Trail 12 of 12
Buying, Wallets and Safety
Start with the scam pages, which rest on government data. The FBI’s IC3 says crypto investment fraud was the highest source of financial losses to Americans in 2025, at $7.228 billion reported. IC3 also recorded 10,516 recovery-scam complaints and $1.4 billion in losses in 2025. Ripple says it will never ask you to send it XRP. Scams can be reported to IC3 and the FTC in the US, or to police and the Canadian Anti-Fraud Centre in Canada.
Account and custody pages come next. IC3 counted 971 SIM-swap complaints in 2025, with $17.4 million in reported losses. The FTC (September 2022) ranks security keys as the strongest two-factor method. XRPL.org says no one can restore access to an XRP Ledger account. A spot XRP ETF share is not the same as owning XRP, and it is not simply safer.
Much stays open as of 30 September 2026. Key storage, destination tags, reserve amounts, address poisoning and exchange bankruptcy have no sourced answers yet. Bitget reported losing 103 million XRP on 24 September 2026. The 247 Wall St. report of 27 September 2026 does not say whether customer balances were affected.
Published Updated
Scams
- Are XRP giveaways real? Is Ripple giving away free XRP?
No. A giveaway that asks you to send XRP first is a scam. The FTC says free-money promises are always fake. Ripple, which says its CEO appears in… - Someone I met online is showing me big crypto profits. Is it real?
It matches the pattern of crypto investment fraud, which the FBI's IC3 says was the highest source of financial losses to Americans in 2025, at $7.228… - Someone says my bank account is compromised and I should move money into crypto. Is that real?
No. The FTC and the Canadian Anti-Fraud Centre describe this as a known impersonation script, and the CAFC says institutions never ask you to move…
How each custody model has failed
- How do crypto exchanges actually get hacked if they use cold wallets?
They record that Bitget reported losing 103 million XRP on September 24, 2026 in a breach 24/7 Wall St. linked to North Korea (September 27, 2026).… - What happened in the September 2026 Bitget theft, and were customers' funds affected?
24/7 Wall St. reported on September 27, 2026 that hackers took $351.6 million from Bitget, and that Bitget reported the loss of 103 million XRP on… - What happened with the D'CENT wallet hack, and am I affected?
This site cannot yet say what happened in the D'CENT incident or who is affected. The open list below records what is not yet established about the… - Can a hardware wallet be hacked, and how do I verify one is genuine?
Yes. FINRA says hardware wallets are not totally immune from sophisticated hacking and can break down, be lost or be stolen. Ledger said in a December…
How the XRP Ledger handles your XRP
- Why must I deposit XRP before a new wallet works?
This page can't yet explain why a new XRP Ledger address needs a first deposit. As of September 30, 2026, no XRP Ledger documentation on account… - Why is some of my XRP locked (the reserve), and can I get it back?
The XRP Ledger locks part of every account's balance as a reserve you cannot send. Its xrpl.org documentation puts the current Mainnet reserve at 1 XRP… - What is a destination tag, and what if I forgot it?
A destination tag is a number added to an XRP payment that tells a shared address, such as an exchange's, which customer to credit. XRPL.org… - How do I move XRP from an exchange to my own wallet without losing it?
Withdraw to an address copied from your own wallet, check every character as the FBI advised in April 2024, and add a tag only if the receiving address… - How do I look up and read an XRP Ledger transaction on a public explorer?
XRP Ledger documentation states that the simplest, most foolproof way to look up a processed view of a transaction is on a full history server, and… - Can a crypto transfer be reversed?
Usually not. XRP Ledger documentation says a transaction in a validated ledger can never change, and Ripple says it cannot reverse transactions, even… - What is a trust line, and how do I check that a token on the XRP Ledger is genuine?
Establishing a trust line is one of the XRP Ledger's core functions and requires XRP, according to 21shares' TOXR product page (29 September 2026).… - Can my XRP be frozen or taken back?
