XRPL · Verification guide
Verify before you trust
The XRP Ledger's openness is its strength — anyone can issue a token or launch a "protocol." That also means impersonators, inflated numbers and high-yield schemes sit right next to the real thing. The good news: on a public ledger, the truth is verifiable. Here's how to check any XRPL token or protocol yourself in a few minutes — or paste an issuer address below and we'll check it for you.
Auto-checks the bidirectional xrp-ledger.toml, on-chain issuance and the XRPScan directory — instantly.
The golden rule: "on-chain" means there's evidence
A real on-chain project can prove it. It publishes its XRPL issuer address, its transactions are visible on a block explorer, and its code is open. If a site claims to be "fully on-chain" but gives you no address, no contract, no transaction hashes and no way to check — that absence is the answer. "Trust me, it's on-chain" with nothing to verify is the single most common tell.
The 5-step verification checklist
1 · Demand on-chain evidence
Find the issuer address or contract. No address, no transaction hashes, no explorer link → no proof. A legitimate project handling real value puts its accounts front and centre.
2 · Verify issuer identity — bidirectionally
A real issuer's identity is confirmed both ways: the project's domain hosts an xrp-ledger.toml that lists the issuer address, and the address points back to that domain. An on-chain Domain field a wallet sets on itself, or a vanity prefix (e.g. rBLaCK…), proves nothing — both are trivially spoofable.
3 · Read supply & holder concentration
Pull circulating supply on-chain with gateway_balances. Then check who holds it. A token can show a huge supply that sits entirely in the issuer's own wallet — "represented" value, not real adoption. Distributed value across many independent holders is what counts.
4 · Sanity-check the claims
Compare the story to reality. When was the domain registered (a site weeks old claiming a year-old audit is impossible)? Are the yields plausible — or 40–80%+ APY? Does it claim tech that doesn't exist on mainnet, like "Hooks" (Hooks run on the Xahau sidechain, not XRPL mainnet)?
5 · Verify audits & team
Real audits are published reports you can open and read, linked from the auditor too — not just a logo. Anonymous teams, principal lock-ups that stop you withdrawing, and "insurance" that can't be confirmed are the markers of a scheme, not a protocol.
Red flags we've documented
Real examples found on or around the XRP Ledger, shown so you can recognise the patterns. Facts as reviewed June 2026; verify for yourself before acting.
High-yield "protocols" with no on-chain proof
A "native XRPL yield protocol" (xrpro.gg) advertises up to 82% APY and $188.9M TVL, with audits dated Q3 2025. But its domain was registered May 2026— you can't be audited before you exist. It publishes no xrp-ledger.toml, no issuer accounts and no transaction hashes, claims "Hooks" (which don't run on XRPL mainnet), and locks principal for 90 days. None of its on-chain claims could be verified. Treat with extreme caution.
Brand-name impersonator tokens
Tokens named BlackRock, BUIDL, Goldman Sachs, Franklin and WisdomTree exist on XRPL — issued by vanity wallets that set their own Domain to the company's website. Those companies' real domains don't list the addresses back, and the genuine products (e.g. BlackRock's BUIDL) are issued on Ethereum, not XRPL. They fail bidirectional verification — impersonations, not the real fund.
Inflated "represented" headline numbers
Headline figures like "$4B in XRPL RWAs" can be mostly represented, not distributed: a single large token minted into one wallet with no independent holders inflates the total. The verified, investor-held figure is far lower. Always separate issued from held.
How xrpl.fi applies this
Every issuer on the dashboard is run through this same process: supply read live via gateway_balances, identity confirmed against the issuer's domain xrp-ledger.toml, and only distributed, verifiable value counted. Impersonators, dust and represented-only tokens don't make the list — so if it's on xrpl.fi, the issuer is real.
See verified data
Every tracked real-world asset on the XRP Ledger, each issuer identity-verified on-chain — supply, holders and 24h volume, live.