A message pops up promising free crypto. All you need to do is click a link and connect your wallet. Sounds simple, right? Unfortunately, that’s how some crypto scams begin.
A real airdrop is a way for a project to distribute tokens. A fake one uses that idea to trick you into handing over access to your money.
What does a fake airdrop look like?
You might see a social media post, sponsored search result or direct message saying you’ve been selected for a giveaway. The link takes you to a website that looks like an official project page.
Then comes the risky part: it asks for your recovery phrase or urges you to approve a wallet request you don’t understand.
What is a wallet drainer?
A wallet drainer is a scam that tries to get permission to move tokens out of your wallet. Sometimes that permission is hidden inside an approval request or a signature. Simply connecting a wallet does not always give a website access to your funds, but signing the wrong request can be dangerous.
Five warning signs
- You’re asked for your recovery phrase or private key. No genuine airdrop needs this.
- The website address looks slightly different from the official one.
- A countdown pushes you to act before you’ve checked anything.
- A stranger claiming to be “support” contacts you first.
- A wallet pop-up asks for broad spending permission without a clear reason.
How to stay safe
Visit a project’s website through its verified channels rather than a random message. Read wallet requests before accepting them. If you aren’t sure what a request does, don’t sign it.
You can also review permissions you’ve already given to apps. Here’s our simple guide to token approvals.
What if you already clicked?
Opening a link is not the same as giving someone access to your wallet. But if you’ve approved a suspicious request, check and revoke permissions where appropriate. If you shared your recovery phrase, treat that wallet as compromised and move any remaining assets to a newly created wallet on a trusted device.
Be cautious of people promising to recover stolen funds for an upfront fee. That can be another scam.
Quick questions
Are all airdrops scams?
No. Some are legitimate. The key is checking the source and understanding what you’re being asked to do.
Will revoking permission get stolen crypto back?
No. It can help stop future use of that permission, but it doesn’t reverse completed transfers.
Helpful reading: MetaMask wallet safety and FTC scam guidance.
