Ripple co-founder and CTO David Schwartz issued an urgent public warning about what he described as a “huge recent escalation in airdrop and giveaway scams targeting XRPL users,” signaling a coordinated wave of information campaigns about XRP scams that have become significantly more sophisticated thanks to AI-generated impersonation and wallet draining technology.
The warning, posted to its more than 700,000 followers on X, comes as XRP is attracting high institutional attention and retail volume, precisely the conditions that make its holder base a high-value phishing target. Bearish signal for confidence in the ecosystem.
Discover: Best Pre-Launch Token Sales
Ripple News: How the attacks work, fake airdrops, wallet drainers and leaders cloned by AI
The mechanism here deserves to be understood precisely. The dominant attack vector is the fake airdrop: users are directed to a fraudulent promotional site promising free XRP tokens, where connecting a non-custodial wallet triggers a malicious script, a wallet drainer, which executes a single authorized transaction to drain the holdings before the user realizes what has happened.
The authorization step is the catch; once signed, the transaction is irreversible on-chain.
Gift scams work through a simpler but equally effective game of social engineering. Fraudsters promise to return double the amount of XRP sent to an address controlled by the fraudsters, wrapping the narrative around fabricated Ripple announcements or milestone celebrations.
Delivery infrastructure has matured significantly in 2026. Attackers are deploying AI-generated deepfake videos on TikTok and YouTube that clone Schwartz’s image and voice with enough fidelity to fool retailers.
In a separate and particularly sophisticated attack vector, Schwartz reported a phishing campaign that injected fake emails into Robinhood’s infrastructure, exploiting Gmail’s dot-trick for account creation and embedding malicious HTML payloads in device names, with messages passing SPF, DKIM, and DMARC authentication checks, making them appear as a legitimate match from Robinhood.
Fake accounts impersonating Schwartz and Ripple CEO Brad Garlinghouse have proliferated on Instagram and Telegram, with Ripple reporting more than 50 such accounts on both platforms in the first quarter of 2026 alone.
Schwartz explicitly warned: “Anyone pretending to be me on Instagram, Telegram or almost anywhere else is probably a scammer. »
Discover: Best Pre-Launch Token Sales
The Ripple News post: David Schwartz, CTO of Ripple, has just been warned that AI cloned executives are draining XRP wallets, are you at risk? appeared first on Cryptonews.
