Home / The four types / Fake airdrops
SAFETY · Anti-phishing for airdrops

How to spot a fake airdrop at a glance:
a real airdrop never asks you to pay gas first

Updated 2026-07About 12 minLin Yue · Coinrayn editorsSafety guidance, not investment advice
Spotting fake airdrops: a real airdrop never asks you to click a link, pay gas, or approve your wallet first

The more you live in new tokens, airdrops, and TGEs, the easier it is to trip up on "claiming an airdrop." The reason is simple: you're already waiting for coins to fall from the sky, and scammers know it. A "you have an airdrop waiting to claim" prompt is junk to most people, but to someone mid-farm it lands right on the expectation — and the itchy hand clicks.

This piece isn't here to scare you, just to lay it out: what a real official airdrop looks like, how fakes set the trap, and which few rules let you tell them apart at a glance. By the end you should be able to do one thing — next time you see "come claim your airdrop," run these rules through your head before you decide whether to touch anything. If you're still fuzzy on what Binance's official airdrops actually are, start with the overview of the four types for grounding.

Remember one line first

Binance's official airdrops either arrive automatically or are claimed inside the Binance app — Launchpool and HODLer drops usually land in your account on their own, while something like Alpha points may need you to tap claim yourself, often within a time window, so don't just leave it. But either way the action happens inside Binance's app or site: never by paying gas first, never by approving your wallet, and never by handing over your private key or seed phrase. Anything that sends you to an unfamiliar outside site to do those things should be treated as a scam. Better to miss out than to click wrong.

01Why airdrop farmers get targeted most

Scammers pick targets by "psychological gaps," and people who farm and chase airdrops have two of them.

The first is a natural greed for new tokens. You're used to the logic of "get on early, grab something free," so an unfamiliar project name doesn't set off alarms — new projects are ones you've never heard of anyway. Scammers lean on exactly this, cooking up a fake coin or event that looks like "the next 100x," making you feel you'll lose out by missing it, and rushing you to act.

The second is too much, too messy information. An active farmer bounces all day between the exchange, wallets, X, Telegram, and a pile of group chats, with real and fake announcements jumbled together. When the information density gets high, people relax and click a phishing link as if it were just another normal event.

So it isn't that you're careless if you get caught — it's that the more invested you are, the bigger your exposure. That's why "defending against fake airdrops" isn't optional for a farmer; it's a basic skill. First let's look at what the real thing looks like — with a reference, the fakes get easy to spot.

02What an official airdrop looks like

Memorizing what the genuine article looks like is the least-effort way to recognize a fake. Binance's official ways of handing out free new tokens (HODLer airdrops, Launchpool, Megadrop, and so on) share a few things in how they reach you:

In other words, a real airdrop is "you do nothing and the coins arrive on their own"; a fake is "you have to do a whole sequence of things before the coins will come." That gut-level difference is the foundation for everything that follows. To confirm whether an event is actually official, the safest move is to check it against Binance's official announcements page rather than trusting a link someone forwarded you.

03The common fake-airdrop playbooks

The dressing changes, but the skeletons are just a few. Learn the skeleton and you'll spot it even with new skin.

Playbook 1: tokens appear in your wallet, luring you to a site to connect and approve

This is the most common on-chain one. One day you open your wallet and find a batch of tokens that appeared out of nowhere, with a name that looks convincing and a displayed value in the thousands. You check, and its name or description carries a web address, the message being "go to this site to swap/withdraw it."

The moment you comply — enter the site, connect your wallet, click Approve — the trouble starts. That approval isn't for withdrawing your tokens; it hands control of one of your real assets (say USDT or ETH) to a malicious contract. Once you sign, they can move the matching assets out of your wallet. The token is the bait; the approval is the knife. Remember: receiving an unknown token is harmless in itself — the danger is interacting with it.

Playbook 2: a phishing link stuffed into the transfer memo

Sometimes it's not a token but a tiny transfer, maybe worth a few cents, with a line in the note / memo / transfer message saying "congratulations, log in at xx site to claim." It's betting that the deposit alert makes you curious enough to click that link. Click through and it's usually a spoofed login page asking for your account and password or seed phrase. Legitimate transfers don't put event links in the memo — treat it as junk on sight.

Playbook 3: "pay a gas fee / deposit to unlock and activate"

This script loves the "you have a big airdrop waiting" setup: the page shows you can claim thousands, but you must first pay a small "gas fee / activation fee / unlock deposit" for it to arrive. It sounds like a bargain — "I pay a few dollars for thousands" — but those few dollars are the whole scam: pay and you get nothing, or you're led to pay more, step by step. As said above: a real airdrop never needs you to pay first, so any "pay a fee before you can claim" is backwards.

Playbook 4: impersonating Binance support or an event page to make you log in

Scammers pose as "Binance support" or an "official events officer," reaching you by DM, group chat, or email, saying you have an airdrop to activate or an account to verify, and send a near-identical fake login page. Log in and your account, password, even your verification code land in their hands. Real support won't DM you to claim an airdrop, and definitely won't have you log in through an off-site link. For anything that requires logging in, open the official domain yourself — don't click a link someone gave you.

