Disclaimer: The opinions expressed by our writers are their own and do not represent the views of U.Today. The financial and market information provided on U.Today is intended for informational purposes only. U.Today is not liable for any financial losses incurred while trading cryptocurrencies. Conduct your own research by contacting financial experts before making any investment decisions. We believe that all content is accurate as of the date of publication, but certain offers mentioned may no longer be available.

Ripple Chief Technology Officer Emeritus and XRP Ledger architect, David Schwartz, has drawn the community's attention to yet another scam scheme on social network X.

By posting a pair of text GIFs under a fake post, the blockchain industry veteran personally pointed to the threat, which appears to have triggered a wave of user reports and led to the rapid suspension of accounts impersonating crypto wallet Xaman.

The incident unfolded in the comments under posts by a hacked account of culture magazine "NplusOneMag", where scammers had launched an aggressive promotional campaign for a fake airdrop.

Instead of going through lengthy corporate procedures and preparing official statements, one of the chief architects of the XRP Ledger personally entered the scammers' thread and posted memes saying: "I can spot a scam from a mile away" and "This is a scam."

How XRP's "Guerrilla War" works and why it has to be fought manually

For the crypto community, Schwartz's reaction became a call to action. Users flooded the platform's administration with reports, helping get the fraudulent thread completely blocked before unsuspecting investors had time to lose funds.

For Schwartz, this fight is a routine guerrilla war. His profile has carried a pinned warning post for months: "Anyone claiming to be me on Instagram or Telegram is a scammer. Stay safe, XRP family."

Across the XRPL ecosystem, attacks targeting wallets have long become systematic. Scammers use the mechanics of hidden trading offers (Hidden Buy Offers) through NFT spam campaigns. Once a user approves a transaction in pursuit of a supposed bonus, the malicious transaction can completely drain their XRP balance.

Security in the retail sector still depends heavily on the personal vigilance of asset holders and the rapid manual response of the company's senior figures. Scammers will continue creating mirror accounts, and developers will continue getting them blocked. The only question is who will be faster during the next attack.