Ripple’s co-founder and Chief Technology Officer, David Schwartz, has issued a critical warning regarding the surge in airdrop and giveaway scams aimed at users of the XRP Ledger (XRPL). This substantial increase in fraudulent activities signals a troubling trend characterized by the use of advanced technologies such as AI for impersonation and wallet-draining attacks.
In a recent post on X, Schwartz alerted his over 700,000 followers, noting that the heightened interest around XRP from institutional investors and retail traders has made its holders more susceptible to phishing attempts. He emphasized the importance of caution, advising users to be vigilant against potential scams that take on an increasingly sophisticated form.
The most prevalent method of these scams involves fake airdrops. These schemes lure unsuspecting users to counterfeit promotional websites that promise free XRP tokens. Once users connect their non-custodial wallets, a malicious script is activated—a wallet drainer that authorizes a transaction to siphon off the user’s cryptocurrency, leaving them unaware until it is too late. The critical trap lies in the authorization step, which, once completed, cannot be undone on the blockchain.
Additionally, the scams also include giveaway schemes, where fraudsters falsely promise to return double any amount of XRP sent to a designated address. These deceitful initiatives are often couched within fabricated announcements from Ripple or associated milestone celebrations. The technological sophistication behind these scams has notably advanced in 2026, with attackers utilizing AI-generated deepfake videos on platforms like TikTok and YouTube. These deepfakes convincingly mimic Schwartz’s appearance and voice, further enhancing their chances of tricking retail investors.
Moreover, Schwartz raised concerns about a particularly insidious phishing campaign that has infiltrated Robinhood’s communications. By exploiting Gmail’s dot-trick for account creation and embedding harmful HTML payloads, attackers have managed to send emails that deceive users into believing they are legitimate communications from Robinhood, passing various authentication checks—SPF, DKIM, and DMARC.
The proliferation of fake accounts impersonating Schwartz and Ripple’s CEO, Brad Garlinghouse, has emerged as another significant issue. In the first quarter of 2026 alone, Ripple reported over 50 counterfeit accounts on Instagram and Telegram. Schwartz reiterated his warning, stating, “Anyone claiming to be me on Instagram, Telegram, or almost anywhere else is likely a scammer.”
As the cryptocurrency landscape grows increasingly complicated, the risk of scams continues to loom over unsuspecting holders. Users are urged to exercise caution and remain informed to safeguard their digital assets amid this rising tide of fraudulent activity.
