XRP Ledger developer and Xaman founder Wietse Wind has renewed his warning to XRP users as scammers keep abusing the Xaman brand to push fake wallet offers and bogus airdrops. His message was blunt: there is no Xaman desktop wallet, and there is no airdrop.
Fake Xaman accounts and domains are appearing every day
Wind said more than 20 new scam accounts impersonating Xaman Wallet show up on X each day. He also said more than 10 new domains are appearing daily, with websites pretending to be tied to the official wallet. These links can surface in replies, posts, or search results, giving users multiple ways to run into fraudulent pages.
According to Wind, the team keeps reporting the accounts, but replacements continue to emerge. The warning adds to a series of security alerts seen across the XRP community this month, with wallet-related social engineering remaining a central threat.
Scam campaigns push fake downloads and token claims
The fraudulent campaigns often copy Xaman branding to look legitimate. Some of the sites promote a fake desktop wallet download. Others advertise free token claims or airdrops and ask users to connect wallets or sign transactions. Once a user approves a request, the scam can move from a simple fake page to an attempt to drain funds.
Xaman is a self-custody wallet for the XRP Ledger and the Xahau ecosystem. Its official site states that users control assets through private keys stored on their own devices, which makes transaction signing a critical security checkpoint. Earlier reports cited in the source also mentioned fake browser extensions, fake support pages, and direct messages sent by accounts posing as wallet staff. Users were told to rely on in-app support instead of outside channels asking for wallet access.
David Schwartz and Ripple-related warnings add to the pattern
This latest notice follows a separate warning earlier this month from former Ripple CTO David Schwartz. He said fake airdrops, giveaway scams, and impersonator accounts had increased across the XRPL community, and cautioned users that posts of that kind were likely scams.
Ripple-linked warnings have also covered fake support accounts and impersonation of company figures. One earlier case involved a fake Instagram account posing as Ripple CEO Brad Garlinghouse and promoting an XRP giveaway scheme. These scams often reuse real images and company names to appear convincing.
Users are being told to avoid unknown links and wallet requests
The renewed warning puts wallet safety back at the center of the discussion for XRP users. The report notes that these fraud attempts usually depend on user action rather than a failure in the XRP Ledger itself.
For users, the practical advice is clear: avoid unknown links, ignore unsolicited support messages, and do not connect wallets to pages offering free tokens. Wind also gave a simple rule for spotting one category of fraud: any page offering a Xaman desktop app should be treated as fake. Checking the source before signing any transaction remains the most direct way to avoid wallet-draining attacks.