Home / Updates / A token you did not buy showed up. Leave it alone
A token you did not buy showed up. Leave it alone
If a token or NFT you never bought appears in your wallet, the safe move is to leave it alone and skip the site it names.
Written by John AlewineReviewed by the Crypto Guidance team
Published ยท Updated
Mystery tokens and NFTs that land in your wallet are a known phishing lure. The token itself is the bait. The website it points to is the trap, and a claim button there can be a drainer signature.
What to do
- Ignore tokens and NFTs you did not expect.
- Never go to a site named in a token's name or description. Do not type the address, and do not connect your wallet to it.
- Never click claim or sign for something you did not ask for. If you are unsure what a signature does, the answer is no.
- If you want a second opinion, ask someone you trust first, not someone who messaged you. Unsolicited help is hostile until proven otherwise.
About asking a chatbot
An AI chatbot can explain in general what an airdrop or a claim page is. It cannot see whether the token in your wallet, or the site it names, is real. The decision stays with you, and the safe move stays the same.
The full habits are on the Security page. If you want to walk through it one at a time, that is what consulting is for. I do not hold keys or manage funds.