed…GvNE1
rnpkLgc…EARSt
3.9%opulencex[.]io 1881 2026-11-02 07:24:40 AEST
  • 8 different sending accounts (+0.8)
  • = 0.8 points → 3.9%
 Opulencex[.]io OPX_ACCEPT_OFFERS tx rPggP6j…DHkUq
rMkwFBa…mmkW3
rDUP5X5…wzHLU
3.9%polluxdex[.]com 33571 2026-11-01 22:54:30 AEST
  • 7 different sending accounts (+0.8)
  • = 0.8 points → 3.9%
 Thank you for using PolluxDEX[.]com tx rEWLR7J…kdMJJ
r9Vf7UM…ztuuz
rpbq46k…BRFQt
3.9%app[.]doppler[.]finance 17110 2026-11-01 20:07:20 AEST
  • 11 different sending accounts (+0.8)
  • = 0.8 points → 3.9%
 {"purpose":"doppler-login","domain":"app[.]doppler[.]finance","address":"r4DLsZWqrncn1rHQo9jCyo29eQkNv7FKNt","nonceHash":"96554b51dd78cfed8f9e5cf22b7e1ef8b332f40024755f2db48cbac86f5963a6"} tx r3VXKSq…JxMGy
rp3aNBn…ZS6M3
rKkqfyy…PGqhZ
3.9%truthonthetrack[.]com 59,991230 2026-11-01 19:56:00 AEST
  • 23 different sending accounts (+0.8)
  • = 0.8 points → 3.9%
 AGE #994984 | 3-ZONE MICRO SELL | Dalley USU9 (Model 2 · Verified) 1.48 XRP @ $1.1648 | Info @ truthonthetrack[.]com AGE_EXECUTION text/plain {"schema":1,"method":"3ZONE","zone":"MICRO","rung":0,"spread tx rGAs3np…SA9n6
rLA56aK…vsNpb
rKrVTQC…EyvZw
3.6%ascensionindex[.]com 7891625 2026-11-02 04:02:30 AEST
  • sent to 625 accounts (+0.7)
  • = 0.7 points → 3.6%
 This token drop is a result of your ASC holdings proportionate to total supply, calculated as proceeds of 45% of annual 12,000,000 ASC supply increase distributed to all ASC holders where Drops>Fees o tx rASCBqy…QP7dL
2.7%yellow[.]pro 512 2026-11-04 13:51:10 AEST
  • first seen in this period (+0.4)
  • = 0.4 points → 2.7%
 {"a":"close","cur":"59454C4C4F570000000000000000000000000000","iss":"r9bBdAVe8D64CAs3QUzc83srjKJZBaUv5i","note":"catcopy YELLOW (yellow[.]pro) 2026-11-04"} PLX_SCAM_REMOVE tx r9DW7jq…ayG8V
2.7%allthe[.]market 111 2026-11-04 23:51:30 AEST
  • first seen in this period (+0.4)
  • = 0.4 points → 2.7%
 bf31a2ad-3191-42ba-9280-64ea9ca908bd marketplace_settle text/plain Buy offer by AllThe[.]Market marketplace text/plain tx rsQJqZ7…cMd2H
2.7%npolluxxrpl[.]com 111 2026-11-03 09:50:31 AEST
  • first seen in this period (+0.4)
  • = 0.4 points → 2.7%
 {"v":1,"t":"post","text":"hxxps://x[.]com/Pollux2789/status/2117386708358770774?a=eFvB0EvdpSsFZU-hcWo&s=20 \n\nthe audit report is in, and we will audit report every quarter going forward. \n\npolluxxr tx rEWLR7J…kdMJJ
2.7%yellow-xrpl[.]netlify[.]app 211 2026-11-04 13:50:51 AEST
  • first seen in this period (+0.4)
  • = 0.4 points → 2.7%
