XRP Wallets Drained by Fake “Ripple Payout” NFT Phishing Scam

A new phishing scheme is targeting holders of XRP by tricking them into accepting fraudulent “reward” and “payout” NFTs that, once approved, siphon funds directly out of their wallets. XRP Ledger explorer Bithomp issued an alert about the campaign, warning that at least one victim lost roughly $15,000 in a single transaction.

According to Bithomp, the scam relies on a transaction type known as NFTokenAcceptOffer. Victims believe they are simply claiming a free digital collectible, but the underlying code instead executes a large withdrawal from their balance and routes it to the attacker’s wallet, leaving the user holding a worthless token.

How the fake token scam works

Screenshots shared by Bithomp show that one victim had accepted an offer for a token called “Ripple Payout Token #7357,” believing it to be a legitimate reward. Instead, accepting the offer triggered the transfer of funds to the scammer.

Bithomp says bad actors are taking advantage of the XRP Ledger’s low transaction fees to mint hundreds of these fraudulent NFTs every day. The tokens are given official-sounding names designed to create a false sense of legitimacy and urgency, including “Securing XRPL Proof,” “XRP Earning Permit,” “XRP Cashback Card,” “Ripple Benefit Badge,” “Boosting Ripple Card” and “Ripple Grant Voucher.”

These bogus assets are distributed directly to active XRPL wallets or promoted on social media, prompting recipients to connect their wallets and sign a transaction, at which point the malicious code drains their balance.

Part of a wider crypto scam surge

The XRP-focused campaign is not an isolated incident. A recent FBI report found that cryptocurrency-related fraud accounted for the highest reported losses of any scam category in the United States last year, with Americans losing more than $11.3 billion to crypto-related scams in 2025.

Blockchain analytics firm Chainalysis estimated in a 2026 report that a record $17 billion was stolen globally through crypto scams. Impersonation schemes remain the most common form of fraud, and the growing use of generative AI tools is making such scams increasingly difficult for investigators and platforms to detect and stop.

XRP holders are advised to treat unsolicited NFTs and unfamiliar transaction requests with suspicion, particularly any asset with “reward,” “payout,” “cashback” or “grant” branding, and to verify offers before signing wallet transactions.