Crypto Airdrop and Wallet Drainer Link Scam by email

How it looks by email, the red flags and what to do.

Email is slower than SMS, so these scams usually pretend to be a bill, a refund, an account lock or a job offer and ask you to log in or open a file. Crypto Airdrop and Wallet Drainer Link Scam is one of the ways this shows up: A 'free token airdrop' link asks you to connect your crypto wallet and approve a transaction that empties it. See how drainer sites work.

What crypto airdrop and wallet drainer link scam looks like by email

• A sender address that is almost, but not exactly, the real domain.
• A button that says "Verify account" or "View invoice".
• An attachment such as a PDF, ZIP or HTML file you did not expect.

The scammer builds a site that copies a known project, with a countdown, a list of 'winners' and a Connect Wallet button. The link is pushed through hacked social accounts, community groups and replies under real posts. People who already hold crypto are targeted because a wallet with value is what the site is built to empty.

Red flags to check on the email

• A free token or NFT you never signed up for.
• A link to connect your wallet from a message or a reply.
• A wallet prompt that asks to approve spending of all tokens.
• A countdown or a 'slots left' line pushing speed.
• Hover over the link: the address does not match the company website.
• The email asks you to log in through the link rather than through the official app.

What to do

1. Do not connect your wallet to a site you reached from a message.
2. Read the wallet prompt: if it says approve or spend for all tokens, reject it.
3. Visit a project's official site only through its verified channel typed by hand.
4. Go to the company website by typing it yourself and check your account there.
5. Check the full sender address, not just the display name.
6. Report it as phishing in your email app and delete it.

Use Report phishing in your email app. If money or accounts are affected, call 1930 and report at cybercrime.gov.in.

If money or a code is already gone

1. If you signed an approval, move remaining assets to a new wallet at once and revoke permissions using a trusted tool.
2. Report at cybercrime.gov.in and call 1930 with the wallet address and transaction ids.
3. If you used an exchange, tell its support team through the official app.
4. Ignore anyone who offers to recover the coins for a fee.

National Cyber Crime Helpline: 1930; report at cybercrime.gov.in.

Safeavio's link check can look at an airdrop link you paste before you open it and warn about lookalike addresses and risky patterns, and the scam check on the message flags the countdown and the free-gift pressure. It does not manage or inspect your crypto wallet and cannot reverse a blockchain transfer, so the safest habit is never to connect a wallet from a message.

Full guide: Crypto Airdrop and Wallet Drainer Link Scam: how it works, signs and what to do. Other channels: social media, WhatsApp, fake app.

Questions