Wallets and phishing

Fake airdrops: an unfamiliar token in your wallet is bait

Updated 3 min read

In short

  • An unfamiliar token in your wallet is almost always an ad for a scam site, not a gift.
  • The site in the token name will offer to “claim a reward” and ask for a signature that hands over your USDT.
  • The safe choice is to do nothing: do not sell, transfer or open the site.

What it looks like

  • A token with a loud name appears in your wallet: “USDT Reward”, “TRX Bonus”, “Visit trx-gift.com to claim”.
  • The balance looks impressive — thousands of “dollars”. The price is set by the scammer; you cannot sell at it.
  • Sometimes it is a copy of real USDT with the same name and icon, see fake USDT.

Sending such tokens costs almost nothing, so thousands of addresses receive them at once.

The trap

  1. You open the site from the token name to “claim” or “swap” the reward.
  2. The site asks you to connect your wallet and sign a “claim”. In fact it is a permission to spend your USDT or an account permission change, see phishing sites and dApps.
  3. After the signature, real USDT leave the address.

There is also a variant in the token contract itself: an attempt to sell or transfer it calls a function that burns your energy and TRX or asks for an approval.

How to check a token

Paste the token’s contract address into GuardPay /check. You will see whether the token is real, who issued it and whether the contract carries risk labels. There is one real USDT on TRON: TR7NHqjeKQxGTCi8q8ZY4pL8otSzgjLj6t.

What to do

  • Hide the token in your wallet settings if it bothers you.
  • Do not open sites from token names and do not answer “support” writing about your “reward”.
  • If you already signed something on such a site, check your approvals: unlimited approvals.

Check an address for free

Trust score, risk labels, links to known scam addresses, fake tokens and granted approvals — in a minute, with no signature and no wallet connection.

Check an address

FAQ

Can an unfamiliar token steal my money by itself?

No. As long as you do nothing with it, it only shows up in the wallet. The danger starts with opening the site, signing, or trying to sell the token.

Do real airdrops exist?

They do, but the project announces them on its official site, and claiming never requires signing a permission over your USDT.

This guide explains how schemes work and how to protect yourself. It is not legal or financial advice.

Read next