Fake airdrop / token scam

How it works

Scammers announce a fake airdrop in your project name through ads, fake profiles, and lookalike sites, then ask users to connect a wallet to claim it. The claim page runs a drainer or requests a token approval that signs the funds away. Some demand a small fee up front as a hook.

These campaigns spike around real launches and news, when users are primed to expect a giveaway.

How it relates to brand impersonation

A fake airdrop is brand impersonation timed to your project moments of attention. It rides your name and your community excitement, and the sites behind it can be taken down.

How nebty helps

nebty monitors for the lookalike domains and fake profiles promoting airdrop scams in your project name and removes them on demand. See our crypto brand protection page.

How to tell a real airdrop from a trap

Fake airdrops thrive on timing and excitement, so the safest stance is patience. A real distribution rarely requires you to connect your wallet to a site you found through a reply, a DM, or an ad, and it never needs your seed phrase or an up-front fee to release your own tokens. The claim page is where the trap springs: it either asks for the seed phrase outright or requests a token approval that quietly hands the attacker the right to move your funds. Scammers time the campaign to a genuine launch or piece of news, when people are primed to expect a giveaway and less likely to check. Verify any airdrop through the project official channels, reached independently, before connecting anything. For the project, the lookalike sites and fake profiles promoting the scam in your name can be detected and taken down before the claim page collects much.