How to Check If an XRPL Token Is Safe Before Trusting It

Someone Lost Funds to a Fake XRPL Token Last Week

It happens regularly. A token shows up in someone's wallet, or gets shared in a Telegram group, and people set a trust line without checking anything first. The token looks legitimate. The name is familiar. Then the issuer freezes balances or the liquidity disappears.

XRPL makes it easy to create and issue tokens. That's a feature, not a flaw. But it means anyone can mint a token in minutes, and not all of them are safe. Before you set a trust line or buy a token on the DEX, you should know what you're actually trusting.

This guide walks you through the specific things to check, using real XRPL mechanics.

Understand What a Trust Line Actually Means

On XRPL, you don't automatically hold tokens from anyone. You have to explicitly set a trust line to an issuer's account for a specific currency code. This is a deliberate design choice, and it's your first line of defense.

When you set a trust line, you're telling the ledger: I accept balances of this currency from this issuer. If the issuer is malicious or poorly configured, you're exposed.

Setting a trust line also reserves 2 XRP from your wallet as a reserve requirement. That's a real cost. It's another reason to be selective.

Step 1: Look Up the Issuing Account

Every XRPL token has an issuing account. This is an r-address, the same format as any other XRPL wallet. Start there.

Open a ledger explorer like XRPL.org or Bithomp and search the issuing address. Look at:

Account age. A wallet created last week issuing a token claiming to be a major project is a red flag.
Transaction history. Does the account have meaningful activity, or just a few setup transactions?
Domain field. Legitimate issuers usually set a Domain field in their account settings. This field links the account to a website. You can verify the link goes both ways using XRPL's built-in TOML standard.

An account with no domain, no history, and no verifiable identity should make you pause.

Step 2: Check the XRPL TOML File

XRPL has a verification standard called xrp-ledger.toml. A project that has set this up correctly publishes a TOML file at a specific path on their domain. That file lists their issuing accounts and currency codes.

When you match the domain in the account's Domain field to the TOML file on that domain, and the issuing address appears in the file, you have a verified link between the on-chain account and an off-chain identity.

This doesn't prove a project is trustworthy. It proves they control both the domain and the account. That's a meaningful, verifiable signal. Many scam tokens skip this step entirely because it requires a real website and deliberate setup.

If the TOML file is missing, or the issuing address isn't listed in it, treat that as a warning.

Step 3: Check Freeze Authority

This is one of the most important checks on XRPL, and many users skip it.

XRPL issuers have the ability to freeze individual trust lines, which prevents you from moving your tokens. They can also enable a global freeze on all holders. There's a third option called No Freeze, where the issuer permanently gives up the ability to freeze anyone.

You can see whether an account has set No Freeze by looking at the account flags on a ledger explorer. If freeze authority is still active, the issuer can lock your balance at any time.

For tokens where you want genuine freedom to transfer and trade, a legitimate project should have enabled No Freeze. If they haven't, ask why.

Step 4: Look at Token Supply and Distribution

Search the token on the XRPL DEX or a token explorer. Look at:

Total supply. Is it visible and consistent with what the project claims?
Number of trust lines. A token with three trust lines and claims of thousands of holders doesn't add up.
Holder distribution. If one or two wallets hold the vast majority of supply, a coordinated dump can collapse the price instantly.
Liquidity. Thin order books on the DEX mean you may not be able to sell even if you want to.

None of these signals alone makes a token a scam. Together, they give you a picture of whether the token has real traction or just surface-level presentation.

Step 5: Watch for Airdropped Tokens You Didn't Request

XRPL allows anyone to send tokens to your wallet if you've set a trust line for that currency. But some scammers airdrop tokens you never set a trust line for, which shows up differently in your wallet interface depending on what app you use.

The common trick is to airdrop a token with a name or currency code that looks like something valuable, then push you to visit a fake site to "claim" the value. The site is a phishing page.

If you receive tokens you didn't ask for, don't interact with any links associated with them. Don't set a trust line to receive more. Just ignore them.

How Rhyzlo Fits Into This Process

Manually checking every one of these signals across multiple explorers takes time, and it's easy to miss something. Rhyzlo aggregates on-chain trust signals for XRPL tokens and issuers in one place, so you can see verified account linkage, freeze status, supply data, and issuer identity without bouncing between tools.

For users who are setting trust lines frequently or evaluating tokens they haven't seen before, having that information structured and readable makes the process faster and less error-prone.

A Simple Checklist Before You Trust Any XRPL Token

Before you set a trust line or buy a token, run through these:

Does the issuing account have a verifiable domain set?
Does the domain's TOML file list this issuing address?
Has the issuer enabled No Freeze?
Is the account age and transaction history consistent with a real project?
Does the token supply and holder count match what the project claims?
Is there real liquidity on the DEX?

If you can't answer yes to most of these, take more time before committing your trust line and your XRP reserve.

The Ledger Gives You the Information. Use It.

XRPL is a transparent ledger. Everything described in this guide is publicly visible on-chain. The data exists. The question is whether you look before you trust.

Scam tokens on XRPL survive because users move fast and skip the checks. Slowing down by five minutes to verify an issuer is often enough to avoid a loss.

If you want a faster way to run these checks, visit rhyzlo.com to see how Rhyzlo surfaces trust signals for XRPL tokens and issuers.