Dealing With Spam Tokens and Unsolicited Airdrops
Updated · 4 min read
Scammers airdrop tokens and NFTs to thousands of wallets hoping someone will visit the link in the token name. The token itself is usually harmless while it sits there; interacting with its website is the danger.
Do not visit links from token names
A token name like a URL or a claim message is a classic phishing lure. The site behind it typically asks you to sign a transaction that drains your wallet.
Who paid the deposit?
When someone else creates a token account for you, they usually pay its rent. If you later burn the spam and close the account, the deposit is sent to you as the account owner.
Hiding is also fine
If you prefer not to interact at all, simply hide the token in your wallet. It cannot do anything without your signature.
Check your wallet for locked SOL
Scan any Solana address for empty token accounts and see exactly how much rent you can reclaim. Free to check, non-custodial to close.
Frequently asked questions
Can a spam token drain my wallet by itself?
No. Losses happen when you sign something on a phishing site. The token sitting in your wallet cannot move funds.