Scam Blocklist
Check a wallet, a token issuer or a domain against the xrpl.to blocklist before a user sends to it. No key needed, and never rate-limited.
For one wallet use GET /v1/scams/check/{account}; for the whole list, GET /v1/scams/addresses.
Scams
- GET
/v1/scams/addressesTHE canonical scam blocklist: top-level addresses[] is the deduped union of every blocked account (drainers, dust/token spam, phishing, impersonation, fake airdrops, NFT-scam issuers). Check a Destination/counterparty against it BEFORE a user signs. Real-time, never cached (Cache-Control: no-store) — poll every ~5s. Per-category sections (nftPhishing, paymentDrain) are additive metadata and may overlap; addresses is deduped. - GET
/v1/scamsFull scam report with abuse statistics - GET
/v1/scams/tokensTokens issued by one named issuer. issuer is required — this endpoint lists an issuer's tokens, it does not classify them. For a scam verdict use /scams/addresses or /scams/check/{account}. - GET
/v1/scams/domainsKnown scam domains with registrar info - GET
/v1/scams/nftNFT scam accounts and recent sales - GET
/v1/scams/check/{account}Check if account is a known scam. is_scam is true ONLY for accounts on the verified blocklist or confirmed scam NFT issuers — never inferred from an account's token names or token count. Also returns first_seen/age_seconds/new_account (advisory counterparty freshness, independent of is_scam) - GET
/v1/scams/report-scamList community scam reports - GET
/v1/scams/report/{domain}Confirmations for a reported domain - POST
/v1/scams/reportReport a scam domain