Fake Airdrops: How Scammers Use Free Tokens to Drain Wallets
A fake airdrop scam lures you with free tokens, then tricks you into signing a wallet-draining approval. Learn the warning signs and how to stay safe.
A fake airdrop scam offers free tokens, then tricks you into connecting your wallet to a malicious site and signing a transaction or message that gives the scammer permission to move your real assets. The "free" tokens are bait; the theft happens when you approve something you didn't understand.
Real airdrops do exist. Projects sometimes distribute tokens to early users, which is exactly why the scam works: people have heard stories of valuable airdrops and are primed to claim quickly. This guide shows how fake airdrops operate, the warning signs, and what to do if you have already interacted with one.
How a Fake Airdrop Scam Works
Most fake airdrops follow one of a few patterns. If you want to go further, read Copy Trading Scams.
Pattern 1: Bait tokens sent to your wallet
Scammers send small amounts of a worthless token to many addresses. The token's name or symbol often contains a website, such as "Visit claim-site to redeem." When you check your wallet, you see a balance that appears to be worth money. Trying to swap it fails, so you visit the site to "claim" or "unlock" it. That site is a wallet drainer. Related reading: Discord Scams.
Pattern 2: Fake announcements on social media
Scammers create accounts that look like an official project, or reply under real posts, announcing a surprise airdrop with a link. Some pay for search ads so the fake site appears above the real one. For a deeper look, see Telegram Crypto Scams. Our article Crypto Scams on WhatsApp expands on this point.
Pattern 3: Fake claim pages for real airdrops
When a genuine airdrop is announced, copycat claim sites appear within hours. They look identical to the real page but differ in the domain name. See also: Crypto Scams on Instagram and TikTok.
What the malicious site asks you to do
Once your wallet is connected, the site asks you to sign something:
| Request | What it actually does |
|---|---|
| Token approval ("approve" or "increase allowance") | Lets a contract spend your tokens, often an unlimited amount |
| Permit signature | An off-chain signature that grants the same spending rights without a visible transaction |
| NFT "set approval for all" | Lets an operator move every NFT in a collection you own |
| Direct transfer disguised as "claim" | Sends your assets straight to the scammer |
| Seed phrase "verification" | Gives full control of your wallet |
Our guides to wallet drainers and ice phishing and permit signatures explain these mechanisms in more depth.
Warning Signs of a Fake Airdrop
- A token you never asked for shows a high balance or a website in its name.
- Urgency: "Claim within 24 hours" or "only 500 spots left."
- A link in a reply, DM, Discord message or ad rather than on the project's official site.
- A slightly wrong domain: extra letters, hyphens, a different ending, or a lookalike character.
- Requests for your seed phrase or private key, framed as wallet "validation" or "sync."
- A fee to receive tokens, such as paying gas or a deposit before claiming.
- Signatures you can't read, or a wallet warning that the site is suspicious.
- "Eligible" with no reason: you never used the protocol but are told you qualified.
How to Check Whether an Airdrop Is Real
- 1Find the project's official website independently. Use a trusted source such as a market-data coin page, then bookmark it. Our guide on verifying a website is the official project site covers the checks.
- 2Confirm the announcement on official channels. A real airdrop is usually announced on the main website and verified accounts at the same time.
- 3Check the token contract address against the official address before trading or claiming anything.
- 4Read every signature request. If your wallet shows "approve," "permit" or "set approval for all" for a claim, stop. Claiming tokens should not require giving away spending rights over other assets.
- 5Use a separate wallet for claims. A "burner" wallet with little or no value limits what a malicious site can take.
What to Do If You Interacted With a Fake Airdrop
Speed matters, because drainers often act within minutes.
- 1Disconnect the site from your wallet.
- 2Revoke approvals using a reputable token approval checker. Our guide on revoking token approvals walks through it.
- 3If you entered your seed phrase or aren't sure what you signed, create a new wallet with a new seed phrase and move everything that remains.
- 4Beware of "recovery" offers. People who contact you promising to recover stolen funds are almost always running a second scam.
- 5Report the scam to the platform where you found the link and to relevant authorities. You can also flag fake tokens and sites to us through our scam report form.
Keeping Your Wallet Safe Long Term
- Hide unknown tokens in your wallet app instead of investigating them.
- Keep most funds in a wallet you never connect to new sites, ideally a hardware wallet.
- Review connected sites and approvals regularly.
- Treat "free money" as a reason for more caution, not less.
- Keep your wallet app and browser up to date, since many wallets now warn about known malicious sites.
- Learn what real airdrops look like. Our explainer on crypto airdrops describes how legitimate distributions usually work, which makes fakes easier to spot.
Bottom line
Fake airdrops exploit excitement about free tokens to get one signature from you. Ignore tokens you didn't expect, reach claim pages only through official channels you verified yourself, never share your seed phrase, and refuse any approval that a simple claim shouldn't need. If you slipped up, revoke and move funds immediately.
Frequently asked questions
Can a random token in my wallet steal my crypto?
Simply receiving a token does not give anyone access to your wallet. The danger starts when you interact with it: visiting a website it points to, connecting your wallet, signing an approval or trying to sell or swap it. The safest choice is to ignore unknown tokens and hide them in your wallet app.
How do I know if an airdrop is real?
Check the project's official website and verified social accounts, reached by typing the address yourself rather than clicking links. Real airdrops are announced on official channels, are usually claimed through the main project site, and never ask for your seed phrase or a payment to unlock tokens.
What should I do if I signed a fake airdrop transaction?
Act quickly. Use a reputable approval checker to revoke any permissions you granted, move remaining funds to a new wallet with a fresh seed phrase if you are unsure what you signed, and never enter your seed phrase anywhere. Then report the site to the platform where you found it.
Why would a scammer send me free tokens?
The tokens are bait. They often have names that contain a website address or a message about claiming a reward. When you visit the site to claim or sell, it asks you to connect your wallet and sign a transaction that gives the scammer permission to move your real assets.
