The XRPL Foundation's community director, Hussein Zangana — known as 'Vet' — issued a warning this week about a fake 'XRP Holder Tiers' scam making the rounds. The phishing attempt uses a counterfeit Ripple-style announcement to trick users into connecting their wallets, potentially leading to fund loss. Ripple's own systems were not compromised; the threat is pure social engineering.
How the scam works
The fake announcement plays on the urgency that often surrounds crypto airdrops, tiered rewards, and snapshot events. It urges users to connect their wallets to a malicious site to check their 'holder tier' or claim a bonus. Once connected, the site can request dangerous approvals or trick users into signing transactions that drain their funds. It's a classic wallet-connector phishing attack, repackaged with Ripple branding.
Why XRP users are a prime target
XRP's large and active community makes it a frequent target for scammers. Ripple's brand is closely tied to institutional partnerships, product launches, and regulatory milestones — all of which create natural opportunities for fake announcements. This isn't the first fake Ripple notice, and it won't be the last. The scam exploits the trust users place in official-looking graphics and language.
What to do instead
Zangana's advice is blunt: only connect your wallet through official domains, and verify any fund-related offer through multiple official channels before taking action. A single tweet or email isn't enough. Check Ripple's website, the XRPL Foundation's social feeds, and trusted community sources. If an offer feels rushed, that's the red flag.
A familiar pattern
Community warnings help, but they're not a full defense. Scammers mutate their tactics quickly — different branding, lookalike domains, new urgency hooks. The 'XRP Holder Tiers' scam is just the latest variant. The real question is how many users will see the warning before they see the fake announcement.
