Airdrop Scams: How to Spot Them in Ten Seconds, Every Time

Airdrop phishing is the most common attack in crypto because it weaponizes good news, and it dies against one test that takes ten seconds: a real airdrop asks nothing of you, no site, no connection, no signature, no fee, so anything that asks is a scam, one hundred percent of the time. This guide shows the machinery behind the fake claim pages, walks a real distribution for contrast, and covers the honest emergency plan if a click already happened.

The Ten-Second Test

Run every airdrop message, post, ad, or popup through one question: does it ask me to do something to receive the tokens? Connect a wallet, sign a message, pay a "gas fee for release," enter a seed phrase, act before a countdown ends. If the answer is yes, you are looking at a scam, and the logic is airtight, a genuine distribution already knows your address, that is what the snapshot was, and it delivers to that address the way a paycheck delivers to your account, without your help. The test needs no research, no tooling, and no crypto expertise, which is exactly why it works at the moment scams are designed to exploit, the excited one.

How the Scam Actually Works

The machinery, so the test makes visceral sense:

• The lure. A post, DM, or ad announces you are eligible, often riding a real project's news within hours, real announcements make the best camouflage.
• The fake claim site. A polished page, correct logos, a countdown, and one button, connect your wallet.
• The signature. The site requests a transaction or signature framed as claiming. What it actually authorizes is spending access to your assets, the industry calls them drainer signatures, one approval and the wallet empties in seconds.
• The variant that skips all subtlety simply asks for your seed phrase to "verify eligibility." The rules from our wallet guide apply with no exceptions, the phrase is never typed anywhere except your own wallet app during a restore.

Countdown timers deserve their own sentence, urgency exists to beat your ten seconds, real distributions do not expire in minutes, ever.

A Real Airdrop, For Contrast

The cleanest recent example ran through our own ecosystem. When Polkastarter migrated POLS from BNB Chain to Base, the announced distribution worked like this: snapshot already taken, tokens delivered one to one automatically, arriving already staked, with no claim step existing at all, and we printed the warning in the same breath, any site asking BSC holders to claim was a scam by definition. Hold that template against every future airdrop you hear about: the real one names its snapshot, delivers automatically, and asks nothing, and a project's official channels will say exactly that. When an announcement is ambiguous about mechanics, the ten-second test resolves it anyway, whatever asks, lies.

If You Already Clicked

Honesty section, because it happens, and speed matters more than shame:

• Connected but signed nothing? Disconnect the site in your wallet's settings, you are likely fine, connections alone do not move funds.
• Signed something? Assume compromise. Move everything to a fresh wallet with a fresh seed phrase immediately, assets first, and revoke the old wallet's approvals using your wallet's token-approval tools afterward.
• Typed your seed phrase somewhere? That wallet is gone as a secure home. Create a new wallet, move anything still there instantly, and never reuse the exposed phrase.
• Then slow down and rebuild the habits, the full security stack is in our seed phrase guide.

Nothing in this guide is financial advice, it is armor.

Frequently Asked Questions

How do I know if an airdrop is real?

Apply the ten-second test, a real airdrop asks nothing of you. Genuine distributions deliver automatically to addresses from an already-taken snapshot, the way the POLS migration to Base worked, no site, no wallet connection, no signature, no fee. Anything that asks you to claim, connect, sign, or pay is a scam, without exceptions.

What is a drainer signature?

The payload of most airdrop scams, a transaction or signature request on a fake claim site that actually grants spending access to your assets. One approval can empty a wallet in seconds. The defense is refusing the situation entirely, real airdrops never require signatures, so the request itself is the proof of fraud.

Why do airdrop scams use countdowns?

Because urgency is the whole attack, the timer exists to make you act before thinking, and it is a reliable tell in itself, real distributions do not expire in minutes. Any airdrop message engineered to rush you has answered the ten-second test for you.

What if I connected my wallet to a fake claim site?

If you only connected, disconnect the site in your wallet settings, connections alone do not move funds. If you signed anything, treat the wallet as compromised, move assets to a fresh wallet with a new seed phrase immediately and revoke old approvals after. If you typed your seed phrase, the old wallet is permanently unsafe, migrate now.

Do real projects ever require claiming?

Some legitimate token launches use claim processes, which is why the test targets what is asked, not the word claim. A genuine claim happens on a project's official domain announced through its official channels, never via DMs or ads, and it never asks for a seed phrase or a release fee. When in doubt, navigate from the project's verified account yourself, or skip it, real value survives your caution.

Where to Go From Here

Ten seconds, one question, zero exceptions, and the most common attack in crypto stops working on you forever. The rest of the safety stack lives in this series, and the fun lives where everything is shown up front, the Polkastarter marketplace, every Lootbox listing its cards, values, and chances before you open, free mystery pack at signup.

Scam patterns described are current as of August 2026 and evolve, the ten-second test does not, and nothing here is financial advice.

Sources

• The POLS BSC to Base migration, the real-airdrop template
• Polkastarter on X
• The Polkastarter marketplace