NFT Mint Scams
Fraudulent NFT collections take mint payments and deliver nothing, or use fake mints to drain wallets.
Last reviewed: 1 June 2026
What this scam is
NFT mint scams are fraudulent schemes that exploit the NFT minting process — the act of creating and purchasing a newly issued digital token on a blockchain — to steal money or drain wallets. They take several forms, ranging from outright theft of mint fees to sophisticated wallet-draining attacks disguised as legitimate mint events.
In the simplest form, a fake NFT project is created, promoted heavily across social media, and opens a paid mint that collects cryptocurrency from buyers. After the mint, the team disappears — there is no NFT delivered, or tokens arrive with no associated artwork or utility — and the collected funds are moved out of reach. This is a variant of a rug pull specific to the NFT context.
In the more technically sophisticated form, a fake mint page targets the wallet itself rather than just the mint fee. The page is usually a clone of a real or anticipated project's mint interface. When you interact with it, the 'mint' transaction is actually a malicious approval or a contract call that drains your existing assets rather than — or in addition to — charging a mint fee.
NFT communities are often deliberately cultivated over weeks before a mint event to create genuine excitement and FOMO. Fake projects mimic this community-building behaviour, making it genuinely difficult to distinguish them from legitimate ones at the pre-mint stage.
How it works
Scammers monitor trending NFT projects and either clone their branding to create a fake parallel project, or create an entirely new project built on artificial hype. A website is created with generative artwork previews, a roadmap, and a team section (often with stock photos or AI-generated faces). Social accounts are launched and followers are built through follow-for-follow tactics, paid promotions, and bot activity.
A whitelist or presale process adds perceived legitimacy. Potential minters are added to a list based on completing tasks (following accounts, joining Discord), which creates engagement that looks organic.
When the mint opens, buyers send cryptocurrency to the contract. In a straightforward exit scam, the funds accumulate and are then swept by the deployer wallet. No artwork is revealed or the revealed collection is low-effort AI-generated images with no utility as promised.
In the drainer variant, the mint site is a phishing page that requests wallet approvals far beyond what a legitimate mint would require. The contract call grants the attacker access to the visitor's existing token and NFT holdings. Victims discover not only that they received nothing, but that their existing collection has been stolen.
Some mint scams operate by posting fake 'stealth launch' mint links in official-looking Discord or Telegram announcements, directing real community members to a fraudulent contract address while the real project's actual mint operates elsewhere.
Why this scam works
NFT minting involves real financial transactions that move quickly — collections sell out in minutes or seconds, and hesitation means missing out. This time pressure is used deliberately by scammers to prevent the verification steps that would expose the fraud.
The NFT community has normalised connecting wallets to new sites and signing mint transactions. Users experienced with legitimate mints may not scrutinise each new site carefully because the process feels familiar.
Artificial social proof — large Discord servers, Twitter follower counts, apparent influencer endorsements — substitutes for due diligence. A community of thousands feels like validation even if it has been artificially inflated.
A typical pattern
A new NFT project builds a following over six weeks with daily Discord updates, artwork reveals, and a growing community of several thousand members. A whitelist mint opens with a short window. Members who secured a whitelist spot connect their wallets and complete the mint transaction. The transaction confirms and tokens appear to be sent. No artwork is revealed after the scheduled date. The website goes offline. The Discord is deleted. The collected funds are moved through multiple wallets. Community members who minted are left with tokens that render as blank squares or error images, with no way to contact the team.
Common red flags
- Team members with no verifiable history or AI-generated profile images
- Social accounts created very recently with rapidly acquired followers
- No independently verifiable audit of the smart contract
- Urgent 'stealth launch' announcement with a very short mint window
- Mint contract address only available from Discord or social media, not the official site
- Artwork that appears AI-generated with no artistic identity
- Roadmap with vague, unenforceable promises of future utility
- Wallet approval request during mint beyond what the transaction requires
- Discord server created recently or moderation team with new accounts
Sanitized example messages
Illustrative, sanitized examples. Personal details are replaced with placeholders such as [phone number] and [fake link].
Stealth launch in 20 minutes — whitelist contract address dropping in Discord. Be ready.
Mint is LIVE. [amount] ETH per token. Contract: [wallet address]. Only 500 supply — go now.
Claim your presale allocation before public mint opens. Connect wallet at [fake link].
We are doing a surprise mint for our Discord community. Link: [fake link]. Closes in 1 hour.
Our contract has been audited. Mint securely at [fake link] — art reveal 48 hours after sellout.
