What legitimate airdrops never ask for

A short list of requests that a real airdrop will never make, so you can reject scams immediately without investigating further.

Last reviewed 2026-10-27 · 2 min read

On this page
  1. Never your seed phrase or private key
  2. Never a payment to unlock tokens
  3. Never approval of tokens you already hold
  4. Never through a DM
  5. Never remote access or software installs
  6. Never an extreme deadline
  7. Never KYC through a random form

You do not need to be a security expert to dodge most airdrop scams. You only need to know what a genuine project would never ask for. If any of these appear, stop: no further checking needed.

Never your seed phrase or private key

No airdrop, eligibility check, "wallet sync" or support process requires your recovery phrase or private key. A project receives nothing useful from your seed except the ability to steal from you.

Never a payment to unlock tokens

Real airdrops do not ask you to send crypto to "activate", "unlock", "release", "cover tax" or "pay a gas deposit" for your allocation. The only cost of claiming is the normal network fee your own wallet shows when you send the claim transaction.

Never approval of tokens you already hold

Claiming free tokens has nothing to do with your existing USDC, ETH or NFTs. A claim that asks for approval to spend those, or a permit signature over them, is a drainer.

Never through a DM

Projects announce claims publicly, on their own website and official channels. They do not send private links, and their team and moderators do not start private conversations about your wallet.

Never remote access or software installs

No claim requires you to install an app, a browser extension, a "claim tool", a "wallet validator" or remote-desktop software, or to run a script someone sent you.

Never an extreme deadline

Real claim windows are usually weeks or months long and announced in advance. "Claim within 30 minutes or lose your allocation" is designed to stop you from thinking.

Never KYC through a random form

Some legitimate airdrops do use identity checks, but through a named verification provider announced on the project's official site. A Google Form, Telegram bot or DM asking for your passport photo is identity theft.

Warning: Scammers know these rules too, and some fake sites now say "we will never ask for your seed phrase" on the very page that drains your wallet. A disclaimer proves nothing. What your wallet popup asks you to sign is what counts.