XRP memo wallet rMrBAz…XoLD listed for 2024 fake exchanges weyshare[.]com, venanco[.]com, cbusy[.]com: 15.3M XRP in, same tag scheme as cryptovos
- Scam type: Scam
- Chain: XRP Ledger
- Project or site name: weyshare / venanco / cbusy fake exchanges (XLM wallet shared with cryptovos)
- Incident date: 2026-10-25
- Reported: 2026-10-26
- Last updated: 2026-10-26
This follow-up files the XRP deposit wallet rMrBAzHAHBtY7DvkSf8JkAsxn89HBnXoLD and the other public scam wallet addresses listed for three 2024 fake crypto exchange sites: weyshare[.]com, venanco[.]com and cbusy[.]com. PCrisk, a community scam-warning site, lists rMrBAz among the scammers' wallet addresses on all three of its pages (weyshare[.]com and venanco[.]com published 2024-03-20, cbusy[.]com published 2024-03-26). The weyshare[.]com and venanco[.]com pages also list the XLM wallet GBKVX2PY…SINA, which cryptovos[.]com still shows as its XLM deposit address in October 2026; it is already…
Other addresses in this report: bc1qtqldr774efweqgfsn4gg28lsn7a03f69mnx0j2, 0xdbd76839bcb3f7b8d1a3e03735d3acaccb9af156, TYZhZDeTNZkceJga5aot1gae58gepu3rYg, TUMZA3toZRV9AZyNMr4HD8nPucpyj8XUjS, 0xf55d90b450a8b2aa70ba48fa5b6d4e563630ab10, TAAdPC4jpBmrNR3phQKf5cPND1WndguxuX, 0xbfbe5268a29ec535ff4f142f89055a15ab714af7, 0x06d0f730252d7a75613f57d1d8aaf87695d03a41, 0x97932211826bbb8b2ec1fed006169b3a7eab6691, LPyGY7wr1DwFKSNz5i8tKKrFVzkRh96hXz, Xg5VbYBJV8AwbxiroFigkiVNMektfqxfqt, DUHqSSGwPQ7ggW8rzZbW7dQaH2PYhJrGYz, EYJpsHxF4vkkvfq1yt8i868AHH2d55yH1Nhi7ARkRmBx, 0xd7a99b4fb4788ed4baa510282e504851b10fd0d4, 0xa8f1e2624313c3550bb4835f021237c1ea8628b4, 0x091fe6b776b6b6354c82e0b70ec8f5c9fa617870, 0x150b0a5c8d7b47739c848997d3d258da79d15780, 0x31e11f3553c27d30ef2afb7b64a06f1491067046, 0x49a36cb18996c92cc4ab2abf0b7af0134b763a87, 0x6243f9b9a858d6ab6d267ef7edb919284a5421b6 and 19 more
Websites in this report: weyshare.com, venanco.com, cbusy.com
Linked reports: Deposit wallets of 6 'calm-ui' kit fake exchanges incl. cryptovos[.]com, coinsco[.]io, hederabit[.]com: 131 addresses, shared TON backend (Oct 2026), Fake-exchange kit follow-up: 7 more 'calm-ui' sites incl. doostoken[.]com, labswap[.]io, nozdex[.]com, cryptrex[.]io (Oct 2026), 49 live fake-exchange sites on an older kit generation linked to 2024 venanco[.]com and cryptovos[.]com: byte-identical JS, live sign-up (Oct 2026)