Crypto Airdrop and Wallet Drainer Link Scam
A 'free token airdrop' link asks you to connect your crypto wallet and approve a transaction that empties it. See how drainer sites work.
A post, a direct message or an email says you have been chosen for a free crypto airdrop or an NFT mint. The link opens a slick page that asks you to connect your wallet and press 'claim'. The approval you sign does not give you tokens; it gives the site permission to move the coins and NFTs already in your wallet. Such losses are fast, and blockchain transfers cannot be reversed by a bank.
How the scam works
The scammer builds a site that copies a known project, with a countdown, a list of 'winners' and a Connect Wallet button. The link is pushed through hacked social accounts, community groups and replies under real posts. People who already hold crypto are targeted because a wallet with value is what the site is built to empty.
When the wallet connects, the page asks for a signature that looks harmless, such as 'verify ownership' or 'claim tokens'. In reality it is an approval that lets the scammer's contract spend your tokens. A timer and a message like 'only 500 slots left' stop people from reading the wallet's prompt, which often shows an unlimited spend permission.
The payoff comes within seconds: coins and NFTs are swapped or sent to the scammer's address, and then mixed through other wallets. Some victims also receive a second message from a 'recovery expert' who offers to retrieve the funds for a fee, which is another scam. Because the approval remains active, the wallet can be drained again later.
An example of what you may see
Example message (invented): 'Congratulations! Your wallet is eligible for the community airdrop of 5,000 tokens. Claim before the snapshot ends in 2 hours at the link below. Connect your wallet and press Claim. 312 of 500 slots already taken.' The page looks like a known project, but when you press Claim your wallet asks you to approve spending on all your tokens, and a second pop-up says to 'confirm gas' with a small fee.
This example is written for illustration. Real messages change their wording, names and links all the time.
Red flags
- A free token or NFT you never signed up for.
- A link to connect your wallet from a message or a reply.
- A wallet prompt that asks to approve spending of all tokens.
- A countdown or a 'slots left' line pushing speed.
- A website address that differs slightly from the real project.
- A 'recovery expert' who contacts you after a loss.
What to do right now
- Do not connect your wallet to a site you reached from a message.
- Read the wallet prompt: if it says approve or spend for all tokens, reject it.
- Visit a project's official site only through its verified channel typed by hand.
- Keep large holdings in a separate wallet that you do not use with new sites.
- Never share your seed phrase or private key with anyone.
If you already paid or shared a code
- If you signed an approval, move remaining assets to a new wallet at once and revoke permissions using a trusted tool.
- Report at cybercrime.gov.in and call 1930 with the wallet address and transaction ids.
- If you used an exchange, tell its support team through the official app.
- Ignore anyone who offers to recover the coins for a fee.
National Cyber Crime Helpline: 1930. Report online at cybercrime.gov.in. Do it fast: the sooner your bank is told, the better the chance that money can be held.
Where this scam shows up
Read how it looks on each channel:
How Safeavio helps
Safeavio's link check can look at an airdrop link you paste before you open it and warn about lookalike addresses and risky patterns, and the scam check on the message flags the countdown and the free-gift pressure. It does not manage or inspect your crypto wallet and cannot reverse a blockchain transfer, so the safest habit is never to connect a wallet from a message.
Check it before you tap or pay
Safeavio Sentinel is a made-in-India Android app: paste a message or link, or scan a QR code, and get a plain verdict with the reasons. It helps you spot a scam; it does not promise to stop every one.
Download for AndroidWhat the app does
Google Play listing: coming soon. Today the signed APK is on safeavio.com/download. Android 7.0 or later.
Questions people ask
Can a bank or the police reverse a crypto transfer?
A transfer on a blockchain cannot be undone by a bank. Reporting to 1930 and cybercrime.gov.in is still important for the record, but prevention is far more effective than recovery, so reject any approval you do not understand.
What does 'approve spending' mean?
It gives a contract permission to move your tokens, sometimes without any limit. Genuine airdrops do not need to spend your existing tokens. If a prompt asks for that, reject it and close the page.
How can I check an airdrop is real?
Look for the announcement on the project's verified channels reached by typing the address yourself. Do not trust links in replies, direct messages or comments, because those are the usual route for fake claims. A real team also never asks for your seed phrase, so treat that request as proof of a scam.