A legitimate airdrop does not require a seed phrase, private key or remote control of your device, and it should not demand a payment to an unknown address to “unlock” a reward. Urgency, huge rewards and impersonated accounts often appear together.
A visual reminder to verify before every sensitive wallet action.
Direct answer
A legitimate airdrop does not require a seed phrase, private key or remote control of your device, and it should not demand a payment to an unknown address to “unlock” a reward. Urgency, huge rewards and impersonated accounts often appear together.
A practical safety guide for people who use a wallet, an exchange deposit page, or a blockchain explorer. The aim is to make the next decision safer—not to promise a financial outcome.
Step-by-step checklist
Check the official site, verified social accounts and contract address; do not rely on repost counts.
Use a separate wallet for new projects and keep only an amount you can afford to lose.
Reject unknown payment demands framed as gas, tax or verification fees to unlock a claim.
Leave and verify the source whenever an approval, signature or download request seems unusual.
Why this check matters
Before every sensitive action, verify the domain, the network, the address and the exact request. A minute spent checking is cheaper than an irreversible on-chain mistake. Keep a clean record of hashes and screenshots, but redact account secrets.
Blockchain activity is often irreversible once confirmed. Treat unknown requests, unusual downloads, direct-message support and guaranteed-outcome language as reasons to pause and verify independently.
Frequently asked questions
Should I act immediately?
Start by stopping the risky action and preserving accurate records. Do not let urgency force a transfer, signature or disclosure.
Can a transfer always be recovered?
No. Outcomes depend on the network and the party controlling the destination. Use only official recovery channels.
What should never be shared?
Never share a seed phrase, private key, password, one-time code, or remote access to your device.