Xora Finance sounded the alarm on a coordinated phishing operation targeting XRP holders, with South Korean scammers running fake websites that mimic Flare Network, XORA, and other ecosystem brands. The warning came directly from Joren Lundgren, Xora Finance founder, who described what's happening as "a very sophisticated operation."
One fake staking site alone drained 71 investors of 3.4 million XRP, worth around $8.5 million, according to Seoul police investigations. The scammers' total estimated haul exceeds 20 billion Korean won, roughly $13.4 million. The operation leverages ads and direct messages to lure victims toward fraudulent platforms where they deposit tokens expecting staking rewards.
How the scam spreads
The criminals behind this are particularly aggressive with DM spam and social media ads. Xora Finance explicitly warned the community to ignore any unsolicited links, especially those coming through Twitter or private messages. The foundation reinforced the correct official channels, telling users to verify URLs directly and avoid clicking promotional links.
Xaman wallet, a major player in the XRP ecosystem, echoed similar warnings and laid out what it absolutely will not do. The wallet will never send DMs or emails to users, will never distribute tokens or airdrops, and keeps all support strictly within the Xaman app itself. Scammers have been impersonating this exact behavior, creating confusion among less cautious community members.
The timing matters. Ripple's regular token management activities sometimes spark false rumors about airdrops or special distributions, which the scammers weaponize to build credibility. They'll reference legitimate ecosystem moves while herding people toward fake platforms.
Both Xora Finance and Xaman are now urging the XRP community to share these warnings widely. Verification before any transaction is the only real defense here.
This article covers security alerts and fraud reports affecting cryptocurrency holders. It is informational only and not investment advice. Always verify official sources independently before taking any action with your assets.
