XRP transactions settle in 3–5 seconds and cost a fraction of a cent. That speed is a feature for legitimate cross-border payments — and a feature for people who need to move large sums before anyone notices. Check before you receive.
Why XRP is frequently used in scams
XRP's speed and low cost make it attractive for a specific type of fraud: the "giveaway" scam. Fake Ripple Foundation accounts promise to double any XRP you send. Victims forward coins to a wallet — which immediately forwards them again to an exchange before anyone can react.
XRP is also heavily used in romance scams and investment fraud. The scammer builds trust over weeks, then asks the victim to "invest" in an XRP-based trading platform. The platform shows fake profits. When the victim tries to withdraw, the funds are gone.
In 2024, the FBI Internet Crime Complaint Center reported that XRP was the third most-used cryptocurrency in investment fraud, after BTC and USDT. Average loss per victim: $47,000.
XRP address format
Every XRP address starts with the letter r and is 25–34 characters long. A destination tag is separate from the address — it is a number that identifies the recipient on a shared wallet (common on exchanges). When checking an exchange deposit address, check the base address, not the tag.
What we check for XRP wallets
- OFAC SDN matches — XRP addresses directly named in U.S. sanctions
- EU and UN consolidated sanctions list entries
- Known giveaway scam wallets (fake Ripple Foundation, fake Elon Musk promotions)
- Romance scam and pig-butchering operation wallets reported to Chainabuse
- Exchange-blacklisted addresses collected from public freeze announcements
- High-velocity wallets — addresses that received and re-sent funds within minutes, a pattern common in money mule operations
XRP's Destination Tag system means one exchange address serves thousands of customers. A wallet scoring high on risk might be an exchange's hot wallet, not a scammer. Always check the base address and use context to interpret the score.
Risk scores for XRP
- 0–25 (low): No matches in any database. Safe to transact.
- 26–50 (medium): The address interacted with flagged counterparties. Ask the sender to verify the source.
- 51–75 (high): Directly linked to reported scam wallets or sanctioned entities. Do not send.
- 76–100 (critical): Appears in OFAC SDN or confirmed scam database. Decline the transaction.
Practical checklist before an XRP transfer
- Paste the recipient address above. Wait 8 seconds for results.
- If score is below 25 — proceed normally.
- If score is 25–60 — ask for a secondary verification. For large sums, request the full report via @scorechain_amlbot.
- If score is above 60 — do not transact.
Full XRP report in Telegram — 30 seconds
Transaction history, counterparty analysis, risk score breakdown. @scorechain_amlbot is free for the first 3 full reports.
Open @scorechain_amlbot