How to Claim an Airdrop Safely (Claim, Vesting, Fake Sites)
Find the real claim link, avoid fake sites and drainers, understand vesting, deadlines and fees: the method for claiming an airdrop without losing your wallet.
The essentials
Reminder: what does "claiming" an airdrop mean?
An airdrop is a distribution of tokens to eligible addresses, often to reward early users. There are two main models:
- Direct sending: the tokens simply arrive in your wallet. You have nothing to do.
- The claim: the tokens are deposited in a smart contract, and it's up to you to go to a dedicated page, connect your wallet and sign a transaction to receive them. This is the most common model for big airdrops.
It is this second model that attracts scams, because it gets users used to connecting their wallet to a brand-new page, in a hurry.
Step 1: find the official link
The claim link is the most critical element. A single different character in the site's address can be enough to empty your wallet.
Verification method:
- Start from the project's official website, one you already knew before the announcement (a saved bookmark, a link you've used to interact with the protocol).
- Cross-check with the project's official social media account, and with its documentation. The claim domain must be consistent across these sources.
- Never click a sponsored link in a search engine: fake sites often buy ads on the project's name.
- Be wary of replies under official announcements: impersonator accounts post "claim here" links there within seconds of the real message.
- Ignore private messages (Discord, Telegram, X, email): no serious team contacts you privately to get you to claim.
- Bookmark the verified link and always go back through that bookmark.
Tokens that arrive on their own: a classic trap
The MetaMask help center describes a common scenario: scammers send fake tokens to your wallet. You try to sell them, the transaction fails, and a message points you to an external site to "claim" or "unlock" your tokens. That site then asks for either your recovery phrase or a permission that lets it siphon off your assets. The same technique exists with NFTs displayed as ads in your wallet.
To expose these fake tokens, MetaMask advises, among other things:
- checking whether the token is recognized by the wallet's automatic detection (trusted token lists);
- looking it up on the network's block explorer (Etherscan for Ethereum, for example), where known scam tokens are often flagged;
- comparing the token's contract address with the one published by the official project.
An unknown token received for no reason should not be touched. Simply hide it.
Step 2: understand what you are signing
A legitimate claim usually looks like this: you connect your wallet, the site checks your eligibility, then you sign a transaction that calls a claim function on the distribution contract. The tokens then arrive at your address.
What should alarm you:
- a request for your recovery phrase: MetaMask repeats it, never give it to a website or to anyone online, whatever the pretext;
- a request for an approval on your existing tokens: to receive tokens, you don't need to authorize anyone to spend your USDC or ETH;
- a "Permit" signature or an unreadable message when you expected a simple claim transaction;
- a transfer of funds to an unknown address presented as "claim fees";
- a transaction whose simulation (shown by some wallets) displays assets leaving your wallet.
These mechanisms, called drainers, are detailed in our guide on phishing and signatures. If in doubt, close the page: a real claim will still be there in an hour.
Checking the contract
If you're comfortable with a block explorer:
- get the claim contract address and the token address from the official documentation or announcement;
- in your wallet, before signing, compare the address of the contract being called with the announced one;
- on the explorer, check that the contract is the one referenced by the project, and that many addresses are already using it.
A good complementary habit: claim from a wallet that doesn't hold your savings, then transfer the tokens afterwards to safer storage. And, afterwards, review the approvals you've granted so you can revoke the ones you no longer need.
Step 3: know the airdrop's rules
Vesting and lock-up periods
Not all airdrops are fully available immediately. Some projects apply:
- vesting: tokens are released gradually, for example in monthly installments;
- a lockup (lock-up period): tokens are visible but non-transferable for a set period;
- an immediate portion and a deferred portion, sometimes conditional on continued activity or on staking.
These rules are described in the airdrop's official documentation. Read it before claiming: a site offering to "unlock" vesting if you pay is a scam.
Claim deadlines
Many airdrops have a deadline. After that date, unclaimed tokens are no longer accessible. The Arbitrum example is telling: according to The Block, the ARB claim window closed on September 24, 2023 (Ethereum block 18208000), and 69,448,385 unclaimed ARB, worth about $57 million at the time, were transferred to the Arbitrum DAO treasury following a governance vote (AIP-7).
Put the deadline in your calendar as soon as it's announced, but don't let yourself be rushed by a fake countdown shown on a dubious site.
Network fees (gas)
Claiming is a transaction: you have to pay network fees in the native crypto of the blockchain concerned (ETH on Ethereum and many layer 2s, SOL on Solana, etc.). So keep a small balance of that crypto on the right address and the right network. Just after a big claim opens, the network may be congested and fees higher; waiting a few hours is often reasonable, within the limit of the deadline.
Step 4: after the claim, sell or hold?
That choice is yours and depends on your situation. A few things to think about, without any recommendation:
- Liquidity: on which platforms does the token actually trade, and with what volume? A displayed value is not a realizable value if the market is too thin.
- Future unlocks: if a large share of the team and investor tokens is due to unlock soon, the circulating supply will increase (see our guide on tokenomics).
- Fake pools: to sell, make sure you use the token's official address. Copies with the same name often appear on DEXs.
- Your overall exposure: an airdrop is still a crypto position, with the risks that come with it.
This guide is general information and does not constitute investment, legal or tax advice.
A concrete example
Julien learns on X that a protocol he has used for a year is launching its airdrop.
- He opens the protocol's website from his bookmark, not from the post. The home page links to a claim page on a subdomain of the same domain.
- He checks that the official account and the documentation mention the same link and publish the token's contract address.
- Under the announcement, he sees replies saying "Claim now, 2h left!" with a slightly different domain. He ignores them.
- He reads the rules: 25% unlocked immediately, the rest vesting over twelve months, claim deadline in three months.
- He connects his wallet, and the wallet shows him a transaction calling a claim function at the announced address. No approval request on his other tokens. He signs, paying a few cents in fees.
- He adds the token to his wallet using the official contract address, then notes the date and the value at receipt for his records.
- The next day, he receives an unknown "Bonus Airdrop" token with a link. He hides it without interacting.
Mistakes to avoid
- Clicking the first link you find in a search engine, in a reply under a tweet or in a private message.
- Giving your recovery phrase to "verify eligibility": no legitimate claim asks for it.
- Signing an unlimited approval or a "Permit" during a claim that is supposed to just send you tokens.
- Paying "unlock fees" to an unknown address.
- Interacting with tokens received for no reason: this is often the entry point of a scam.
- Forgetting the deadline or not planning for gas on the right network.
- Selling on a fake pool by picking the token by name instead of by contract address.
- Claiming from the wallet that holds all your savings.
Key takeaways
- Verify the claim link by cross-checking the official website, the official account and the documentation; never through an ad or a private message.
- A legitimate claim asks for neither your recovery phrase, nor an approval on your other assets, nor "unlock fees."
- Read the rules before signing: vesting, lock-up period, deadline and network fees.
- Tokens not claimed in time can be lost for good, as the ARB claim showed.
- Selling or holding is a personal choice.