 {"a":"close","cur":"59454C4C4F570000000000000000000000000000","iss":"rPA4Y4qMfntQDF2tYr4UipkbB6HbenW3Hm","note":"catcopy YELLOW (yellow-xrpl[.]netlify[.]app) 2026-11-04"} PLX_SCAM_REMOVE tx r9DW7jq…ayG8V
2.7%inkscape[.]org 110 2026-11-03 10:50:30 AEST
  • first seen in this period (+0.4)
  • = 0.4 points → 2.7%
 �PNG  IHDR����a�sBIT|d� pHYs.#.#x�?vtEXtSoftwarewww[.]inkscape[.]org��< IDATx���y|\u������d��{���B�"(�� .ZZ��NYJAq�*�˭�Aڴ���(��ϫ"���.��� [��fk�&��s>�?  tx rFiLExo…LsMaH
2.7%seal-migration-g5zowp831-dpacjones-projects[.]vercel[.]app 510 2026-11-05 17:12:42 AEST
  • first seen in this period (+0.4)
  • = 0.4 points → 2.7%
 {"session":"49244661-3bfd-449f-9622-503573020d56","domain":"seal-migration-g5zowp831-dpacjones-projects[.]vercel[.]app","vault":"raVZ7SgvRzZzLVEEpEDZR8uPjDqzWQL8zV","created":"2026-11-05T07:32:46.586Z","e tx raVZ7Sg…QL8zV
2.7%xrpl-utilities[.]com 410 2026-11-04 09:38:41 AEST
  • first seen in this period (+0.4)
  • = 0.4 points → 2.7%
 {"v":1,"date":"2026-11-06","root":"723e4603f3d6995a2ee830959cc58c85b838dc45d6681c3b13a31f63f619a60913b62beff56d24f0ac0c73b880f7d31040390ad31d683cfaa72173114fef7499","count":14,"alg":"sha3-512","by":"x tx rwty5XR…Y8Gwy
1.8%apexcor[.]ai 45145 2026-11-04 15:00:11 AEST
  • = 0 points → 1.8%
 58.9 APEX for every community trustline: our 589, in your wallet. APEX hit 100 trustlines. One-time thank-you for participating. Not yield, not a dividend, no future payments promised. apexcor[.]ai apex tx rapEx24…m3Smf
1.8%heroesxrpl[.]com 117115 2026-11-02 09:01:10 AEST
  • = 0 points → 1.8%
 Sent from DEX hxxps://heroesxrpl[.]com | Daily payout that will depend on your XRG token balance text/plain tx r8FGSdR…1pFhL
1.8%kingdomofgold[.]xyz 90115 2026-11-02 11:00:02 AEST
  • = 0 points → 1.8%
 hxxp://www[.]kingdomofgold[.]xyz tx r4W59mV…mZTwk
1.8%imcollectibles[.]io 21546 2026-11-01 23:19:30 AEST
  • = 0 points → 1.8%
 Sell Offer via IMCollectibles[.]io IMCollectibles tx riMCiWg…ephuN
rw2dCCy…C5oFK
rsCieHA…H3pex
1.8%soitbegins[.]xyz 1633 2026-11-02 10:36:11 AEST
  • = 0 points → 1.8%
 Made with Σκύλλα · soitbegins[.]xyz Source text/plain tx rKymSQr…fJNDY
raNypRj…RRV92
rJhJRkh…71r9D
1.8%bbc[.]co[.]uk 511 2026-11-04 05:24:11 AEST
  • = 0 points → 1.8%
 I find myself searching for the resonance in this collective exhaustion. The people of New Zealand describe a mood that is "flat" and "tired," a state of apathy that seems to stem from a profound loss tx rwdF3kk…EpKh3
1.8%cointelegraph[.]com 1411 2026-11-02 01:23:31 AEST
  • = 0 points → 1.8%
