---

Seoul police arrested two suspects and booked a third without detention on July 30, while securing an Interpol Red Notice for a fourth, in connection with an XRP-based investment fraud that extracted approximately 12.3 billion won (roughly $8.55 million) from 71 investors in October 2025. The Seoul Metropolitan Police Agency (SMPA) charged the two arrested suspects under South Korea's Act on Aggravated Punishment of Specific Economic Crimes. The third individual was booked without detention, a procedurally distinct status under South Korean law that does not involve pre-trial custody, in connection with facilitating promotional activities. Investigators say the actual scale of the scheme may be nearly double the confirmed figure, with total losses potentially reaching 27.3 billion won (about $19 million) once all victims are accounted for.

The scheme operated through a website called Fxrpntwork.com, a domain constructed to deliberately echo XRP's ticker symbol and imply a connection to legitimate blockchain infrastructure. Operators promised investors fixed monthly returns of 1.5 to 1.8 percent with guaranteed principal protection, a hallmark structure of high-yield investment programmes (HYIPs), which are fraudulent schemes that promise unsustainable fixed returns and collapse once operators begin withdrawing funds. Victims were instructed to transfer XRP from regulated domestic exchanges such as Upbit and Bithumb to designated wallets routed through an overseas exchange. Once the funds arrived, the operators shut down the site and went into hiding. The entire operational window lasted approximately one week, from October 16 to October 23, 2025.

Promotional materials spread across Naver Blog posts, fabricated online news articles, manipulated Wikipedia entries, and YouTube videos. The SMPA warned the public directly: "People should not be misled by inaccurate information via channels such as YouTube." Among the four people facing charges, three are aged 29 and one is aged 34. The 34-year-old was booked without detention for facilitating those promotional activities. The alleged ringleader was apprehended at a hideout inside South Korea after returning from abroad. A separate suspect, aged 29, remains overseas and is now subject to an Interpol Red Notice, the international law enforcement alert system used to request provisional arrest of fugitives across member countries.

Despite the cross-border complications, police moved quickly once alerted. The SMPA's Cyber Crime Investigation Unit traced transaction paths and froze crypto wallets within three days of receiving the initial tip-off. Authorities have frozen approximately 17.3 billion won (around $12 million) in virtual currencies held at overseas exchanges and have begun confiscation proceedings.

The choice of XRP as the scam vehicle reflects a deliberate targeting of South Korean retail investors. XRP ranked as Upbit's most-traded digital asset by cumulative volume in 2025, surpassing Bitcoin, an unusual milestone for any altcoin on a major exchange. South Korea accounts for roughly 15 percent of global XRP trading volume, and approximately seven million South Koreans hold registered accounts on domestic exchanges. Because South Korean law restricts exchanges to spot trading only, with no derivatives or margin products, retail investors seeking higher-risk exposure have concentrated activity in high-volatility spot assets. XRP has absorbed much of that demand, with investors in their 40s and 50s shifting out of domestic equities into it. That familiarity made it an effective lure: the fraudsters wrapped a standard HYIP structure around an asset their targets were already actively trading.

The case also exposes a specific regulatory gap that extends well beyond South Korea's borders. The country's Virtual Asset User Protection Act (VAUPA), which took effect in July 2024, requires licensed exchanges to segregate customer assets, maintain reserves, and prohibit market manipulation. Those protections, however, only apply while funds remain on regulated domestic platforms. This scheme worked precisely because victims were instructed to move assets off those platforms and into unregulated overseas wallets. Regulators in Kenya (Capital Markets Authority), Nigeria (Securities and Exchange Commission), and India (Financial Intelligence Unit, FIU-IND) are each building their own crypto oversight frameworks while grappling with the same off-ramp monitoring problem. The scale of that challenge is substantial: Sub-Saharan Africa alone recorded $205 billion in on-chain transaction volume in the twelve months from July 2024 to June 2025, a 52 percent increase year-on-year according to Chainalysis, illustrating how rapidly retail crypto participation is outpacing regulatory reach in emerging markets. A domestic compliance regime provides no recourse once retail investors transfer funds to wallets outside its jurisdiction.

The HYIP playbook used here combines impersonation of a legitimate project, social media promotion, guaranteed-return promises, and off-platform fund routing. It is documented in scam clusters across Nigeria, Ghana, Bangladesh, Pakistan, Kenya, and the Philippines. XRP carries high retail familiarity across Japan, the Philippines, India, and South Korea, partly due to Ripple's early banking partnerships in the region and the asset's low per-token price, a psychological factor that makes it accessible to first-time buyers. That combination makes similar schemes portable to any market where XRP is widely held.

South Korea's broader enforcement picture gives some context for the nine-month gap between the fraud and the arrests. From June 2025 to May 2026, the Seoul Southern District Prosecutors' Office, operating a joint investigation unit, preserved 381.4 billion won (about $275 million) in illicit proceeds across financial and virtual asset crimes, arresting 25 suspects and booking 304 in total. Cross-border crypto investigations routinely take six to eighteen months even in well-resourced enforcement environments. That timeline sits against a troubling global backdrop: crypto scam losses worldwide reached a record $17 billion in 2025, according to Chainalysis, underscoring that the Seoul case is one data point in a much larger and accelerating pattern. The SMPA stated its position plainly: "We will strictly respond to cyber frauds involving cryptocurrency under a zero-tolerance policy." For investors in emerging markets where similar schemes are proliferating, that timeline and that resolve are both worth noting.