The XRP Ledger is a good place to collect. Settlement takes three to five seconds, fees are fractions of a cent, and NFTs are native to the ledger rather than bolted on. Most of the people building here are exactly who they say they are.
A few are not, and they aim their effort at new collectors. Everything below is a habit rather than a rule — small checks that take seconds each and remove almost all of the risk you can actually control.
🔐 Always verify the issuer address
Every NFT on the XRPL is tied to an issuer address: the wallet that minted it. That address, not the artwork, is the token's real identity. A forger can copy an image pixel for pixel in seconds. They cannot mint from someone else's wallet.
- Get the official address from an official place
The artist's own website, their pinned post, or the project's Discord announcements. Navigate there yourself — do not follow a link someone sent you to get it.
- Compare the full string
Check the issuer on the listing against the published address character by character, or at minimum the first six and last six. Scammers pick addresses that look right at a glance.
- Check the taxon too
All genuine NFTs in a collection share one issuer and one taxon. A right-looking piece under a different taxon does not belong to that collection.
- Ask if anything is ambiguous
Post the address in the project's Discord and ask a mod to confirm. It costs two minutes and it is completely normal behaviour.
Never rely on the image, the collection name, or the number of listings as proof of authenticity. Fake collections are built specifically to pass those three tests. Issuer and taxon are the only checks that mean anything.
The fuller pre-purchase routine — edition size, transparency, listing history — is in The Collector's Checklist.
📧 DMs, links and fake airdrops
The most reliable rule in this space: if someone DMs you first about money, it is a scam. Not usually. Effectively always. The standard shapes it takes:
- A surprise airdrop, giveaway or allowlist you do not remember entering, with a claim link attached.
- Someone from "support" or a "moderator" offering help with a problem you did not report.
- A collector offering well over the odds for a piece, with a private site to complete the sale on.
- A collab or commission offer that requires you to install or sign something first.
The response to all of them is identical. Do not click. Do not connect your wallet. Block and report. If a drop is real it will be announced publicly, and it will still be there when you reach it through a link you found yourself.
Impersonation on X and Discord deserves its own guide, and it has one: Safety on X and Discord.
📱 Signing-request hygiene
Xaman is a genuinely safe wallet because nothing happens without your approval. That protection is only as good as your reading of the request in front of you.
- Read the request before you approve it. Check the transaction type, the amount, the counterparty and the account it acts on. If it does not match the action you just took, reject it.
- Reject anything you do not understand. Rejecting a legitimate request costs one repeat click. Approving a malicious one can cost the wallet.
- Be suspicious of blanket permissions. A request that would let another account act on yours, or that arrives from a site you did not start an action on, is not routine.
- Keep your phone locked and updated, and update the wallet app from the official store listing only.
- Review your history. Every signed transaction is listed in your wallet. Glancing through it after a busy session is how you catch something you do not recognise while it still matters.
Never share, type, photograph or enter your seed phrase or secret key anywhere — not on a website, not in a DM, not into a "wallet validator", "sync tool" or "recovery service", and not for anyone claiming to be support. XRPL Home, Xaman and every legitimate team on this ledger will never ask you for it, and there is no genuine situation in which you need to give it to a person or a site. Anyone asking is stealing from you.
🏠 Where you buy matters
Buy through an interface that shows you what you are buying. Explore indexes art from across the XRP Ledger — mint anywhere, create anywhere, find it home — with issuer, collection, artist and provenance on the piece, so the checks above take seconds rather than detective work. Your Vault is where everything you hold lives afterwards.
XRPL NFTs are portable by design: a token you buy is yours across any XRPL-compatible interface, and a creator royalty follows the token wherever it trades. That openness is one of the better things about collecting here.
What deserves real caution is the off-market deal — someone selling you a piece by direct wallet transfer, outside any listing, usually with a reason it must happen right now. No escrow, no recourse. Decline it.
✅ Verified artists and provenance
Provenance is the quiet safety feature. Pieces minted through XRPL Home carry their creation details with them, including whether the work is Human-Created, AI-Assisted or AI-Generated, disclosed by the artist at mint. Physical work paired with a Living COA™ goes further, recording authentication, sale, fulfilment and reveal across the object's whole life.
Look for status badges on a piece: Authenticated Physical, Reveal Locked, Genesis Reveal Mint™, XRPL Verified. Artists marked 🔋 by $DOOD™ are contributing members of the ecosystem with transparent minting practices — a useful signal about the person behind the art.
The CommUnity is genuinely good at this. Post an issuer address in the Discord and ask before you buy — people answer, and nobody has ever been mocked for checking.
🚨 If you think something went wrong
Move quickly and calmly.
- Stop signing
Close the site or app that produced the request. Do not approve anything else from it, including anything claiming it will fix the problem.
- Move what you can
If a wallet may be compromised, move remaining assets to a new wallet created on a device you trust. Never reuse the compromised keys.
- Tell the community
Report it in the official Discord and on X. Naming the pattern publicly is how the next person avoids it.
- Ignore the recovery offers
Every "fund recovery" account that appears in your replies afterwards is the same scam wearing a different hat.
Collecting here should feel calm. Check the issuer, read the request, ask when you are unsure — and for the wider, non-XRPL version of these habits, start with Crypto Safety 101.
Key takeaways
- The issuer address is the real identity of an NFT; the image is the easiest part to fake.
- Genuine pieces in a collection share one issuer and one taxon, and both are checkable in seconds.
- Nobody legitimate will ever ask for your seed phrase or secret key, and there is no situation where typing it into a website is correct.
- Read what a signing request actually does before you approve it, then check your wallet history afterwards.
- If someone DMs you first about money, an airdrop or a claim link, it is a scam.
Find something worth keeping
Discover art from across the XRP Ledger — minted anywhere, indexed here.
Explore XRPL Home More from the HearthWritten for the XRPL creator and collector community and originally shared with the 🔋 by $DOOD™ CommUnity. XRPL Home is the home for XRPL art — mint anywhere, create anywhere, find it home.
Nothing here is financial advice. Always do your own research before buying, minting, or investing.