The promise of free tokens remains one of the most effective lures in cryptocurrency. Fake airdrop campaigns have drained hundreds of millions of dollars by tricking users into signing malicious transactions.
How Fake Airdrop Drains Work
Scammers create pixel-perfect clones of legitimate project websites. Links are distributed through fake social accounts, Discord DMs, Google ads, compromised channels, and search results. Victims connect their wallet and sign what appears to be a simple “claim” transaction. In reality the signature often grants unlimited token approvals or triggers a drainer contract that empties the wallet of tokens, NFTs, and native currency—sometimes within the same block.
Other variants include unsolicited “dust” tokens that appear in wallets with embedded phishing links, and direct requests for seed phrases under the guise of verification.
Critical Red Flags
- Any airdrop that requires connecting a wallet, signing a transaction, or paying a fee
- Urgency language and countdown timers
- Links that do not originate from the project’s verified official channels
- Requests for seed phrases or private keys
How to Stay Safe
Genuine airdrops are usually distributed automatically to addresses captured in a snapshot. They rarely require the recipient to visit a third-party claim site and sign a transaction. Never connect a wallet to an airdrop page found through ads, DMs, or search results. Verify every claim link on the project’s official website and verified social accounts. Immediately revoke any suspicious approvals using tools such as Revoke.cash or the relevant block explorer.
Frequently asked questions
Connecting alone is usually not enough, but signing the subsequent malicious approval or transaction is what causes the drain.
Immediately move any remaining assets to a new wallet, revoke approvals, and report the incident to IC3 and the relevant exchange.
Sources and further reading
- ScamSniffer and similar phishing trackers · ScamSniffer
- Crypto.news and security firm analyses of drainer-as-a-service kits · U.S. Securities and Exchange Commission (SEC)