In South Korea, a scam involving fake XRP staking has been uncovered: damages of $8.5 million
Seoul police have shut down an organized group of fraudsters who managed to steal 3.4 million XRP tokens from 71 investors. In fiat equivalent, this amounts to approximately 12.3 billion won, or about $8.5 million. Three suspects have already been detained, but the investigation has revealed a much larger picture than initially anticipated.
The scheme was built on imitating a legitimate crypto project. The attackers posed as developers of the Flare Network ecosystem, promoting a fake XRP staking service allegedly on behalf of Ripple. Investors were promised a yield of 1.5–1.8% monthly with a guaranteed return of invested funds—a classic lure for those chasing super-profits without proper due diligence on the counterparty.
Mechanics of the Deception
In October 2025, the fraudsters launched the website Fxrpntwork.com, which copied the design of the official Flare Network and FXRP token resource almost pixel by pixel. To create an appearance of credibility, they pre-placed disinformation on blogs, Wikipedia, news portals, and YouTube. The project's advertising was voiced by a hired actor, adding to the fake persuasiveness.
Victims were convinced to transfer XRP from Korean exchanges via foreign platforms to wallets controlled by the scammers. Just eight days after the launch—on October 23—the website disappeared, and the organizers vanished into thin air.
Scale and Investigative Actions
The trigger for the investigation was a signal from a foreign crypto exchange that noticed an anomalous surge in suspicious transactions. Law enforcement conducted more than 50 searches, detaining two alleged organizers and their accomplice. A fourth person involved, hiding abroad, has now been placed on an international wanted list via an Interpol "Red Notice."
During the analysis of fund flows, investigators tracked assets totaling 27.3 billion won ($18.8 million). They managed to freeze cryptocurrency worth 17.3 billion won, but about 10 billion won had already been withdrawn. This speaks volumes that the actual damage could be several times greater than the confirmed $8.5 million.
This case is yet another reminder that even in regulated jurisdictions such as South Korea, investors remain vulnerable to well-crafted phishing schemes. Against the backdrop of recent incidents, including the disappearance of 22 BTC from the cold wallet of the Gangnam police station, it is clear that security in the crypto industry requires not only technical measures but also heightened vigilance at all levels.