How to spot a fake airdrop

The patterns behind fake airdrop announcements, claim links and "eligibility checkers", and a quick test to run before you connect a wallet.

Last reviewed 2026-10-27 · 3 min read

On this page
  1. The common forms
  2. Red flags
  3. The two-minute check before connecting

Every popular airdrop attracts copies. Within minutes of a real announcement, fake claim sites appear in reply threads, search ads and DMs, often getting more views than the real one. The fakes do not need to be clever. They only need you to connect and sign once.

The common forms

  • Reply-thread links. A post from an account with the project's name and logo, often with a paid checkmark, replying under the real announcement with "Claim is live".
  • Search ads. A sponsored result at the top of a search for the project name, pointing to a lookalike domain.
  • DMs and group messages. "Congrats, your wallet is eligible" from an account you never talked to.
  • Hacked official channels. A project's real Discord, Telegram or X account posting a "surprise airdrop" after being compromised. See hacked announcements.
  • Tokens that appear in your wallet with a name like Visit claim-xyz.com. See scam tokens.
  • "Eligibility checkers" that ask you to connect and sign to see your allocation.

Red flags

  • Urgency: "ends in 1 hour", "last chance", "only first 1,000 wallets".
  • A claim announced only in replies, DMs or a single post, not on the project's website, docs or blog.
  • A domain that is almost right: an extra word (-claim, -airdrop, -rewards), a different extension, swapped or doubled letters, or special characters.
  • Asking for a seed phrase or private key. Always fake.
  • A "claim" that requires you to pay a fee first, send tokens to "unlock" or "activate" anything, or approve your existing tokens.
  • A wallet popup that asks for a token approval or a typed-data signature when you expected a simple claim.

The two-minute check before connecting

  1. Find the official site independently. Use your bookmark, or the link on the project's verified profile, docs or GitHub, not a link someone sent you.
  2. Compare the domain letter by letter with the one in your bookmark.
  3. Check whether the project itself announced the claim on more than one official channel.
  4. Use a farming wallet, never your vault, even on the real site. See wallet separation.
  5. Read the wallet popup. A real claim is usually a transaction that calls a claim function and sends tokens to you. It should not ask you to approve your existing tokens or sign a permit. See transaction previews.

Warning: Even a perfect-looking site with the correct logo, wording and countdown can be a fake. The domain and what your wallet asks you to sign are what matter, not how the page looks.