Ghost Token
A worthless token sent unsolicited to many wallets to create the illusion of value and entice victims to interact with a malicious contract to 'sell' it.
Also known as: scam token, zombie token, trash token, dust token
Last reviewed: 10 June 2026
Ghost tokens (also called scam tokens or zombie tokens) are ERC-20 or similar tokens with no real backing or utility that attackers bulk-mint and air-send to thousands of wallet addresses. Blockchain explorers and wallet interfaces display them as incoming transfers, prompting curious recipients to investigate.
When a user attempts to sell or swap the ghost token on a DEX, the token's smart contract calls a malicious approval function that drains the wallet, or the user is directed to a phishing site where they sign a dangerous transaction. Some ghost tokens cannot be sold at all (honeypot variant); others simply consume gas fees on every failed interaction.
The safest response to receiving an unexpected, unrecognised token is to do nothing. Do not attempt to swap, sell, transfer, or interact with it in any way. Hiding it in wallet settings without interacting is the recommended practice.