Offers you did not ask for

Your address is public. Anyone can create an NFT offer with your account named as the receiver. Your wallet may then show an NFT "waiting" for you, often priced at 0 XRP.

This is the NFT version of junk mail. A flyer in your mailbox does not mean you bought anything.

What matters:

• Nothing has moved. An offer is only a note on the ledger. The NFT is still in the sender's account.
• It costs you nothing. The sender paid the 0.2 XRP reserve for the offer, not you.
• You can leave it alone. There is no deadline you have to meet and no penalty for ignoring it.

Why do strangers send them? Xaman's help pages call it NFT spam: an unsolicited offer of a low-value or worthless NFT. NFTs need no trust line, so anyone can aim one at any account. xrpl.org adds that incoming objects like these are usually harmless, but can be used as part of scams.

The spam itself cannot spend your XRP, change your settings or give the sender access. The risk starts when you act on it. Xaman's advice is to ignore it, not reply, and not follow any link that comes with it.

If the noise bothers you, one account setting blocks these offers from being created at all. Xaman also has a switch to turn off incoming NFT offers in the app.

How an offer reaches you. An NFTokenCreateOffer sell offer can set Destination to any account. Only that account can accept it. An XRP sell offer may have an Amount of "0".

The resulting NFTokenOffer entry is owned by its creator and counts toward the creator's owner reserve. It is stored in the NFT's sell-offer directory. It is not an object your account owns.

NFTokenOffer entries are never matched or executed automatically. The NFT changes hands only when the destination sends NFTokenAcceptOffer.

If you accept. The NFT is added to one of your NFTokenPage entries. If you have no page with room, a new page is created and locks 0.2 XRP of your reserve.

Removing an offer aimed at you. The account in an offer's Destination can cancel it with NFTokenCancelOffer. That costs a transaction fee and is optional. An offer with an Expiration can be canceled by anyone once that time has passed.

Blocking them. The DisallowIncoming amendment, enabled on 2023-08-21, added four account flags. For NFT offers:

• Send AccountSet with SetFlag 12 (asfDisallowIncomingNFTokenOffer).
• The account then carries lsfDisallowIncomingNFTokenOffer. account_info shows it as disallowIncomingNFTokenOffer: true under account_flags.
• An NFTokenCreateOffer naming the account as Destination fails with tecNO_PERMISSION.

The setting does not stop you from creating offers. It also means a real seller cannot aim a private sell offer at you until you clear the flag with ClearFlag 12.

The sister flags block incoming checks (13), payment channels (14) and trust lines (15).

Why this matters for account deletion. xrpl.org notes that incoming objects can block an account from being deleted, which is one reason the flags exist.

Related: Scams and signing.