The more you live in new tokens, airdrops, and TGEs, the easier it is to trip up on "claiming an airdrop." The reason is simple: you're already waiting for coins to fall from the sky, and scammers know it. A "you have an airdrop waiting to claim" prompt is junk to most people, but to someone mid-farm it lands right on the expectation — and the itchy hand clicks.
This piece isn't here to scare you, just to lay it out: what a real official airdrop looks like, how fakes set the trap, and which few rules let you tell them apart at a glance. By the end you should be able to do one thing — next time you see "come claim your airdrop," run these rules through your head before you decide whether to touch anything. If you're still fuzzy on what Binance's official airdrops actually are, start with the overview of the four types for grounding.
Binance's official airdrops either arrive automatically or are claimed inside the Binance app — Launchpool and HODLer drops usually land in your account on their own, while something like Alpha points may need you to tap claim yourself, often within a time window, so don't just leave it. But either way the action happens inside Binance's app or site: never by paying gas first, never by approving your wallet, and never by handing over your private key or seed phrase. Anything that sends you to an unfamiliar outside site to do those things should be treated as a scam. Better to miss out than to click wrong.
01Why airdrop farmers get targeted most
Scammers pick targets by "psychological gaps," and people who farm and chase airdrops have two of them.
The first is a natural greed for new tokens. You're used to the logic of "get on early, grab something free," so an unfamiliar project name doesn't set off alarms — new projects are ones you've never heard of anyway. Scammers lean on exactly this, cooking up a fake coin or event that looks like "the next 100x," making you feel you'll lose out by missing it, and rushing you to act.
The second is too much, too messy information. An active farmer bounces all day between the exchange, wallets, X, Telegram, and a pile of group chats, with real and fake announcements jumbled together. When the information density gets high, people relax and click a phishing link as if it were just another normal event.
So it isn't that you're careless if you get caught — it's that the more invested you are, the bigger your exposure. That's why "defending against fake airdrops" isn't optional for a farmer; it's a basic skill. First let's look at what the real thing looks like — with a reference, the fakes get easy to spot.
02What an official airdrop looks like
Memorizing what the genuine article looks like is the least-effort way to recognize a fake. Binance's official ways of handing out free new tokens (HODLer airdrops, Launchpool, Megadrop, and so on) share a few things in how they reach you:
- Distribution happens inside Binance. If you're eligible, Launchpool and HODLer tokens land straight in the spot wallet of your Binance account; something like Alpha points may need you to claim it in the app yourself. Either way, there is never a reason to "claim" on an external site.
- You don't click a link. Binance won't DM you a "claim portal" to click into, and certainly won't send links to rush you via random texts, emails, or group messages.
- You don't pay gas or a fee. The deposit happens inside the platform; there's no "send a fee first to activate" step.
- You don't approve a wallet. An official airdrop won't have you connect some web wallet and then click "Approve" to receive the tokens.
- They will never ask for your private key or seed phrase. Any step, any "support agent" — the moment they ask for either, it is 100% a scammer, no exceptions.
In other words, a real airdrop is "you do nothing and the coins arrive on their own"; a fake is "you have to do a whole sequence of things before the coins will come." That gut-level difference is the foundation for everything that follows. To confirm whether an event is actually official, the safest move is to check it against Binance's official announcements page rather than trusting a link someone forwarded you.
03The common fake-airdrop playbooks
The dressing changes, but the skeletons are just a few. Learn the skeleton and you'll spot it even with new skin.
Playbook 1: tokens appear in your wallet, luring you to a site to connect and approve
This is the most common on-chain one. One day you open your wallet and find a batch of tokens that appeared out of nowhere, with a name that looks convincing and a displayed value in the thousands. You check, and its name or description carries a web address, the message being "go to this site to swap/withdraw it."
The moment you comply — enter the site, connect your wallet, click Approve — the trouble starts. That approval isn't for withdrawing your tokens; it hands control of one of your real assets (say USDT or ETH) to a malicious contract. Once you sign, they can move the matching assets out of your wallet. The token is the bait; the approval is the knife. Remember: receiving an unknown token is harmless in itself — the danger is interacting with it.
Playbook 2: a phishing link stuffed into the transfer memo
Sometimes it's not a token but a tiny transfer, maybe worth a few cents, with a line in the note / memo / transfer message saying "congratulations, log in at xx site to claim." It's betting that the deposit alert makes you curious enough to click that link. Click through and it's usually a spoofed login page asking for your account and password or seed phrase. Legitimate transfers don't put event links in the memo — treat it as junk on sight.
Playbook 3: "pay a gas fee / deposit to unlock and activate"
This script loves the "you have a big airdrop waiting" setup: the page shows you can claim thousands, but you must first pay a small "gas fee / activation fee / unlock deposit" for it to arrive. It sounds like a bargain — "I pay a few dollars for thousands" — but those few dollars are the whole scam: pay and you get nothing, or you're led to pay more, step by step. As said above: a real airdrop never needs you to pay first, so any "pay a fee before you can claim" is backwards.
