Safety
Fake Airdrops and Wallet-Draining Links: How the 'Free Crypto' Trap Works
"Congratulations — you are eligible for 500 free USDT. Connect your wallet to claim." That message, sent to thousands of people at once, is one of the most common ways African crypto users lose funds. This guide explains how the trap is built.
Last reviewed: 20 October 2026
The two rules that defeat almost every airdrop scam
Real airdrops never need your seed phrase, and never ask you to send money to receive money. 'Pay a small gas fee to unlock your tokens' is the scam, not the exception.
How the drainer trap works
- 1You see a post, ad or DM about free tokens — often imitating a real project, exchange or influencer, sometimes with a hacked verified account.
- 2The link opens a polished site with a countdown and a 'Connect wallet to claim' button.
- 3The site asks you to sign a transaction. Hidden in it is an approval giving the scammer's contract permission to spend your tokens.
- 4Your USDT and other tokens are transferred out — immediately or hours later, without any further action from you.
A common variant sends a worthless 'free' token into your wallet first. When you visit the site shown in the token's name to 'sell' it, the site asks for the approval that drains your real balance.
Checks before connecting a wallet anywhere
- Did you look for this, or did it come to you? Unsolicited airdrops, DMs and group posts are hostile by default.
- Is the domain exactly the project's official domain? Scammers use near-identical spellings and paid search ads.
- What is the site actually asking for? 'Connect' to view is one thing; signing a transaction or approval to 'claim' is where the risk lives.
- Does it ask for a seed phrase or private key at any point? Close the page — no legitimate service asks for this.
- Is there urgency — a countdown, a 'last chance'? Urgency exists to stop you checking.
If you already connected or signed
- 1Disconnect the site in your wallet and revoke the token approvals using the approval-checker on the relevant block explorer (for example Etherscan's token approval tool).
- 2Move all remaining funds to a brand-new wallet with a new seed phrase. Do not reuse the old wallet afterwards.
- 3If you entered a seed phrase anywhere, that wallet is finished: create a new one and move everything immediately.
- 4Report the link to the platform where you found it and to your wallet provider's official phishing-report channel.
Do not test a suspicious site with a 'small amount'. Drainers take whatever the approval covers, which is often your entire balance of that token.
A simpler rule for most users
If you use crypto mainly to buy, sell and cash out stablecoins, you do not need to interact with airdrop sites at all. Ignoring every unsolicited 'free crypto' offer costs you nothing and eliminates this entire category of risk. For the token-side checks that matter in normal trading, see fake USDT and wrong-network deposits.
Frequently asked questions
Are any airdrops real?
Some legitimate projects distribute tokens, but real airdrops never require your seed phrase and never require you to send funds first. Any 'airdrop' demanding a payment, a seed phrase or an unlimited wallet approval should be treated as a scam.
What is a wallet drainer?
A malicious website or smart contract that, once you connect your wallet and sign its transaction, gains permission to transfer your tokens out. The signature you give is the theft — no further access is needed.
I signed something on a suspicious site. What should I do?
Move your funds to a fresh wallet immediately, then revoke the token approvals you granted using a reputable approval-checker on a block explorer. Assume the old wallet is compromised.
Why do scammers ask for a seed phrase to 'claim' tokens?
Because the seed phrase is the wallet. Whoever has it controls everything in it, from any device, forever. No legitimate claim, airdrop or verification process ever needs it.
Sources and scope
Official wallet-security guidance checked on 20 October 2026. This is general fraud-prevention information.
- MetaMask: Airdrop phishing scams — how unsolicited tokens lure users to malicious sites and contracts.
- Trust Wallet: How to spot a crypto scam — airdrop scams, fraudulent websites and social-media phishing.
Related guides
Fake crypto support scams
Nobody from real support DMs you first, asks for a seed phrase or requests a 'verification fee'. How to check and where to report.
Read guideNetworksUSDT networks explained
The asset is USDT; the network is how it travels. What to check before you send a transfer.
Read guideSafetyCrypto Ponzi schemes in Africa
Guaranteed daily returns, referral bonuses and pressure to recruit: the pattern behind collapsed schemes and how to verify a platform.
Read guideCryptoPayAfrica provides independent educational and comparison information. We do not provide investment advice, exchange cryptocurrency, hold customer funds or execute transactions. Cryptocurrency services, fees and availability can change. Verify current information directly with the relevant provider.