If a token appears in your wallet that you didn't buy or request, don't interact with it. Nearly all unsolicited airdrops are spam or scams designed to trick you into connecting to malicious sites or signing harmful transactions.
What to do
- Don't tap or click the token. Some scam tokens trigger phishing sites or malicious contracts when you try to view, send, or swap them.
- Hide and report the token. This removes it from your wallet view without interacting with the underlying contract. See Manage hidden tokens in Phantom.
If you already interacted with a suspicious token
If you tapped a scam token, connected to a suspicious site, or signed an unexpected transaction:
- Revoke approvals. Remove any permissions you may have granted. See Revoke token approvals.
- Check your connected apps. Go to Settings → Connected Apps and disconnect anything you don't recognize.
- Move your funds. If you suspect your wallet is compromised, transfer your assets to a new wallet immediately. See Move assets when you need to start over with a new wallet.