No ledger rule in this site's sources lets anyone freeze or claw back XRP itself. The August 6, 2026 xrpld 3.3.0 release notes tie clawback checks to… - Why are there strange tokens, airdrops or messages in my XRP wallet, and should I claim them?
Strange tokens, airdrops and memos in an XRP wallet are unsolicited transfers from other ledger accounts, which an FBI notice of June 3, 2025…
How buying works
- How do buying and selling XRP work, and where can people do it?
People can buy and sell XRP on crypto platforms, which trade around the clock, or through U.S. spot XRP ETF shares bought at a brokerage during market… - How do I check that a crypto platform is registered and legitimate?
Check the regulator's own public record rather than the platform's own claims, and confirm the exact legal entity, the activity it may carry out and… - Why does the exchange want my ID?
Canadian crypto trading platforms ask for ID because securities law requires Know Your Client checks before an account opens, and they must also meet… - Is there a limit on how much XRP I can buy in Canada?
Registered Canadian platforms must complete Know Your Client checks and meet anti-money-laundering and FINTRAC requirements before opening an account.… - What fees do I really pay to buy XRP, and what's cheapest?
The XRP Ledger's own charge is 10 drops (0.00001 XRP) per standard transaction, destroyed rather than paid to anyone, XRPL.org said as of September… - Are crypto ATMs a safe or sensible way to buy XRP?
Crypto ATMs are not a safe default, because scammers often use them as the payment route. The FBI's Internet Crime Complaint Center counted 13,460… - How do I buy an XRP ETF, including in Canada or in a retirement account?
Canadian XRP ETFs are bought through a brokerage account, CryptoNewsDaily.ca reported; it says three launched on the TSX in June 2025 and are available… - Is owning an XRP ETF the same as, or safer than, owning XRP?
Owning an XRP ETF is not the same as owning XRP, and it is not simply safer. A spot ETF share is a claim on XRP that a trust's custodians hold, so the…
When something goes wrong
- My XRP transfer hasn't arrived or went to the wrong place. What now?
First look up the transaction by its hash. If it reached an exchange without the right destination tag, contact that exchange; wallet maker D'CENT says… - How do I spot and report an XRP scam, and what do I do if I've been scammed?
Save the transaction hashes, addresses, amounts, times and messages, and pay no one who offers recovery. In the US, report to the FBI's IC3 and the… - My XRP was stolen. Can I recover it?
Recovery is possible but exceptionally difficult, a Florida crypto-fraud lawyer writes: it needs a clear evidence trail and a U.S. connection. The main… - Someone says they can recover my lost crypto for a fee. Is it real?
It fits the pattern of a recovery scam. The Canadian Anti-Fraud Centre says a request for money to recover money already lost is fraud, and the FBI… - How do I find or recover old XRP (a paper wallet or a forgotten service)?
Self-held XRP can be reached again only with its secret seed or private key; XRPL.org says that without the secret the account cannot be used. The…
Taxes and inheritance
- Do I pay tax on XRP in Canada or the US?
Yes, when XRP is disposed of. In Canada, half of a capital gain is included in income. In the US, selling or swapping it gives a capital gain or loss.… - How do I work out my cost basis and gain on XRP bought at different times and prices?
The gain is what the XRP brought in minus what those units cost, with buying and selling fees counted. The CRA calls the cost the adjusted cost base.… - What records do I need to keep and report for crypto taxes?
Keep a record of every acquisition, sale, swap, spend, gift and transfer: date and time, units, value in your own currency, fees, the other party,… - How are XRP yield, lending income, AMM fees and airdrops taxed?
Staking rewards and hard-fork airdrops count as income when you gain control of them, under IRS rulings from 2019 and 2023. The CRA says platform… - Do I have to report XRP held on a foreign platform or in self-custody on foreign-property or foreign-account forms?
Canada's T1135 applies when foreign property cost over $100,000, but no CRA statement on when crypto counts as held outside Canada was found. In the… - Can I deduct crypto I lost to a scam?
