XRP Ledger developer and Xaman founder Wietse Wind renewed a warning to XRP users after scam accounts again targeted the wallet’s brand. Summary Xaman founder Wietse Wind said fake desktop wallet and airdrop scams are targeting XRP users. More than 20 scam X accounts and 10 fake domains now appear daily, Wind said. Related reports said David Schwartz warned XRP users about fake airdrops and impersonators across platforms. His latest post said fake Xaman accounts and websites continue to promote a desktop wallet and airdrop that do not exist. The warning follows a similar alert from Ripple CTO Emeritus David Schwartz earlier this month, when he said fake airdrops, giveaways, and impersonators had increased across the XRP Ledger community. The fresh notice keeps attention on social engineering risks around XRP wallets. Fake Xaman accounts target XRP users Wind said more than 20 new X scam accounts impersonate Xaman Wallet each day. He also said more than 10 new domains appear daily, with websites pretending to be linked to the official wallet. 🚨 Every day 20+ new Twitter scam accounts impersonating @XamanWallet⚠️ Every day 10+ new domain names with scam websites pretending to be usAnd again the ⚠️ FAKE!!! Desktop WalletTHERE IS NO DESKTOP WALLET!NO AIRDROP!We report them all. New ones pop upSTAY VIGILANT! pic.twitter.com/sCTJTfWdii— Wietse Wind – 🪝🛠 Xaman® + XRPL + Xahau (@WietseWind) May 23, 2026 He warned users in direct terms: “There is no desktop wallet! No airdrop!” He added that the team reports the accounts, but new ones continue to appear. The message was aimed at users who may see fake links in replies, posts, or search results. Scammers push fake wallet downloads The fake campaigns often use copied branding to make users believe they are dealing with Xaman. Some sites push a fake desktop wallet, while others promote free token claims that ask users to connect wallets or sign transactions. Xaman is a self-custody wallet for the XRP Ledger and Xahau ecosystem. Its official site says users control their assets through private keys held on their own devices, which makes transaction signing a key security step. Earlier reports also described fake browser plugins, fake support pages, and direct messages from accounts posing as wallet staff. Those warnings said Xaman users should rely on in-app support and avoid outside channels that ask for wallet access. DANGER! 🚨⚠️ THERE IS _NO_ Xaman BROWSER PLUGIN! ⚠️All Xaman browser plugins are FAKE & from SCAMMERSYou don’t even need one: every site in the ecosystem SAFELY interacts with Xaman via QRIf you see a Xaman browser plugin please report it to Chrome/Firefox/RT far/wide pic.twitter.com/KShXg2Nhsj— Wietse Wind – 🪝🛠 Xaman® + XRPL + Xahau (@WietseWind) March 5, 2026 Ripple-linked warnings continue Related coverage reported that Schwartz warned XRPL users about a sharp rise in fake airdrops and giveaway scams. He said users should treat such posts with caution, adding that “any such posts you see are likely scams.” Ripple has also warned users about fake support accounts and impersonation. Earlier reports said a fake Instagram account posed as Ripple CEO Brad Garlinghouse and pushed an XRP giveaway scheme. Such scams often copy real images and company names. XRP users urged to avoid unknown links The latest warning places wallet safety back at the center of the XRP community’s security debate. Fraud attempts often rely on user action, not a failure in the XRP Ledger itself. Users should avoid unknown links, fake support messages, and websites asking them to connect wallets for free tokens. They should also avoid downloading any Xaman desktop app because Wind said no such product exists. The message is direct for XRP holders: verify the source before signing any transaction. A fake airdrop, wallet download, or support message can become a wallet-draining attempt once a user approves it.
