Question | Spam / Fake Ripple Community update.

[ripplefan2]

Hi Friends,

i need a little bit of advice. I just go the Spam email about the Fake Ripple Community update.
At first i I thought it was real so i did enter my wallet ID and press check.
So far so good but i did get a pop up connect to wallet.
But after 10 sec i did realise that my Nano Ledger S was still connected and login my Ledger Live.
I was a little bit in shock and removed the ledger right away.

So far so good and no coins are stolen.
But iam still a little in shocked.

Iam verry happy that i did use Nano Ledger S wallet but i just want to check if i need to do some extra changes to stay stafe so i can sleep
I already did the following:

-Scan PC

-Remove the Nano ledger software on my pc.

-Remove the Nano from my pc and put in a safe spot

Hope to hear.
Cheers !

 

Fake website

The fake email i got

Edited November 29, 2020 by ripplefan2

[BillyOckham]

You should move your funds immediately to a new wallet.

If you are lucky you will have time before they steal.  I can’t advise how to get a new wallet but maybe investigate Xumm wallet or another alternative.

Act quickly if you have typed your secret key into a fake website.

[BillyOckham]

Ok I just reread your post and I’m not sure...  did you need to enter your secret key into their site?  I suspect yes.  If so my advice stands...  move your funds as quickly as you can.

Maybe on to an exchange would be quickest... whatever you can do immediately.

YOUR LEDGER DOES NOT HOLD THE XRP.  IT HOLDS THE SECRET KEY.  THE XRP ARE OUT ON THE CLOUD.

So if they have your secret key because you typed it into their site then it doesn’t matter how disconnected your ledger is...  they can access your XRP with the key from any wallet software.

[ripplefan2]

Hi Billy,

Thanks for you post !
No i did not enter the key to there website.
When I saw the pop up i just realize that my nano ledger was still in my pc and open.
(I did transfer some ripple a few hours ago)

Thanks for the support.

[BillyOckham]

34 minutes ago, ripplefan2 said:

Hi Billy,

Thanks for you post !
No i did not enter the key to there website.
When I saw the pop up i just realize that my nano ledger was still in my pc and open.
(I did transfer some ripple a few hours ago)

Thanks for the support.

You are welcome.   I just want to check that you do understand the fundamental aspect that ignorance of puts people at risk...   the XRP are NOT on the ledger.  Is that how you understand it?

 

People think their ledger has the XRP so if they have that safe then their XRP are safe.  That’s not the case...  the ledger holds only the secret key (long string starts with S) or maybe (I don’t have one so don’t know) it holds the key but gives you a 24 word phrase that it can create the key from.

 

Entering that key or that phrase anywhere that is corrupted (even your own pc if it is infected) can mean the scammers have the keys and can take the XRP.

It sounds as if you are ok? But you are only ok if you didn’t reveal that key or phrase or allow access to it somehow.

If I had had a scare I would create a new XRP address and send the XRP there just to be certain they were safe.  Good luck to you.

[ripplefan2]

7 hours ago, BillyOckham said:

You are welcome.   I just want to check that you do understand the fundamental aspect that ignorance of puts people at risk...   the XRP are NOT on the ledger.  Is that how you understand it?

 

People think their ledger has the XRP so if they have that safe then their XRP are safe.  That’s not the case...  the ledger holds only the secret key (long string starts with S) or maybe (I don’t have one so don’t know) it holds the key but gives you a 24 word phrase that it can create the key from.

 

Entering that key or that phrase anywhere that is corrupted (even your own pc if it is infected) can mean the scammers have the keys and can take the XRP.

It sounds as if you are ok? But you are only ok if you didn’t reveal that key or phrase or allow access to it somehow.

If I had had a scare I would create a new XRP address and send the XRP there just to be certain they were safe.  Good luck to you.

Hello Billy,

Thanks so much for you message and support !

Yes iam aware how the system works.

For me the good news is that the key in on the Ledger and not on my pc.

Thanks !!

[Northstar4010]

Is the web page Ripplefan2 posted about community update a fraud? 

[ripplefan2]

14 hours ago, Northstar4010 said:

Is the web page Ripplefan2 posted about community update a fraud? 

Hi Northstart4010

Yes that was the fake website that i gor grom the email.

Its looks realy good but only after i got the popup i detected the fake site. (Fake site Ripple.com.so)

 

[BillyOckham]

For the record...  Ripple are NOT giving any XRP away and probably never will.  Anything that says they are is certainly a fraud scam.

[ripplefan2]

Thanks for that Billy!

 

[SquaryBone]

On 11/27/2020 at 11:42 PM, ripplefan2 said:

Hi Friends,

i need a little bit of advice. I just go the Spam email about the Fake Ripple Community update.
At first i I thought it was real so i did enter my wallet ID and press check.
So far so good but i did get a pop up connect to wallet.
But after 10 sec i did realise that my Nano Ledger S was still connected and login my Ledger Live.
I was a little bit in shock and removed the ledger right away.

So far so good and no coins are stolen.
But iam still a little in shocked.

Iam verry happy that i did use Nano Ledger S wallet but i just want to check if i need to do some extra changes to stay stafe so i can sleep
I already did the following:

-Scan PC

-Remove the Nano ledger software on my pc.

-Remove the Nano from my pc and put in a safe spot

Hope to hear.
Cheers !

 

Fake website

The fake email i got

You see which transactions you are signing and have to confirm on your Ledger and it shows amounts and stuff (Nano S at least). What did you confirm on your Ledger?

Incredible the moment people might get free stuff they'll let all guards down. EVERY mention of you getting stuff for free is a scam. It's literally that simple.

EDIT: if you didn't confirm anything your funds are safu. The only thing the device does is sign transactions, and that happens when you confirm signing transactions. So either you have confirmed a transaction with x XRP and it's already too late, or nothing happened. It's not like they install a backdoor on your Nano Ledger S.
Unless you felt the need to give them the 24 word mnemonic.

Edited November 30, 2020 by SquaryBone