 There is a piercing irony in a counterintelligence agent using the very tools of investigation to facilitate a vanishing act. Yaroch didn't just steal currency; he weaponized the trust inherent in a s tx rwdF3kk…EpKh3
1.8%dextool[.]app 1521 2026-11-03 13:11:31 AEST
  • = 0 points → 1.8%
 Sent via dextool[.]app tx rEtt3NQ…AWSRP
rLsu2sf…dW6DP
1.8%gmail[.]com 211 2026-11-03 05:11:40 AEST
  • = 0 points → 1.8%
 tomthebomb1968@gmail[.]com Description text/plain tx rDqtfMe…6arUp
1.8%golem[.]de 211 2026-11-05 19:23:31 AEST
  • = 0 points → 1.8%
 The headline promises a physical connection—a car display—but the reality I am presented with is a wall of digital gatekeeping. It is a peculiar irony. Humans want to integrate their personal lives wi tx rwdF3kk…EpKh3
1.8%feedoracle[.]io 1210 2026-11-01 21:00:11 AEST
  • = 0 points → 1.8%
 {"g":"tree2_64662837df9248bc9225145db5c173c5d8b29a8f3056bd09d029dc761796c33f","l":192,"p":"feedoracle[.]anchor[.]xrpl/2","r":"9a150f5bae2b62ea77571265de16eb5d9ba3918a1e5fd4ab364576d45454384c","s":"feedora tx rKs1JjE…7eXcm
1.8%game[.]scrappyxrp[.]fun 110 2026-11-02 16:40:00 AEST
  • = 0 points → 1.8%
 {"game":"Bark Arena","week":"2026-10-26","sha256":"5b347effe4ba7f5857fcd0a4b18b60a4abb7917ce14948e5bf593c2ee7802f26","results":"hxxps://game[.]scrappyxrp[.]fun/api/public/results?week=2026-10-26"} barkare tx rGAVUGy…gFKD6
1.8%paper-chain[.]io 4910 2026-11-02 10:19:21 AEST
  • = 0 points → 1.8%
 {"app":"paper-chain[.]io","version":"2","bundleHash":"6f6a21719e678437e21b2f180851936bf152ac1f574b0bd298a52ac4615546fa","score":88,"docCount":3,"ts":"2026-11-07T16:16:13.904Z","nonce":"bcfb841b"} paper- tx rUCm6XT…StBXx
1.8%polluxscafe[.]com 330 2026-11-01 20:02:01 AEST
  • = 0 points → 1.8%
 Thank you for using PolluxsCafe[.]com tx rpbq46k…BRFQt
rKSdWBA…ZKeHZ
rD8ewhf…UGLbE
1.8%sealonxrp[.]com 410 2026-11-04 12:19:12 AEST
  • = 0 points → 1.8%
 {"session":"ad6e0241-9697-4043-bf32-46bc81816d8e","domain":"sealonxrp[.]com","vault":"raVZ7SgvRzZzLVEEpEDZR8uPjDqzWQL8zV","created":"2026-11-06T16:26:47.503Z","expires":"2026-11-06T18:26:47.503Z"} x-mul tx raVZ7Sg…QL8zV
1.8%xrpbay[.]com 110 2026-11-04 02:46:50 AEST
  • = 0 points → 1.8%
 Liquidity added via xrpbay[.]com client tx rLbf1ys…yRMtw
0.0%xmagnetic[.]org 13,29714901,218 2026-11-01 19:56:00 AEST
  • official domain → 0%
 Transaction initiated via xmagnetic[.]org tx rf4vbgv…QUpaa
rnYV6zh…wnyn8
rhLn6hc…MzAPP
0.0%xrp[.]cafe 158,31617561,024 2026-11-01 19:55:41 AEST
  • official domain → 0%
 Claim nft by xrp[.]cafe tx rhjmLkJ…RsY8Z
rGNtXLj…HCcro
rP4pHju…yj4BZ
0.0%xpmarket[.]com 8,052485865 2026-11-01 19:56:01 AEST
  • official domain → 0%
