Telegram airdrop scams and fake giveaways: how they work

What is a Telegram airdrop scam?

An airdrop is a project giving tokens to its users. Real ones exist, which is why the fake ones work.

The fake is a post in a group that says you are eligible for free tokens, a giveaway prize or an unclaimed reward. It links to a page where you "claim". The page takes your wallet, or your money, or both.

How does the scam work, step by step?

1. The post. An account joins, often days earlier, and posts an "announcement". It uses the project's logo, a deadline, and sometimes a screenshot instead of text.
2. The link. It goes to a claim page on a domain that resembles the project's. Sometimes it goes to a bot or a private chat first.
3. The request. The page asks for one thing. That one thing is the theft.

The post is often followed by replies from other new accounts: "Claimed, thank you!" They belong to the same person.

How do I recognise one?

• It came to you. A real claim is something you go and look for. A scam arrives as a post, a mention or a private message.
• It is in a hurry. "Ends in two hours." "First 500 wallets."
• The account is new, or has never spoken in the group before.
• The domain is nearly right. An extra word, a different ending, or lookalike characters.
• The comments are all praise, from accounts with no history.
• It asks for a seed phrase or a fee. Either one ends the question.
• Admins did not post it. Check for an admin title next to the message. Then check the project's website anyway, because admin accounts get stolen too.

Are any airdrops and giveaways real?

Yes. Projects do distribute tokens, and Telegram has its own giveaway feature, which channels and groups use to hand out Premium subscriptions and gifts to their followers.

The test is the same for all of them. Confirm it on the project's own website, reached by typing the address yourself. A real claim does not ask for a seed phrase, and it does not ask you to pay to receive.

What should members do?

1. Do not open the link. Go to the project's site yourself.
2. Do not reply in the chat. Arguing keeps the post on screen.
3. Report it. Tap the message, or press and hold it, and choose Report. Then tell the admins. If the group runs Targa, /report calls them without other members seeing who reported.
4. Ignore the private message that follows. Someone offering to "help you claim" is the same scam. See the fake admin scam.

What can admins do?

1. Limit newcomers. Most of these posts come from accounts in their first hours or days. Block links, media and forwards for new members. Telegram's Permissions apply to everyone at once, so limits for newcomers only need a bot.
2. Pin the rule. "We will announce any airdrop here and on our website. We will never ask for a seed phrase or a fee. Admins never message first."
3. Announce real ones in one place. If your project does run an airdrop, say so on your website first and link to it from the pin. Members then have something to check against.
4. Screen every message. These posts are written to pass a word list: lookalike letters in "claim", a screenshot instead of text, a clean message edited an hour later.
5. Ban the account. Check that it is listed under Removed Users. An account on that list cannot rejoin through an invite link.

Targa covers the fourth step. It catches link and crypto giveaway spam, normalizes lookalike characters before judging, reads text and QR codes inside pictures, and reads a message again when it is edited. It can limit links and media for new members during their first days. Every action carries a reason you can read with /why.

The limit, stated plainly: Targa sees your group. It does not see the claim page, a member's wallet, or a link sent in a private message. The pinned rule covers what no bot can. How to protect a group from scammers has the full list.

What should I do after connecting my wallet?

Act in this order. Speed matters more than certainty.

1. Disconnect the site in your wallet's list of connected sites.
2. Revoke approvals. Use a token approval checker for that chain and revoke everything you do not recognise.
3. Move what is left to a new wallet with a new seed phrase, created on a device you trust.
4. If you typed your seed phrase, skip to step 3 at once. The old wallet cannot be made safe again.
5. If you scanned a QR code or shared a Telegram code, secure the account too. See what to do when a Telegram account is hacked.
6. Tell the group's admins, so the post comes down and others are warned.

Nobody who offers to recover lost funds for a fee is genuine. That offer is the next scam.