How to Spot Fake Crypto Airdrop Scams (and Stay Safe)
Fake airdrops drain wallets every day. Learn the 9 warning signs of airdrop scams, how wallet drainers work and what to do if you clicked a bad link.
Airdrops are one of the few areas of crypto where people expect to receive something for nothing. Unfortunately, that expectation is exactly what scammers exploit. Fake airdrops are among the most common ways people lose crypto, and they work on beginners and experienced users alike.
The good news is that almost every airdrop scam relies on the same small set of tricks. Once you know them, they become much easier to recognise. This guide walks through the warning signs, explains how "wallet drainers" actually take your funds, and tells you what to do if you think you have been caught.
How airdrop scams usually work
Most fake airdrops follow a simple pattern: create urgency, send you to a convincing website, and get you to authorise something you do not fully understand. The goal is either to collect your seed phrase or to have you sign a transaction that gives the scammer permission to move your tokens.
Many people imagine that a hacker needs your password to steal crypto. In reality, signing the wrong transaction is often enough. Smart contracts can be granted permission to spend specific tokens on your behalf; a malicious site simply asks for that permission and then uses it immediately.
9 warning signs of a fake airdrop
1. It arrived in your DMs
Legitimate projects rarely announce airdrops by direct message on Telegram, Discord, X or email. Messages from "admins" or "support" offering to help you claim are almost always scams.
2. The link is not on the official domain
Scam domains use small changes: an extra letter, a hyphen, a different top-level domain such as ".app" instead of ".org", or a word like "claim" or "rewards" added to the real name. Always type the official domain yourself or use a bookmark you saved earlier.
3. It asks for your seed phrase or private key
This is the clearest red flag there is. No airdrop, wallet provider or support team ever needs your recovery phrase. A "wallet validation" or "sync" form that asks for it is theft.
4. You must send crypto to receive crypto
"Send 0.1 ETH to verify your wallet and receive 1 ETH back" is a scam every single time. Real distributions do not require you to pay the project first.
5. Extreme urgency
Countdown timers, "only 200 spots left" banners and claims that unclaimed tokens will be burned in minutes are designed to rush you past careful thinking.
6. Tokens you never asked for
Random tokens that appear in your wallet, often with names that include a website address, are bait. Trying to sell or "claim" them sends you straight to a draining site.
7. The transaction asks for broad approval
If a "claim" prompts your wallet to approve unlimited spending of a token, to "set approval for all" NFTs, or to sign a confusing message labelled "permit", stop. A claim should send tokens to you, not give someone else access to your assets.
8. Promoted through ads or reply spam
Scammers buy search ads and flood replies under official posts with lookalike accounts. A verified badge alone is not proof; check that the account handle exactly matches the official one listed on the project's website.
9. The project barely exists
If you cannot find a real product, documentation, an audit or a track record, and the only thing the project offers is the airdrop itself, treat it with deep suspicion.
How wallet drainers take your funds
A wallet drainer is a malicious script embedded in a fake website. When you connect your wallet, it scans your balances and then presents one or more signature requests crafted to look harmless. The common techniques include:
| Technique | What you see | What it really does |
|---|---|---|
| Token approval | "Approve" or "Enable" button | Lets the scammer's contract spend your tokens |
| Set approval for all | A prompt mentioning a collection | Gives control over all NFTs in that collection |
| Off-chain permit signature | A "sign message" request with no gas fee | Can authorise token transfers without a normal transaction |
| Direct transfer | A "claim" that actually sends your ETH | Moves your coins straight to the attacker |
Because these permissions are valid blockchain actions, they cannot simply be reversed once used. That is why prevention is everything.
Habits that keep you safe
- Use a separate wallet for new projects and airdrops, holding only small amounts. Keep long-term savings in a different wallet, ideally a hardware wallet.
- Bookmark official sites and access them only through your bookmarks.
- Read every prompt. Modern wallets increasingly show transaction previews and warnings. If the preview shows assets leaving your wallet, do not sign.
- Hide or ignore unknown tokens rather than interacting with them.
- Review approvals regularly using a reputable token-approval checker from your wallet or block explorer, and revoke permissions you no longer need.
- Slow down. No genuine opportunity disappears because you took ten minutes to verify it.
Tip: Before claiming, find the airdrop announcement on the project's official website and confirm the claim URL there. If the website and the social post disagree, trust neither until you have figured out why.
What to do if you think you've been scammed
- Act quickly. If assets remain in the wallet, move them to a brand-new wallet created with a new seed phrase on a device you trust.
- Revoke approvals. Use a reputable approval-revoking tool to cancel permissions you granted to unknown contracts.
- Assume the seed phrase is compromised if you typed it anywhere. That wallet should never be used again.
- Beware of "recovery" services. People who lose funds are often targeted a second time by fake recovery agents who promise to get money back for an upfront fee.
- Report it. Report the site to your wallet provider and the platform where you found it, and file a report with your local police or cybercrime unit. A report may be needed for tax or insurance purposes.
The one rule to remember
If you remember nothing else, remember this: a real airdrop never needs your seed phrase and never asks you to send money first. Combine that with a separate wallet for experimenting and the habit of only using official links, and you will avoid the vast majority of airdrop scams. For background on how genuine airdrops work, start with our beginner's guide to crypto airdrops.
Educational content only. This article is for general information and is not financial, investment, tax or legal advice. Crypto assets are highly volatile and you can lose money. Always do your own research and never share your seed phrase or private keys. Read our full disclaimer.
