Crypto Phishing, Fake Airdrops and Wallet Approval Scams

By QBMFX Academy · Updated 20 October 2026 · Editorial standards

Crypto phishing tricks a person into revealing recovery secrets, signing a harmful authorization or sending funds to an attacker. A familiar logo, address prefix or HTTPS padlock does not establish that an application is trustworthy.

How it works

Check the domain through an independent trusted route, identify the chain and contract, and read what the wallet is authorizing. A token approval can permit future spending without being an immediate transfer. A signed message may have security consequences even when no network fee is requested. Support staff do not need a recovery phrase to answer a question.

Worked example

A fake airdrop asks for an unlimited token allowance to an unknown spender. No tokens move during the approval, so the user assumes nothing happened. If the allowance is valid, the spender may later call transferFrom within the granted limit. Disconnecting a website from a wallet interface does not necessarily revoke that on-chain allowance.

Amounts, prices and scenarios are fictional teaching examples. They exclude any effects not explicitly stated and are not trade recommendations.

Limits and common mistakes

Clipboard substitution, impersonation, malicious ads and poisoned transaction-history entries can defeat superficial checks. Revoking a permission costs fees on many networks and is not a cure for a leaked key. If keys are compromised, follow trusted incident guidance rather than continuing to reuse them.

Knowledge check

Does “no gas required” prove a signature is safe?

Read the explanation

No. Off-chain signatures can authorize actions under contract-specific rules. Understand the message and destination before signing anything.

References and further reading

These sources explain the underlying concepts and specifications. They do not endorse QBMFX Academy. Check the relevant market, protocol version and reporting rules before applying an example.