Crypto Airdrops Explained: Free Tokens, Real Risks

What a legitimate airdrop actually is

An airdrop is when a crypto project distributes free tokens to a set of wallet addresses, usually chosen based on some prior activity: having used the project’s protocol before a certain date, held a related token, or participated in a testnet. The goal isn’t charity; it’s a specific set of business reasons that make sense once you see them laid out.

Projects run airdrops for a few concrete reasons. Many governance tokens are distributed this way partly to satisfy a genuine decentralization goal: a token controlled entirely by a founding team looks more like a centralized company than a decentralized protocol, so spreading ownership across thousands of past users is a real step toward broader control, not just a marketing gesture. It’s also straightforward marketing and user acquisition, since a free token with real value tends to generate attention and new users far more effectively than an ad campaign. And it rewards early adopters who used a product before it had any proven value, which builds loyalty and goodwill among the users a project needs most.

Uniswap’s September 2020 airdrop, covered in more detail in What Is Uniswap, is the example most people cite: 400 UNI tokens sent to every wallet that had ever interacted with the protocol, worth several hundred dollars at the time to essentially anyone who’d used it even once. More recently, 2024 and 2025 saw a wave of similar distributions from projects like Hyperliquid, EigenLayer, and Wormhole, each following the same basic pattern of rewarding a specific, verifiable set of past users with newly created governance tokens.

Where it goes wrong: fake airdrop scams

The existence of real, valuable airdrops is exactly what makes fake ones effective. A fake airdrop scam typically presents itself as a claim page for a token you may have heard is being distributed, sometimes for a real upcoming project, sometimes for one invented entirely for the scam. The mechanism usually takes one of two forms:

• Connect wallet and sign a malicious transaction. The site prompts you to “connect wallet to check eligibility,” which seems harmless, but the actual claim step often disguises a request to approve the scam contract’s permission to move tokens out of your wallet, not a genuine token transfer into it. This is the same wallet-approval mechanism covered in Common Crypto Scams; reading exactly what a signature request is asking for, rather than clicking confirm out of excitement, is the actual defense.
• Pay a small “gas fee” to claim. A page tells you that claiming your free tokens requires first sending a small amount of crypto to cover network fees. A legitimate airdrop never requires you to send funds to receive funds; the entire premise of a fee that must be paid to a specific address before a free reward arrives is, without exception, a scam pattern, not a real network cost.

Both versions rely on the same psychological lever that makes fake giveaways work generally: the appearance of free money creates urgency and lowers scrutiny exactly when scrutiny matters most.

Dusting attacks: a quieter, different threat

A dusting attack is a related but distinct pattern: an attacker sends tiny, unsolicited amounts of a token (worth fractions of a cent, often less than the fee it would cost to move) to a large number of wallets at once. The goal usually isn’t theft directly; it’s surveillance. If you ever combine that dust with other funds in a later transaction, blockchain analysis tools can cluster your various addresses together and link them to a single identity, undermining privacy you may have assumed you had, a concern covered in more depth in Privacy Coins Explained. A newer variant sends a dusted token that, if you interact with it at all (even just checking its value on a block explorer or attempting to sell it), triggers a malicious contract or directs you toward a phishing site.

The practical defense is simple: unsolicited tokens or small amounts that appear in your wallet without explanation don’t need to be interacted with at all. Leaving them untouched costs nothing, while attempting to move, sell, or investigate them is the actual risk.

A practical checklist: real airdrop or scam

• Did you seek this out, or did it seek you out? Legitimate airdrops are typically announced through a project’s own verified channels and require you to check eligibility on the project’s actual website, not a link that arrived unsolicited via DM, email, or a comment reply.
• Does claiming require sending funds first? A real airdrop never requires payment to receive a reward. Any claim process that asks for an upfront transfer is a scam, full stop.
• What exactly does the transaction approval say? Before signing anything, read what a wallet-connect or signature prompt is actually requesting. A checking-eligibility step shouldn’t require approving a contract’s ability to move your existing tokens.
• Is the URL exactly right? Fake claim sites frequently use a domain that’s a near-identical misspelling or alternate extension of the real project’s site. Navigate to airdrop claim pages through the project’s official social accounts or website, not through search ads or links from strangers.
• Does the token or claim page appear on the project’s own official website or documentation? If a project’s actual site and social accounts don’t mention the airdrop you’re being told to claim, that absence is itself the answer.

Frequently asked questions

If I receive dust I didn’t ask for, should I try to get rid of it? Generally no; simply leave it untouched in your wallet. Attempting to sell, swap, or otherwise interact with an unsolicited token is exactly the action that can trigger the deanonymizing link or malicious contract the dust may have been designed to cause.

Are airdrops considered taxable income? In many jurisdictions, yes, airdropped tokens are often treated as income at the value they had when received, separate from any later gains or losses when sold. Rules vary considerably by country; see Crypto Tax Basics by Region for more detail, and this isn’t tax advice.

Can simply connecting my wallet to a site, without signing anything, get me scammed? Connecting alone (without approving any signature request) generally only shares your public wallet address and balance, which isn’t enough by itself to move funds. The actual risk comes from what you sign afterward, which is why reading signature requests carefully matters more than avoiding the connect step itself.

How do I know if an airdrop I’m eligible for is real before connecting anything? Check the project’s official website and verified social accounts directly, rather than trusting a link sent to you. If a project you already use announces an airdrop through its own established channels and the eligibility check doesn’t ask for funds upfront, that’s a meaningfully different situation than an unsolicited claim link appearing out of nowhere.

Risk