Almost every real airdrop announcement is followed within hours by fake copies. The scam sites look convincing: they copy the project's branding, show a plausible token amount, and urge you to connect your wallet immediately. Victims rarely lose money because the scam was sophisticated; they lose it because they acted fast and skipped verification. The good news is that fake claim sites share a set of tells, and a short checklist stops nearly all of them.

The first warning is the source of the link. Real announcements come from the project's verified account, official website, or documentation. If you found the link in a reply thread, a direct message, a search ad, or a group post, treat it as untrusted until proven otherwise. Scammers buy search ads and impersonate support accounts precisely because people click the first result they see. Never trust a link just because it appeared at the top of a search page.

The second warning is urgency combined with a request for something unusual. Legitimate airdrops never ask for your seed phrase, never ask you to send funds to unlock a claim, and never require a private key. A site that asks for any of these is a scam by definition, no matter how professional it looks. Countdown timers, warnings that your allocation expires in minutes, and pop-ups claiming thousands of other users just claimed are pressure tactics designed to stop you thinking. Real claims usually stay open for weeks or months.

Build a verification habit that takes under two minutes. First, open the project's official website by typing its domain yourself or using a bookmark, and follow its own link to the claim page. Second, compare the domain character by character: scammers register lookalike domains with swapped letters or different endings. Third, check the project's official social account for a post confirming the claim, and confirm the link matches. If any of these checks fail or you cannot find confirmation, do not connect.

Use a separate wallet for claims, ideally one that holds no long-term funds. Connect it only to the verified claim page, approve only the claim transaction, and read what the transaction actually does before signing. If your wallet warns that a transaction grants unlimited spending approval or transfers tokens you did not expect, reject it immediately. Revoking approvals afterwards is possible, but prevention is far cheaper than recovery. Keep your main holdings in a wallet that never touches claim sites at all.

Act quickly and calmly. Disconnect the site from your wallet settings, revoke any token approvals it received using a reputable approval-management tool, and move your funds to a fresh wallet if you entered a seed phrase or signed a suspicious transaction. If a seed phrase was exposed, that wallet is permanently compromised: create a new one and transfer everything, because changing passwords does not fix a leaked phrase. Report the scam domain to the project's team and to your wallet provider so others can be warned.

Share what happened with your community, without embarrassment. Scam sites succeed because victims stay quiet and the same infrastructure targets the next person. A short post describing the fake domain and how you found it can save someone else's funds. The core lesson is simple and worth repeating: real airdrops never need your seed phrase, never charge a fee to claim, and never rush you into signing something you have not read.

Bottom line: verify every claim link through the project's own channels, never share a seed phrase, and use a separate wallet for claims. Two minutes of checking before you connect prevents the most common and most expensive mistake in airdrop hunting.