Last updated: October 28, 2026
A crypto airdrop scam promises free tokens but actually tricks you into connecting your wallet and signing a transaction or permit that hands control of your assets to the scammer. The bait can be a random token appearing in your wallet, a fake "claim" page promoted on X or Telegram, or a lookalike of a real project's airdrop. The rule: a real airdrop never asks for your seed phrase, never requires you to send crypto first, and you should never sign something you don't understand on a site you reached through an unsolicited link.
- 1 signature can drain a wallet
- 0 real airdrops that need your seed phrase
- 0 real airdrops that need a fee sent first
- Irreversible once signed
The four most common airdrop scams
| Scam | How it looks | What actually happens |
|---|---|---|
| Token dropped in your wallet | Unknown token with a website in its name | The site asks you to connect and "claim" — a drainer. See unknown token in wallet |
| Fake claim page | Ads or replies linking to "claim your allocation" | You sign a permit or approval; tokens leave your wallet |
| "Gas fee" airdrop | "Send 0.05 ETH to receive 5,000 tokens" | You send ETH, nothing comes back |
| Fake wallet sync | "Enter your seed phrase to check eligibility" | Your whole wallet is copied and emptied |
Why one signature is enough
On Ethereum-compatible chains, tokens can be moved by any address you've approved. Modern scams use off-chain "permit" signatures that look like harmless login messages but grant unlimited spending rights. On Solana and Tron, a single malicious transaction can also transfer everything at once. That's why wallet drainers love airdrops: people expect to sign something to "claim".
How to check an airdrop before you touch it
- Find the announcement on the project's official site, not from a reply, DM or ad.
- Never interact with tokens you didn't expect. Hide them in your wallet and move on.
- Read the signing request. Words like "Permit", "setApprovalForAll" or "Increase allowance" on a claim page are red flags.
- Use a separate "burner" wallet with no valuable funds for any airdrop farming.
- Check the URL character by character; scammers register lookalike domains — spotting fakes.
- Never send crypto to "unlock" or pay gas for an airdrop. Real claims only cost the normal network fee from your own wallet.
Already signed something?
- Revoke approvals right away with a revoke tool for your chain.
- Move remaining assets to a new wallet if you entered your seed phrase anywhere — what to do.
- Don't pay "recovery" services that contact you afterwards — recovery scams.
- Report the site — how to report a crypto scam.
Keep your main funds out of reach
The best defense is separation: a cold wallet for savings, a hot wallet for daily use, and a burner wallet for anything experimental. See hot vs cold wallets. When you need to move funds between them privately, an instant swap pays straight to your own address without connecting your wallet to any website — for example ETH → BTC or ETH → XMR.
Frequently asked questions
Is a token that appeared in my wallet a free airdrop?
Almost never. Unrequested tokens with a website in their name are bait. Don't try to sell or claim them; just hide them.
Can I lose money just by receiving a scam token?
No. Receiving is harmless. Losses happen when you interact: approve, sign, or visit the linked site and connect your wallet.
Do real airdrops ask me to pay a fee?
Real airdrops may require normal network gas paid from your own wallet when you claim, but never a payment sent to someone else's address.
How do I revoke a token approval?
Use a reputable revoke tool for your chain, connect the affected wallet and cancel unknown approvals. This costs a small network fee per approval.
Does using an instant exchange expose me to airdrop scams?
No. Instant exchanges don't ask you to connect your wallet or sign approvals — you simply send coins to a deposit address and receive the swapped coins at your own address.
Stay safe: read common crypto privacy mistakes, compare swaps on /swap, and check exchanges in the KYC track record. No account, no ID, no logs.