> For the complete documentation index, see [llms.txt](https://help.xaman.app/app/llms.txt). Markdown versions of documentation pages are available by appending `.md` to page URLs; this page is available as [Markdown](https://help.xaman.app/app/all-about-scams/airdrop-scams.md).
# Airdrop Scams
Xaman does not run airdrops. How to spot fake airdrop scams.
### Summary
**Xaman does not run airdrops.** Xaman is a self-custody wallet — we do not issue tokens, we have never done an airdrop and we will never do an airdrop. If you saw a post on social media claiming there is an Xaman airdrop, an automatic airdrop for XRP holders, a Xaman rewards program or some kind of token/XRP giveaway, the post is not from us.
This is our official channel on X: **@XamanWallet**. Any other account using a variation of our name is an impersonation.
### How fake airdrop scams work
1. **A fake account impersonating Xaman posts something like "the airdrop is live."** The fake account is usually a name swap — for example "Wallet Xaman" instead of "Xaman Wallet" — with a similar-but-different handle. A blue checkmark on X is a paid subscription; it does not prove who runs the account.
2. **A second account "confirms" it.** A name that sounds like a person of interest — an analyst, a journalist, a "Ripple insider" — reshare-posts the fake account to add credibility. Neither account is connected to Xaman.
3. **The post points at a "Rewards Desk", a website or a "claim" page.** The page is decorated with fake statistics: "42,600+ verified", "Snapshot ledger 98,847,120", "Window closes in \~28 days", "one wallet per claim". The numbers exist to make the scheme look real and to create a deadline.
4. **The page asks you to "connect your XRPL wallet, confirm eligibility, and sign."** When you do, Xaman opens a signing prompt for a **real transaction**. What that transaction actually does is send your funds to the scammer or hand them control of your account. There is no such thing as an inert "sign to claim" — every signature on the ledger is a real, final action.
### The one rule that catches it
**Xaman will never ask you to claim anything.** No airdrops, no rewards, no "sign before the window closes." You should never sign something you don't fully understand. If in doubt, contact us via the [**Xaman Support xApp**](https://xaman.app/detect/xapp:xumm.support-md).
### Three checks before you tap "claim"
1. **Is it from the real account?** Compare the account name *and* the handle, character by character. Xaman's official X account is **@XamanWallet**. A checkmark is a paid verification — it does not prove affiliation.
2. **Does it ask you to connect or sign on a site you do not know?** If yes, stop. "Connect your wallet and sign to claim" is the standard wallet-drainer pattern.
3. **Have you contacted Xaman Support to confirm?** If you are not 100% sure the airdrop is legit, contact us via the [**Xaman Support xApp**](https://xaman.app/detect/xapp:xumm.support-md).
### What to do
1. **Do not visit the link, do not connect your wallet, and do not sign anything** from the post or the accounts in it.
2. **Report the fake accounts on X** — especially the impersonation of Xaman. Taking it down helps protect the next person.
3. **If you already signed something**, treat your account as potentially compromised: move your funds to a fresh account and follow the steps in [*I've been scammed*](/app/all-about-scams/ive-been-scammed.md) article.
### Real airdrops do exist — how to tell the difference
Ecosystem projects occasionally run genuine airdrops. The difference is never the excitement; it is the source and the mechanics:
* A real airdrop is announced by **the project's own** official channels, and everything about it is checkable on the XRP Ledger: the token, its issuer, the amounts.
* A real airdrop never requires you to sign something you cannot read. Xaman shows you exactly what you are signing in every prompt — **if you cannot explain the transaction in one sentence, do not sign it.**
* A real airdrop has no artificial countdown designed to stop you from checking. Deadlines that punish you for being careful are a scam signal.
### What we are doing about scams
The XRP Ledger is a decentralized, public network. There are no "network police," no central authority that can reverse a transaction, block an address at the protocol level, or remove a scammer from the ledger. Every address is public, and anyone can send XRP, a token, an escrow, or an NFT to any other address. You are responsible for your own funds, and the strongest defense is recognizing a scam before you act on it.
