Is an airdrop that asks me to connect my wallet to claim free tokens safe?
No. Connect-to-claim airdrop sites are a common wallet drainer attack that empties your crypto holdings in seconds.
Last reviewed: 1 August 2026
Explanation
Malicious airdrop sites impersonate genuine blockchain projects, celebrity crypto launches, or exchange promotions. When you connect your wallet to claim the promised tokens, you unknowingly sign a transaction that grants the site permission to transfer all assets from your wallet. Wallet drainer smart contracts can sweep an entire portfolio in a single automated transaction before you realise what has happened. Legitimate airdrops from established projects are distributed automatically to eligible wallet addresses — they never require you to connect to an external site and sign a transaction. If a site asks you to connect a wallet to receive something free, it should be treated as a drainer until proven otherwise.
Drainer kits are sold as ready-made criminal software, which is why these sites appear in waves around every major token launch, exchange announcement, and celebrity crypto moment. Hijacked verified social accounts and paid ads supply the traffic; urgency and free money supply the click. The signature request itself is where everything is decided — a wall of technical text that most users approve on reflex.
Slowing down at the signature prompt is the single most protective crypto habit. Read what the transaction actually grants: approvals for tokens you were not expecting, unlimited spending allowances, or blanket permissions over your NFTs are drain permissions, not claim steps. Keeping long-term holdings in a wallet that never touches unfamiliar sites removes most of the risk outright.
Common red flags
- Airdrop discovered via social media ad or DM
- Site asks you to connect your wallet to claim free tokens
- Transaction approval requests are vaguely worded or set to unlimited
- Project or token has no established presence before this announcement
- Urgent window to claim before tokens run out
What to do now
- Do not connect your wallet to an unfamiliar site
- If you connected, immediately revoke token approvals via your wallet's approval manager
- Move remaining assets to a new wallet address
- Report the site to the platform where you found it
Frequently asked questions
How do I revoke permissions after connecting to a suspicious site?
Use a token approval checker tool compatible with your wallet or blockchain. These tools show which contracts have spending permissions and let you revoke them. Act quickly — time matters.
Why did the site need any permission at all just to send me tokens?
It didn't — that is the tell. Genuine distributions send assets to eligible addresses without your involvement. Any 'claim' flow requiring transaction approval is asking you to authorise something, and with drainer sites that something is the removal of your funds.