Hussein Zangana, community director at the XRPL Foundation, has put out a warning about a phishing scam targeting XRP holders. The scam, disguised as a fake 'XRP Holder Tiers' announcement, tricks users into connecting their wallets to a malicious site.
The fake announcement and the FOMO hook
The scam works by pushing out a Ripple-style announcement that looks official. It claims there's a new tier system for XRP holders, with rewards or benefits for those who qualify. That's the hook. The urgency is built in — users are told they need to act fast or miss out.
Zangana, known in the community as 'Vet', said the scam is a social engineering attack. It's designed to create fear of missing out, or FOMO, and get people to connect their wallets without thinking. Once a wallet is connected, the site can request dangerous approvals that give the scammers access to funds.
Not a Ripple infrastructure breach
The warning makes one thing clear: this is not a hack of Ripple's systems. The scam is purely phishing. It doesn't exploit any vulnerability in the XRP Ledger or Ripple's infrastructure. Instead, it targets the people who hold XRP.
That's a key distinction. The fake announcement might look like it comes from Ripple, but it doesn't. No official channels have been compromised. The attack relies entirely on getting users to take a risky action themselves.
Why XRP is a prime target
XRP has one of the most active communities in crypto. That's a double-edged sword. A large, engaged user base makes for a lively ecosystem, but it also makes the community a magnet for phishing campaigns. Scammers know that if they can get enough people to bite, the payoff is worth it.
Warnings from community figures like Zangana help, but they're not enough on their own. The reality is that phishing attacks keep evolving. What looks like an official announcement today could be a fake tomorrow. The only reliable defense is verification.
What users should do
Zangana's advice is straightforward: ignore any claim-style announcement unless it's confirmed through official channels. If something looks like a Ripple announcement, go to Ripple's actual website or official social media accounts. Don't trust a screenshot or a link shared in a chat.
Connecting a wallet to an unknown site is the point of no return. Even if the site looks polished, even if the announcement has the right logos, if it's not from a verified source, it's not worth the risk. The potential loss is real, and it's permanent.
For anyone who already connected a wallet to a suspicious site, the next step is to revoke any approvals immediately. That means going into the wallet's settings and removing permissions granted to unknown contracts. It won't undo damage already done, but it can stop further loss.
The XRP community is a big target. That's not going to change. What can change is how users respond to unsolicited announcements. The safest move is simple: don't connect, don't click, verify first.
