XRP Holders Put on Alert as Phishers Use Fake Flare Network Websites

AI Market Summary
XRP holders are facing an active phishing wave using cloned websites and impersonated support accounts, including a fake Flare Network staking site that South Korean authorities say stole 3.4 million XRP from 71 victims (reported losses ~₩20B/US$13.4M). The news elevates near-term operational and reputational risk around XRP ecosystem onramps and wallets, potentially dampening user engagement as security scrutiny intensifies.
Impact level
● Medium
Affected assets
XRP/USDT-0.10%
AI Insight · XRP/USDTAI Insight
▼ Bearish
Trade now
⚠️ AI-generated insights are based on news content and are provided for informational purposes only. They do not constitute investment advice or represent the views of BingX. Investing involves risk. Please trade responsibly.
XRP holders are being warned about a fresh phishing wave built around cloned websites and impersonation tactics targeting brands tied to the XRP ecosystem. Security alerts from Xora Finance and the Xaman wallet cite fraudulent links, fake support accounts, and wallet-draining prompts designed to trick users into connecting wallets or sharing sensitive information. One of the most serious cases under review involves a counterfeit Flare Network staking site. South Korean authorities say the scheme affected 71 investors and led to the theft of 3.4 million XRP, worth about US$8.5 million at the time. Investigators have linked the incident to a broader pattern of crypto fraud involving bogus investment and staking offers. Separately, reports circulating in the community estimate total losses tied to related fake staking sites at more than ₩20B (roughly US$13.4M). Xora Finance said it detected a coordinated operation using lookalike domains and brand-mimicking pages to lure users into depositing funds or authorizing wallet connections. The project's founder, Joren Lundgren, urged users to rely only on verified official channels and to treat staking, rewards, and "exclusive" offers with caution, especially when promoted through ads or unsolicited messages. Xaman, one of the best-known wallets in the XRP Ledger ecosystem, reiterated that it does not send direct messages, ask for private keys, release unofficial tokens, or run surprise airdrops. Other XRP-related projects have echoed the warning. Doppler Finance advised users to verify account handles carefully, noting that scammers often reuse logos and profile images while operating under slightly altered usernames. Project teams and security professionals are advising users to avoid unverified links from ads and DMs, and to be wary of any site that requests wallet connections or private information. The episode underscores the ongoing importance of self-custody and basic security hygiene as the XRP ecosystem expands across apps, payments, and decentralized services.