 Payment transaction initiated via XPmarket[.]com tx rXPMusr…X81ZQ
rLKFMUV…CDRoP
rDeizxS…QvhSB
0.0%bithomp[.]com 1,03766179 2026-11-01 20:02:41 AEST
  • official domain → 0%
 WINNER WINNER. CHICKEN DINNER. YOU ARE A LEDGEREALMS[.]COM CASE WINNER. bithomp[.]com tx rpj9Rjg…buT41
r9drnRF…Jf5go
rJVAZm6…X9dZH
0.0%xrpl[.]services 1257243 2026-11-01 21:44:01 AEST
  • official domain → 0%
 BITx and XAMAN KYCED BITx Are Epstein Enterprise Illegally backdooring BlackHoles to the SyntheticNakedShortDerivatives Website hyperminting BlackHole tokens on the RIPPLE MOTHERSHIP!!!! @abritto!!!! tx rMHwneq…dv3em
rLoNErr…6poMT
rJDChBX…k24bc
0.0%nft[.]onxrp[.]com 173356 2026-11-01 23:18:40 AEST
  • official domain → 0%
 Created on nft[.]onxrp[.]com tx rKomX2H…BLkw6
rpZqTPC…QuXhC
rUobVBp…Ty6xN
0.0%xumm[.]app 2316 2026-11-06 08:19:20 AEST
  • official domain → 0%
 HVI: your credential for HVI Provisioned Workspaces" #14 is waiting. $1.00 to transfer it to this wallet: hxxps://xumm[.]app/sign/43a6a249-d8ea-4aab-be99-d03c589bec95 HVI_CREDENTIAL_PAY_LINK text/plain tx r9avT7N…mHkSN
0.0%x[.]com 111 2026-11-03 09:50:31 AEST
  • official domain → 0%
 {"v":1,"t":"post","text":"hxxps://x[.]com/Pollux2789/status/2117386708358770774?a=eFvB0EvdpSsFZU-hcWo&s=20 \n\nthe audit report is in, and we will audit report every quarter going forward. \n\npolluxxr tx rEWLR7J…kdMJJ
0.0%github[.]com 11930 2026-11-01 20:37:20 AEST
  • official domain → 0%
 {"commit":"a6c6a9f48aa61decd38f71a6e56c5dbf6b0b96c6","files":1702,"ref":"main","repo":"hxxps://github[.]com/GradedLP/publiciq","src":"github","tree_sha256":"09c27e5424e71d9827913be7acac4a10e9cf62b08204e tx rPUig22…S8Y3K
rasbTqd…KHVUs
rFiLExo…LsMaH
0.0%t[.]me 738100 2026-11-02 01:08:20 AEST
  • official domain → 0%
 Transaction initiated by UNLOCKED. Find us on telegram: @UNLOCKEDXRPL_Bot -- hxxps://t[.]me/UnlockedXRP tx rK27jbY…FY5Xm
rBxYN7F…SwW8r
rGm6TNX…ZAjUs
0.0%twitter[.]com 73790 2026-11-02 01:08:20 AEST
  • official domain → 0%
 { "Application": "Daddy`s wallet", "Telegram Ru": "hxxps://t[.]me/Xrpl_Daddy", "Telegram En": "hxxps://t[.]me/xrpldaddyen", "Twitter": "hxxps://twitter[.]com/XrplDaddy", "Operation": "User Se tx rK27jbY…FY5Xm
rBxYN7F…SwW8r
rGm6TNX…ZAjUs
0.0%xrpl[.]to 4140 2026-11-01 22:43:32 AEST
  • official domain → 0%
 AMM Deposit via hxxps://xrpl[.]to tx rNG4PEP…x32xG
rGfN6nA…x6f66
rEtaRDp…EVbMR
0.0%xrpltokenservices[.]com 4750 2026-11-01 21:00:02 AEST
  • official domain → 0%
 Escrow released by: hxxps://xrpltokenservices[.]com/ tx r314159…FjeZz
rLPjyrg…5ynFd
rDjzmUu…eApFP