Last 50 whitelist spots. Mint page at [fake link]. Do not share — exclusive to this server.
Common variations
- Full exit rug — funds collected at mint, no art delivered, team vanishes
- Fake parallel project — clone of a legitimate upcoming project steals mint fees
- Drainer mint — mint interaction steals existing wallet contents
- Fake stealth launch — scam contract announced as a surprise exclusive mint
- Fake mint extension — 'second mint phase' announced for a real project but with a scam link
- AI art collection with no utility — technically delivered but worthless and misrepresented
How to verify before you act
Verify the mint contract address independently. The real contract address for any legitimate project should be announced on their official website and verifiable on a block explorer. Never use a contract address obtained only from a Discord message or social media post.
Check how long the project's social accounts have been active. Accounts created weeks before a mint with rapidly accumulated followers are suspicious.
Search for any team members listed on the project. Legitimate team members typically have a verifiable professional history. Stock photos or AI-generated profile images are a serious red flag.
Review the smart contract on a block explorer before minting. Check whether it contains unusual functions, whether it is verified (source code visible), and whether any security researchers have flagged it.
Be especially cautious of urgent 'stealth launches' announced with very short windows — this format is a common scam vector.
Payment methods used
- Cryptocurrency mint fees (ETH, SOL, or similar)
- Wallet approval enabling wider asset drain
Who is usually targeted
- NFT collectors and minters
- Crypto users following new project launches
- DeFi users with existing token and NFT holdings
What to do immediately
- Do not mint from any contract address obtained solely from a Discord or social media message
- If you have connected your wallet to a suspicious mint site, check and revoke token approvals immediately
- If a drain has occurred, move remaining assets to a new wallet
- Document all transaction hashes, the contract address, and screenshots of the project's social presence
- Report the scam to the platform hosting the project's social accounts
- Do not pay any 'recovery service' for lost NFTs or tokens — this is a second scam
How to prevent it
- Only mint from contract addresses published on the project's official verified website
- Verify the team's identities independently before minting a high-value project
- Check the contract on a block explorer before sending funds
- Use a separate wallet with limited funds for minting new, unverified projects
- Be sceptical of urgent stealth launches and surprise mints announced via DM or Discord
- Set a personal limit on how much you will spend on any single unaudited project
- After minting, check and revoke any approvals the contract requested
Evidence to preserve
- Transaction hashes for mint payments and any approvals
- The contract address
- Screenshots of the project website, social accounts, and Discord
- Any communications from the team
- Wallet addresses associated with the project deployer
Where to report it
- Action Fraud (UK) — UK national fraud & cybercrime reporting centre
- FTC ReportFraud (US) — US Federal Trade Commission fraud reports
- FBI IC3 (US) — US Internet Crime Complaint Center
- Scamwatch (Australia) — Australian competition & consumer reporting
- Your bank's fraud line — Use the number on the back of your card or in your banking app — never a number the caller gives you
Always verify reporting routes and emergency contacts on the official government or agency website for your country.
Frequently asked questions
Is every new NFT project a scam?
No. Legitimate NFT projects exist. The key is applying due diligence: verify team identities, check the contract, use the official mint address, and invest only what you can afford to lose given the speculative nature of the market.
What is a stealth launch and why is it used by scammers?
A stealth launch is an unannounced or very short-notice mint event. Legitimate projects occasionally do these, but scammers use the format because the urgency prevents careful verification. If you cannot spend five minutes checking the contract address, that is a sign to wait.
I minted and received no artwork — what should I do?
Document the transaction hash and contract address. Check whether the project's social accounts are still active. If the team has disappeared, report to the relevant fraud authority and to the blockchain community. Recovery is unlikely but reporting helps.
Can crypto transactions be reversed if I was scammed?
No. Blockchain transactions are final. There is no authority that can reverse a completed mint payment or drain transaction. This is why prevention and verification before transacting are essential.
Are 'crypto recovery services' that offer to recover my lost NFTs legitimate?
Almost never. These are a well-documented second scam targeting people who have already lost money. They charge fees and deliver nothing. Do not engage with them.
How can I check if an NFT contract is safe?
Look up the contract address on a block explorer. Check whether the source code is verified (published and readable). Look for unusual functions like unrestricted minting or fee draining. Search for any security researcher reports about it. Consider using a service that analyses contract risk.
Why do scammers build Discord communities for fake projects?
A large, active Discord gives social proof that makes a project look legitimate. Followers and activity can be artificially inflated quickly and cheaply, so the presence of a large Discord alone is not a reliable indicator of legitimacy.