Is xamanswap.com a scam? TrustSniffer's high-risk assessment: 0/100

Security Alert

Fortinet, Kaspersky, Sophos flagged this site in external intelligence checks, indicating elevated compromise/scam exposure that requires immediate caution.

XamanSwap (xamanswap.com) presents itself as a non-custodial decentralized exchange on the XRP Ledger. Its single-page web app and marketing landing page offer token swaps, cross-chain XRP bridging, liquidity pools with advertised yields, and "Earn XRP" activity rewards, all reached by connecting a wallet. Its apparent business model is a stated 0.3% protocol fee on swaps. The site says this fee is passed to liquidity providers and reward holders, and promotional yields and rewards are used to draw in wallet connections and deposits.

Scam/Impersonation Risk

The site carries confirmed contradictions and is blacklisted by multiple major threat-intelligence engines, including several tier-one security vendors. This external detection is the decisive risk factor. Protective infrastructure and a valid certificate cannot offset it. The product claims add to the concern. The homepage advertises pool APYs of 14–32%, weekly "Earn XRP" rewards for every swap, pool deposit and bridge, and a "$2.4B+ volume traded" counter. It also advertises "100+ tokens live" and a "your keys, your funds" non-custodial promise. None of these figures is backed by an audit, a data source or a named operator. The reward payments are said to come only from "protocol fees", so the site gives no verifiable source for the yield it promises. The page also contradicts itself. It claims non-custody, yet the bridge section states the bridged XRP is held under Hex Trust institutional custody and depends on LayerZero. It also disclaims staking, yet elsewhere invites visitors to "Stake XRP to earn protocol revenue". The brand name borrows "Xaman", the name of an established XRP wallet, on an unofficial domain with no verifiable affiliation. No brand impersonation was confirmed, and no conflicting legal identities were found. Visitors are nonetheless steered toward connecting a wallet and depositing funds before any accountability is established. Evidence:

• Homepage: the headline "Your keys. Your funds. Always." and the non-custodial claim conflict with the bridge section's statement of Hex Trust custody and LayerZero dependence.
• Homepage: the "Stake XRP to earn protocol revenue" wording conflicts with the site's own "no staking" assertion.
• Homepage: pool APYs of 14–32%, live "Earn XRP" rewards and a "$2.4B+ volume" counter appear with no audit, no reward-funding source and no verifiable data.
• Domain registered 2026-07-18 (~0.25 years old). The web archive holds a single snapshot, dated 2026, so there is no long operating history behind the volume and yield claims.

Regulatory Verification Notes

The site discloses no legal entity, licence, registration number, jurisdiction, audit or contact channel, and it publishes no terms or about page that identifies an operator. For a platform that invites wallet connections, token swaps, cross-chain bridging and liquidity deposits, this missing information leaves its regulatory standing unverifiable. This is a disclosure gap in its own right. It does not prove wrongdoing, but together with the external blacklisting it removes any basis for assuming accountability. No third-party broker or regulatory-registry match exists for the site, and the registrant is recorded only as a generic domain administrator. Real-world identity therefore remains unverified. Evidence:

• Homepage: no legal entity, licence authority, registration number, audit report or physical address is presented.
• The site shows no contact channel, and the domain is registered through the registrar Atak Domain.
• Hosting is served from AS13335 (Cloudflare, US). TLS certificate issued by WE1 (DV, domain-validated only), valid to 2026-12-14.
• No recognised DeFi-protocol listing exists to corroborate the claimed volume or locked value.

What to Verify Next

Any engagement should start from the position that the platform is unproven. The bridge custodian and the cross-chain messaging provider named on the homepage should each be asked, through their own official channels, whether they have any relationship with this site. The official Xaman wallet publisher should be asked whether it recognises this domain or the brand name. The advertised yields, the weekly reward mechanism and the volume figure should be checked against independent on-chain data rather than the site's own counters. A smart-contract audit and a named, registered operator should also be sought, and the absence of both should be treated as disqualifying for any fund deposit. Official support channels should be confirmed independently of the site. Evidence:

• Homepage: the Hex Trust and LayerZero references can be tested directly with those providers.
• Homepage: the "$2.4B+ volume traded" and "100+ tokens live" claims can be tested against independent public blockchain data.
• Homepage: the name "Xaman" appears on a domain with no demonstrated link to the original wallet brand.

Summary Verdict

Available evidence supports a high-risk assessment of xamanswap.com. Confirmed external threat detections, a very recently created domain and promotional claims that are self-contradictory and unverifiable all point the same way. These signals converge, and the weak technical hygiene seen elsewhere does not offset them. The site cannot currently be regarded as trustworthy for any financial or credential-bearing interaction.

Infrastructure Integrity

The site sits behind Cloudflare's CDN and WAF, and every observed address is a Cloudflare edge address. The real origin server is not exposed, so hosting cannot be independently attributed to the operator, and content could be changed quickly behind the edge. The protection and the valid domain-validated certificate are mitigating factors only. They show the transport is encrypted and the site is shielded from some attacks. They say nothing about the legitimacy of the operator or the platform.

Closing Assessment

Wallets should not be connected to this site, and no funds, seed phrases or signing approvals should be committed to it. Viewing the pages passively is the only reasonable use until independent audits, a verifiable operator and a clean external reputation exist.