Playbook 4: impersonating Binance support or an event page to make you log in
Scammers pose as "Binance support" or an "official events officer," reaching you by DM, group chat, or email, saying you have an airdrop to activate or an account to verify, and send a near-identical fake login page. Log in and your account, password, even your verification code land in their hands. Real support won't DM you to claim an airdrop, and definitely won't have you log in through an off-site link. For anything that requires logging in, open the official domain yourself — don't click a link someone gave you.
Playbook 5: "enter your address to claim" to harvest your info
Another type doesn't steal money directly; it steals information first: a form saying "enter your wallet address / email / phone number to claim the airdrop." You fill it in, no obvious loss short-term, but your address and contact details go onto the scammer's list, and more targeted phishing comes knocking next — they know you have a wallet and are waiting on airdrops, so the next setup aimed at you looks even more real.
Whatever the playbook, they all make you take one extra active step: click, connect, approve, pay, log in, enter your info. A real airdrop, by contrast, needs nothing from you. Treat that contrast as your alarm: the moment "claiming an airdrop" requires an extra action from you, turn your guard all the way up.
04A few hard rules to spot them instantly
If you don't want to memorize a pile of playbooks, the few "hard rules" below are enough. Hit any one of them and it's basically a death sentence.
| It asks you to… | Verdict | Why |
|---|---|---|
| Give your private key / seed phrase | Definitely a scam | No legitimate platform will ever ask for either |
| Pay a gas fee / fee before you can claim | Definitely a scam | A real airdrop never needs you to pay first |
| Connect a wallet and approve from a stranger's link | Highly dangerous | The approval can be used to drain your assets |
| Log in on a domain that isn't the official one | Treat as fake | Usually a spoofed login page after your credentials |
| Act on an out-of-nowhere token via an external site | Don't click, don't connect | The token is bait; the action step is the trap |
And one plainest rule to add: check the domain. Plenty of fake sites make the domain look nearly right (an extra letter, a swapped suffix, an added hyphen) — you can't tell without looking closely. For any page asking you to log in or connect a wallet, read the address bar in full first, and if it doesn't match the official one, close it. When in doubt, take the long way and open it yourself from the official app or website rather than a shortcut someone handed you.
05What to do if you've already been hit
If you've already clicked, connected, or approved, don't panic — work through it by priority. The faster you move, the more you keep.
- Step 1: revoke the approval. Use an approval-manager tool to check the approvals your wallet has granted, and revoke the one given to the suspicious address or contract. Until it's revoked, they keep the power to move your tokens. A common tool for checking approvals is revoke.cash and the like (connect your wallet and you can see who you've approved, one by one, and revoke the suspicious ones).
- Step 2: move your remaining assets. If the wallet still holds sizeable coins, don't just scramble to revoke — move the core assets to a brand-new, clean wallet first, because you might not revoke cleanly and there may be more than one malicious contract. Get the assets safe, then clean up the old wallet at your own pace.
- Step 3: change passwords, check logins. If you entered exchange credentials on a spoofed login page, immediately go into the official app and change your password, turn on two-factor (2FA), and review your login devices and recent activity — handle any unfamiliar logins while you're there. For anything involving unusual fund activity, contact official support through the platform's process.
Revoking approvals and moving assets both cost a little network fee, but that's the cost of cutting your loss on purpose, not being scammed. Spend it when you need to — next to being drained in one shot, this fee is nothing.
The harm from fake airdrops is real — an abused approval can drain your wallet; leaked credentials put your assets and identity at risk. But it almost always needs you to take one extra step by hand before it can happen. Hold the line on "never give your private key or seed phrase, never pay first, don't connect or approve from a stranger's link, and don't log in on a non-official domain," and the vast majority of setups can't touch you. No fear-mongering, but take it seriously.
06Run it through the self-check tool first
The reasoning is easy to read once, but you may not remember all of it in the heat of the moment. So we turned the checks above into a checklist-style self-check tool: tick off the situation of the "airdrop" in front of you point by point — does it ask you to pay gas, does it want you to connect and approve a wallet, is the domain right, is someone rushing you — and when you're done it gives you a clear verdict on which red lines it crossed.
When you hit an "airdrop" you're unsure about, don't go by gut — run it through this checklist first: fake-airdrop self-check tool. It won't decide for you, but it lays out the easy-to-miss red lines one by one so you cool down before you act.
Also, once you've told real from fake, how to set up genuine airdrop eligibility so you don't miss out is a separate matter — see how to catch HODLer airdrops without missing any. Put your coins in the right place and the airdrops that should come will land in your account on their own — you never need to go anywhere to "claim" them.