XRP Holder Loses 400,000 Tokens in Sophisticated Phishing Scam

An XRP holder lost 400,000 tokens after falling for a phishing email that appeared to be a routine Ledger hardware wallet update. The victim received an email on Easter night at 10pm, prompting him to update his device. He clicked through and entered his wallet information, unknowingly handing over the credentials attackers needed to drain the wallet.

Kaltekis noted that phishing attempts have grown increasingly convincing in recent years, making it difficult even for those working in cybersecurity to distinguish real communications from fake ones.

The victim still had about 50,000 XRP held safely in a separate insured custody account, which required additional verification steps before any transaction could be approved. Kaltekis said the story wasn't meant to discourage self-custody but rather illustrate that it's not inherently foolproof against sophisticated phishing attempts.

The incident serves as a reminder for holders of XRP, Bitcoin, and other digital assets to verify unexpected update requests carefully and consider additional safeguards for larger holdings.