Airdrop scams are among the most common ways crypto users lose funds, and they succeed because they mimic real claims so closely. The good news is that fake airdrops repeat the same handful of tricks, so once you know them you can filter out most scams at a glance before ever connecting a wallet.

The single clearest warning is any request for your seed phrase or private key. No legitimate airdrop ever needs them, and any page asking for them is a scam by definition. The second warning is being asked to send crypto to unlock your allocation: real airdrops cost gas at most, never a payment to a private address.

Urgency is the third flag. Scammers claim you have two hours left or that unclaimed tokens burn tonight, because rushed users skip checks. Real projects give claim windows measured in days or weeks and announce them on official channels. If a countdown timer is pressuring you, close the page and verify through the project's own site.

Always trace an airdrop back to its source. Open the project's official website yourself by typing the address or using a bookmark, and look for the announcement there. Check the project's verified social accounts and official documentation, and be suspicious of links in replies, direct messages, or search ads, which scammers buy and fake routinely.

Compare token details too. A genuine token matches the official contract address published by the project, while scam tokens use lookalike names with different addresses. If a token appeared in your wallet uninvited and its name points you to a website, treat it as bait and do not interact with it.

Use a dedicated farming wallet for claims, separate from the wallet holding your long-term assets. Keep only enough gas money in it to cover fees, and move any legitimate tokens out the same day. After each claim session, review and revoke token approvals you no longer need, since an open approval can be abused later.

Read every signature request before confirming. Words like approve, permit, or set approval for all deserve a pause: they can grant a contract control over your tokens. If you cannot explain what a signature does, decline it. Slowing down for thirty seconds is the cheapest security tool in crypto, and it defeats most drainer attacks outright.

If you connected to a suspicious site but signed nothing, disconnect it in your wallet settings immediately and do not return. Connection alone rarely drains funds, but it tells the scammer your address is active, so expect follow-up phishing attempts. Stay alert for messages referencing the exact site you visited.

If you signed an approval you did not understand, open a token approval checker and revoke it right away, then move your assets to a fresh wallet with a new recovery phrase. Prioritize the highest-value assets first, and treat the old wallet as compromised permanently. Do not trust anyone offering to recover funds for a fee, since that is almost always a second scam.

Report the scam site and social accounts through the platform's reporting tools and, where available, to relevant authorities. Reporting rarely recovers funds, but it helps get malicious pages removed before others fall for them. Share a factual warning with your community without including links to the scam site itself.

Use the incident as a reason to upgrade your setup: move long-term holdings to a hardware wallet, create a dedicated burner wallet for claims, and adopt a personal rule to never claim anything within minutes of discovering it. A cooling-off period of a day defeats most urgency-based scams entirely.