What we do, every day:
* **Blacklist.** Xaman maintains a blacklist of thousands of known scam and spam accounts, updated daily from multiple sources: Ripple's own flags, the xrpl.to scam database, OFAC sanctions, and our internal monitoring. When you try to send to a blacklisted address, the app shows a warning before you sign.
* **Pre-sign warnings.** Before you confirm any transaction, Xaman checks the destination against the blacklist and other threat feeds. Known-bad addresses are flagged so you see the warning before you tap sign.
* **Memo suppression.** Memos from blacklisted or known-spam accounts are hidden by default, so a phishing link does not sit in your transaction history looking like a legitimate message.
* **Scam website takedowns.** We actively report and pursue takedown of websites that impersonate Xaman or the XRP Ledger.
* **Social media enforcement.** We report scam accounts on X and other platforms for removal.
* **Support-led forensics.** When you report a suspicious transaction, our team pulls the full ledger history, checks every involved address against the blacklist, and identifies the attack pattern. This is how new scam accounts get flagged and added.
* **NFT offer blocking.** You can turn off incoming NFT offers in your account settings so unsolicited buy offers stop appearing in your app.
What we cannot do:
* Reverse or delete a completed transaction.
* Stop an unsolicited incoming payment, escrow, or NFT at the protocol level.
* Control what a third-party website asks you to sign.
* Guarantee that a brand-new scam account has already been flagged.
The single best way to keep your assets safe in the future is[ **to contact us**](https://xaman.app/detect/xapp:xumm.support-md) if you are ever unsure about something. We live and breathe the XRP Ledger. We are constantly searching for new scams and are always here to help you verify whether an offer, airdrop, or transaction is safe before you "Slide to send."
It is very important that you **never sign a transaction you did not start yourself**. If something looks unexpected, contact [**Xaman Support**](https://xaman.app/detect/xapp:xumm.support-md) before you act. We will check it for you.
### A red flag worth knowing
Impersonation accounts do not only promote fake airdrops — they also fake "rewards", "token unlocks", "staking bonuses" and "mystery box" claims. The template is identical: a lookalike account, a deadline, and a "connect and sign" button. When in doubt, apply the three checks above, or ask [**Xaman Support**](https://xaman.app/detect/xapp:xumm.support-md) first. Asking costs nothing; signing the wrong thing costs your account.
**See also:** [*I've been scammed*](/app/all-about-scams/ive-been-scammed.md) · [*NFT Scams*](/app/all-about-scams/nft-scams.md) · [*I'm receiving tiny "dust" payments on my account*](/app/all-about-scams/dust-attacks.md)
***
---
# Agent Instructions
This documentation is published with GitBook. GitBook is the documentation platform designed so that both humans and AI agents can read, navigate, and reason over technical content effectively. Learn more at gitbook.com.
## Querying This Documentation
If you need additional information that is not directly available in this page, you can query the documentation by asking a question.
Perform an HTTP GET request on the following URL with the `ask` and `goal` query parameters:
```
GET https://help.xaman.app/app/all-about-scams/airdrop-scams.md?ask=&goal=
```
`ask` is the immediate question: it should be specific, self-contained, and written in natural language.
`goal` is what the user is ultimately trying to achieve, the reason they need the answer. Sharing it helps GitBook give you a better, more relevant answer. A goal is most helpful when it describes the outcome the user wants rather than restating the question. For example, with `ask=how do I create an API token`, a goal like `automate deployments from our CI pipeline` lets GitBook tailor the answer to that use case.
The response will contain a direct answer to the question and relevant excerpts and sources from the documentation.
Use this mechanism when the answer is not explicitly present in the current page, you need clarification or additional context, or you want to retrieve related documentation sections.