Last updated: October 23, 2026
If an unknown token suddenly appears in your wallet, don't touch it: unsolicited tokens are usually scam airdrops designed to lure you to a website that drains your wallet when you try to sell or "claim" them — receiving the token is harmless, but interacting with it is not. Hide it in your wallet, never visit links in its name, and never approve or sign anything to "unlock" it. This is common on Ethereum, BNB Chain, Tron and Solana. If you need to move real assets, do it with a simple send or a no-connection swap like ETH → XMR.
- 0 risk from simply receiving it
- 1 signature can empty your wallet
- Hide — don't sell, swap or claim
- Common on EVM chains, Tron, Solana
Why scam tokens get sent to you
| Scam type | How it works |
|---|---|
| Phishing airdrop | The token name contains a website ("claim at …"); the site asks you to connect and sign — a wallet drainer |
| Unsellable "honeypot" | Shows a high value, but selling requires an approval that grants access to your other tokens |
| Address poisoning | A fake token transfer from a lookalike address plants it in your history — see address poisoning |
| Tracking dust | Tiny amounts used to analyze your activity — see dusting attacks |
What to do (step by step)
- Don't click links in the token's name, description or memo.
- Don't try to sell, swap or send it — that's when the malicious contract runs.
- Hide the token in your wallet settings, or enable spam filtering.
- Check your approvals: if you already interacted, revoke token approvals and move your assets to a new wallet.
- Keep using your wallet normally for your real coins — the token itself can't move them.
How to tell a scam token from a real one
- You didn't buy it — real airdrops are announced by projects you use.
- The name contains a URL or "reward/claim" — almost always a scam.
- The value looks too good — wallets may show a fake price for illiquid tokens.
- It mimics a real token (e.g. "USDT" with a different contract) — check the contract on the explorer.
Monero can't carry such tokens at all, and its history is private — one reason privacy-focused users keep savings in XMR (Monero vs Bitcoin).
Frequently asked questions
Why did a random token appear in my wallet?
Usually it's a scam airdrop sent to many addresses, hoping you'll visit its website or try to sell it and sign a malicious transaction.
Is my wallet hacked if I received an unknown token?
No. Anyone can send tokens to any public address. Your wallet is safe as long as you don't interact with the token or its links.
Can I sell the unknown token?
Don't try. Scam tokens are often designed so that selling triggers an approval that lets attackers take your real assets.
How do I remove a scam token?
You can't delete it from the blockchain, but you can hide it in your wallet app so it no longer shows up.
What if I already connected to the token's website?
Revoke approvals immediately and move your assets to a new wallet with a new seed — see what to do if compromised.
Move real assets without connecting your wallet: ETH → XMR, USDT → BTC or all pairs. No account, no ID, no logs.