Fake Airdrops
An airdrop is when a crypto project distributes free tokens to users — usually to reward early supporters or spread awareness. Legitimate airdrops have made some early users significant money, which is exactly why scammers counterfeit them. Fake airdrops are now one of the most common ways beginners lose their entire wallets. This lesson teaches you to tell the difference.
> Educational note: This lesson is about security. It contains no financial advice and does not recommend chasing any airdrop.
What a Legitimate Airdrop Looks Like
Real airdrops share these traits:
- They come from established projects with a real product, public team, and months or years of history.
- Eligibility is based on past activity (you used the product before a announced or unannounced snapshot date) — not on paying a fee or completing sketchy tasks.
- They are announced through the project's official channels: its verified website, official X account, or official Discord.
- Claiming may require a transaction (paying gas), but never requires sending tokens to someone or sharing private information.
How Fake Airdrops Work
The wallet drainer
The most dangerous variant. You see an announcement — "Claim 500 XYZ tokens, worth $2,000!" — and connect your wallet to the claim site. The site asks you to sign a transaction or grant token approvals. Hidden in that innocent-looking signature is permission for the scammer's contract to drain your wallet: transferring out your ETH, stablecoins, and NFTs in seconds.
This is the critical thing to understand: connecting your wallet is safe; signing malicious transactions is not. The theft happens at the signature step, when victims approve without reading.
The advance-fee claim
"To receive your airdrop, first send 0.1 ETH as a gas/verification fee." Real airdrops never work this way. The fee goes straight to the scammer, and no tokens ever arrive.
The dusting + phishing combo
Scammers send tiny amounts of a token ("dust") to thousands of random wallets. Curious recipients look up the token, find a professional-looking website, connect their wallet to "sell" the tokens — and hit the drainer described above. Unexpected tokens appearing in your wallet are bait, not gifts. Never interact with them.
The impersonator announcement
Fake social media accounts copy a real project's branding and announce a "surprise airdrop," often as replies to the project's genuine posts. The link leads to a pixel-perfect clone of the real claim site — with a drainer underneath.
How to Verify Before You Touch Anything
Run every airdrop through this gauntlet:
- Source check: Is it announced on the project's official website or long-standing verified account? Announcements that exist *only* as DMs, replies, or ads are fake.
- URL check: Type the official URL yourself or use a bookmark. Never click airdrop links from messages, emails, or ads — lookalike domains are the whole game.
- The fee test: Does claiming require sending crypto to someone? Then it is a scam. (Paying network gas for your own transaction is different — but be suspicious of any "fee" going to an address.)
- The too-good test: An unknown project offering thousands of dollars in free tokens to everyone is not marketing — it is bait.
- The approval test: Before signing anything, read what the signature actually does. If your wallet warns about granting access to "all" your tokens, reject it immediately.
Defensive Habits
- Use a separate "airdrop wallet" with minimal funds for any experimental claiming. Your main holdings should live in a wallet that never touches unfamiliar sites.
- Regularly review and revoke token approvals using tools like revoke.cash or your wallet's approval manager. Old approvals to forgotten sites are ticking time bombs.
- Keep wallet software updated — updates often include new phishing and drainer warnings.
- When in doubt, skip it. No legitimate opportunity requires you to act in the next ten minutes. Missing a real airdrop costs you nothing; falling for a fake one can cost you everything.
Common Mistakes
- Interacting with surprise tokens. If tokens appear in your wallet uninvited, ignore them. Looking them up and connecting to their site is exactly what the scammer wants.
- Signing without reading. The signature request is where theft happens. Slow down and read every approval — especially ones requesting unlimited access.
- Using your main wallet for experiments. One bad signature can empty years of holdings. Compartmentalise.
- Trusting follower counts and slick websites. Scammers buy followers and clone designs in hours. Polish proves nothing.
- FOMO claiming. "Claim ends in 1 hour!" is pressure by design. Real distributions give days or weeks.
Recap Checklist
- Real airdrops reward past usage of established projects; they never demand upfront payments.
- The deadliest fakes are wallet drainers — theft happens when you sign a malicious transaction, not when you merely connect.
- Unexpected tokens in your wallet are bait — do not interact with them.
- Verify via official channels only, type URLs yourself, never click airdrop links from messages or ads.
- Read every signature; reject unlimited token approvals from unfamiliar sites.
- Use a separate low-value wallet for anything experimental, and revoke old approvals regularly.
- When in doubt, skip it — missing out costs nothing, getting drained costs everything.
Next lesson
Wallet Safety — Securing your wallet is the #1 skill in crypto. Here's a beginner-friendly safety checklist.