The clone claim site
The dominant attack is boring and devastatingly effective: register a domain that looks like the real project — a dash added, a different TLD, 'claim' bolted onto the name — buy some search ads or reply to hopeful users on social media, and present a perfect copy of the real claim page. The fake site asks you to connect a wallet and sign a transaction; the transaction drains everything the wallet can sign away.
The defense is procedural, not technical: never arrive at a claim page through a link someone handed you. Type the project's domain yourself, navigate from its verified social profile, or use a directory that documents how it verified each link. Every airdrop guide we publish states the exact official domain and how we cross-checked it — because the difference between the real domain and the clone is the entire game.
The seed-phrase 'validation' lie
The second mechanic targets people who think they're troubleshooting. A 'support agent' or a popup explains that to receive your allocation you must 'validate', 'sync', or 'import' your wallet — by entering your twelve or twenty-four word seed phrase. The framing varies; the ask never does.
Here is the rule with no exceptions, asterisks, or special cases: a seed phrase is the wallet. Anyone who has it owns everything in it, instantly and irreversibly. No legitimate airdrop, exchange, wallet app, or support team will ever ask for it, in any flow, for any reason. The moment anything asks for a seed phrase, the interaction is theft in progress and you close the tab. This single habit defeats the majority of all crypto scams in circulation.
Urgency, DMs, and the deposit twist
Around the two core mechanics sits a layer of pressure tactics. Scammers DM you first — real projects don't. Countdown timers demand you claim in the next twenty minutes — real claim windows last weeks and are announced publicly. 'Gas fee deposits' or 'activation payments' are requested up front — real claims cost at most normal network gas paid from your own wallet, never a transfer to someone else's address.
A newer variant worth knowing: campaigns marketed as airdrops that require depositing stablecoins into a vault to 'farm' an unconfirmed token. Whatever the team's intentions, that's an investment with smart-contract risk wearing an airdrop costume. Our editorial rule is blunt: if step one is depositing money, it's not an airdrop and we don't list it as one.
The claim hygiene checklist
Use a dedicated claims wallet that never holds more than you're claiming — if something goes wrong, the blast radius is one empty wallet, not your savings. Read every transaction before signing and reject anything you don't understand, especially token approvals to unfamiliar contracts. After claiming, revoke leftover approvals with a token-approval checker.
And slow down. Every successful wallet drain has the same final ingredient: a person moving faster than their own judgment because free money was allegedly expiring. The real claims on our airdrops list publish their deadlines weeks ahead. Nothing legitimate in this space requires you to act in the next ten minutes.