Playbook 5: "enter your address to claim" to harvest your info

Another type doesn't steal money directly; it steals information first: a form saying "enter your wallet address / email / phone number to claim the airdrop." You fill it in, no obvious loss short-term, but your address and contact details go onto the scammer's list, and more targeted phishing comes knocking next — they know you have a wallet and are waiting on airdrops, so the next setup aimed at you looks even more real.

What they all share

Whatever the playbook, they all make you take one extra active step: click, connect, approve, pay, log in, enter your info. A real airdrop, by contrast, needs nothing from you. Treat that contrast as your alarm: the moment "claiming an airdrop" requires an extra action from you, turn your guard all the way up.

04A few hard rules to spot them instantly

If you don't want to memorize a pile of playbooks, the few "hard rules" below are enough. Hit any one of them and it's basically a death sentence.

It asks you to…VerdictWhy
Give your private key / seed phraseDefinitely a scamNo legitimate platform will ever ask for either
Pay a gas fee / fee before you can claimDefinitely a scamA real airdrop never needs you to pay first
Connect a wallet and approve from a stranger's linkHighly dangerousThe approval can be used to drain your assets
Log in on a domain that isn't the official oneTreat as fakeUsually a spoofed login page after your credentials
Act on an out-of-nowhere token via an external siteDon't click, don't connectThe token is bait; the action step is the trap

And one plainest rule to add: check the domain. Plenty of fake sites make the domain look nearly right (an extra letter, a swapped suffix, an added hyphen) — you can't tell without looking closely. For any page asking you to log in or connect a wallet, read the address bar in full first, and if it doesn't match the official one, close it. When in doubt, take the long way and open it yourself from the official app or website rather than a shortcut someone handed you.

05What to do if you've already been hit

If you've already clicked, connected, or approved, don't panic — work through it by priority. The faster you move, the more you keep.

Revoking approvals and moving assets both cost a little network fee, but that's the cost of cutting your loss on purpose, not being scammed. Spend it when you need to — next to being drained in one shot, this fee is nothing.

Be clear about the harm, without panicking

The harm from fake airdrops is real — an abused approval can drain your wallet; leaked credentials put your assets and identity at risk. But it almost always needs you to take one extra step by hand before it can happen. Hold the line on "never give your private key or seed phrase, never pay first, don't connect or approve from a stranger's link, and don't log in on a non-official domain," and the vast majority of setups can't touch you. No fear-mongering, but take it seriously.

06Run it through the self-check tool first

The reasoning is easy to read once, but you may not remember all of it in the heat of the moment. So we turned the checks above into a checklist-style self-check tool: tick off the situation of the "airdrop" in front of you point by point — does it ask you to pay gas, does it want you to connect and approve a wallet, is the domain right, is someone rushing you — and when you're done it gives you a clear verdict on which red lines it crossed.

When you hit an "airdrop" you're unsure about, don't go by gut — run it through this checklist first: fake-airdrop self-check tool. It won't decide for you, but it lays out the easy-to-miss red lines one by one so you cool down before you act.

Also, once you've told real from fake, how to set up genuine airdrop eligibility so you don't miss out is a separate matter — see how to catch HODLer airdrops without missing any. Put your coins in the right place and the airdrops that should come will land in your account on their own — you never need to go anywhere to "claim" them.

FAQ

Can I sell tokens that appear in my wallet out of nowhere?
Better not to touch them. These uninvited tokens are often phishing bait — the name or memo usually carries a web address that lures you to a site to connect your wallet and approve, and once you approve, the scammer can drain your real assets. Safest is not to click, connect, or approve — just leave it or hide it in your wallet. Sitting there it does nothing; the danger is interacting with it.
Would a real Binance airdrop ever make me pay gas or a fee to claim?
No. Binance's official airdrops like HODLer and Launchpool deposit new tokens straight into your spot account — no paying gas first, no going to an external site to connect a wallet, and certainly no approving anything or entering a private key. Anything that asks you to send a fee first to activate or unlock is essentially a scam.
Someone sent me an airdrop link and wants me to connect my wallet. Is it safe?
Be very careful. A stranger's link that asks you to connect and approve is one of the most common ways assets get stolen. An approval hands over control of some token, and a malicious contract can drain your wallet in one go. Unless you can confirm the domain is official, don't connect, sign, or approve. Run it through the self-check tool point by point first.
I already clicked approve. What now?
Go to an approval-manager tool (such as revoke.cash) and revoke the approval to that suspicious address or contract as fast as you can. If your wallet still holds sizeable assets, move them to a clean new wallet first. For anything tied to an exchange, change your password, turn on two-factor, and check your login history. Revoking and moving costs a little network fee, but that's cutting your loss, not being scammed.