Key Takeaways
- • Seoul Metropolitan Police arrested three suspects and obtained an Interpol Red Notice for a fourth in connection with a fraudulent XRP investment platform that collected approximately 3.4 million XRP ($9 million USD equivalent) from 71 investors between October 16-23, 2025.
- • The scam ring operated Fxrpntwork.com and promoted the fake platform through portal blogs, YouTube videos, and online articles, promising guaranteed monthly returns of 1.5% to 1.8% while instructing victims to transfer XRP through overseas wallets controlled by the perpetrators.
- • Fraudsters misappropriated branding from Flare Network and FXRP to create false credibility, exploiting investor confusion about legitimate blockchain infrastructure and asset tokenization systems.
- • South Korean authorities have warned cryptocurrency investors to verify official sources before transferring assets and to avoid unverified investment opportunities promoted on social media platforms.
Summary
On July 30, 2026, the Seoul Metropolitan Police Agency announced the dismantling of a major cryptocurrency fraud ring operating a fake XRP investment platform. The operation resulted in the arrest of three suspects—two 29-year-old individuals and one 34-year-old accomplice—while authorities pursued a fourth 29-year-old suspect overseas through an Interpol Red Notice. The criminal enterprise allegedly defrauded 71 investors of approximately 3.4 million XRP, valued at approximately $9 million USD, during a concentrated two-week operational window from October 16-23, 2025.
The fraudulent scheme centered on Fxrpntwork.com, a counterfeit investment platform promoted extensively across digital channels including YouTube, online portal blogs, and news articles. The perpetrators lured investors with promises of guaranteed principal protection and monthly returns ranging from 1.5% to 1.8%—returns inconsistent with legitimate cryptocurrency staking or yield protocols. The operation employed a sophisticated asset diversion mechanism: victims were instructed to withdraw XRP from South Korean cryptocurrency exchanges, route the tokens through overseas platforms, and ultimately deposit them into digital wallets controlled by the scam ring.
A critical element of the fraud involved brand impersonation. The criminals misappropriated naming conventions associated with Flare Network and FXRP to fabricate legitimacy. This strategy exploited investor unfamiliarity with actual blockchain infrastructure; Flare's legitimate FAssets system is a genuine protocol designed to represent assets such as XRP on the Flare network through overcollateralized mechanisms, enabling token participation in decentralized applications. By mimicking established brand identities, fraudsters capitalized on information asymmetries in the cryptocurrency investment market.
Seoul Metropolitan Police issued explicit guidance to cryptocurrency investors, cautioning against reliance on unverified social media promotion and emphasizing the necessity of independent verification through official channels before committing capital. The advisory reflects the police department's assessment that social engineering and platform spoofing remain primary attack vectors in cryptocurrency fraud schemes targeting retail investors.
The fraudulent scheme centered on Fxrpntwork.com, a counterfeit investment platform promoted extensively across digital channels including YouTube, online portal blogs, and news articles. The perpetrators lured investors with promises of guaranteed principal protection and monthly returns ranging from 1.5% to 1.8%—returns inconsistent with legitimate cryptocurrency staking or yield protocols. The operation employed a sophisticated asset diversion mechanism: victims were instructed to withdraw XRP from South Korean cryptocurrency exchanges, route the tokens through overseas platforms, and ultimately deposit them into digital wallets controlled by the scam ring.
A critical element of the fraud involved brand impersonation. The criminals misappropriated naming conventions associated with Flare Network and FXRP to fabricate legitimacy. This strategy exploited investor unfamiliarity with actual blockchain infrastructure; Flare's legitimate FAssets system is a genuine protocol designed to represent assets such as XRP on the Flare network through overcollateralized mechanisms, enabling token participation in decentralized applications. By mimicking established brand identities, fraudsters capitalized on information asymmetries in the cryptocurrency investment market.
Seoul Metropolitan Police issued explicit guidance to cryptocurrency investors, cautioning against reliance on unverified social media promotion and emphasizing the necessity of independent verification through official channels before committing capital. The advisory reflects the police department's assessment that social engineering and platform spoofing remain primary attack vectors in cryptocurrency fraud schemes targeting retail investors.
Go deeper than the headline
Research every firm in this story, track the ones that matter and get the daily briefing — free for 7 days.