In the US, some scam losses qualify: a March 2025 IRS Chief Counsel memo and the 2025 Form 4684 instructions say a theft loss may be claimed when the… - What happens to my XRP when I die?
An executor may be able to access XRP held on an exchange through its estate process, a June 2026 law-firm article says. That often requires death…
Where your XRP can be held
- Where should I keep my XRP: on the exchange or in my own wallet?
As of September 30, 2026, the public sources cited here do not show either choice as the safer one. One platform's custody failed this month. 247 Wall… - What's the difference between a hot wallet, a cold wallet and a paper wallet?
A hot wallet keeps your crypto access on an internet-connected phone or computer, a cold wallet uses paper or hardware that generally isn't connected,… - What happens to my XRP if the exchange goes bankrupt?
As of September 30, 2026, I could not find any court, trustee, or regulator records from any exchange bankruptcy. An OCC letter of December 12, 2025… - Is my crypto insured like a bank account?
As of 30 September 2026, none of this site's sources show crypto covered by deposit insurance. The OCC's 12 December 2025 letter says Ripple National… - What rules must a Canadian crypto platform follow to hold my XRP?
The Ontario Securities Commission's investor site said in September 2025 that a crypto trading platform may not hold all clients' crypto in its own… - Which wallet is best for XRP, and how do I choose one without getting a fake or flawed one?
This site names no best wallet for XRP. BitBox says to buy from it or an authorized reseller, and to stop if its app reports the device is not… - Should I spread my XRP across several exchanges and wallets?
No regulator or court source held by this project prescribes spreading XRP across several exchanges and wallets. Splitting limits the loss from one…
Attack mechanisms and defences
- What's the biggest single cause of crypto losses for ordinary people?
The FBI's Internet Crime Complaint Center (IC3) reports that crypto investment fraud was the highest source of financial losses to Americans in 2025,… - How do I keep my XRP wallet, keys and recovery phrase safe?
Keep the recovery phrase and private keys secret, offline and physically secure, because anyone who holds them controls the account and nobody can… - How much should I keep in a hot wallet versus cold storage?
No public authority sets an amount or ratio for hot versus cold storage as of October 1, 2026. FINRA describes hot wallets as convenient but exposed to… - What is air-gapped signing, and do I need it?
Air-gapped signing means approving transactions on a device kept off the internet, so the secret key never goes online. XRPL.org calls any setup that… - What XRP Ledger features can protect my account (regular keys, multi-signing, disabling the master key)?
Three built-in features can guard an XRP Ledger account: a regular key pair, multi-signing, and disabling the master key pair. The XRP Ledger… - What is address poisoning, and how do I avoid it?
Address poisoning is a scam in which criminals send tokens from an address that looks like one you have dealt with before, hoping you pay the fake… - What is a malicious signing request or wallet drainer?
A malicious signing request is a transaction someone tricks you into approving that sends your funds, or control of your account, to them; a wallet… - Can someone steal my crypto through my phone number (SIM swap)?
Yes. A SIM swap moves your phone number to a criminal's device, so texted login codes and password resets go to them. The FBI's IC3 counted 971… - How do I secure my account on a crypto trading platform (security keys, withdrawal allowlists, alerts)?
The US Federal Trade Commission (September 2022) ranks security keys as the strongest two-factor authentication method and says authenticator apps are… - Are people really being attacked physically for crypto?
Yes. Chainalysis counted 46 violent crypto-related incidents worldwide through late June 2026 and estimates $58 million was taken this way in 2025, a… - How do I limit the personal data that links me to my crypto holdings?
Don't post about your holdings or wallet addresses, keep your phone number, home address and birth date off public profiles, and treat every company… - Can I lose my XRP without anyone hacking me?
Yes. XRPL.org says no one can restore access to an XRP Ledger account, so a lost recovery phrase or key, a signing setup that leaves no usable key, or…