How to Check Official Links Before Joining a Crypto Airdrop

Safety Notice

An official-looking logo, account badge, search result, or security indicator is not a guarantee that an airdrop is legitimate. Rewards and eligibility are not guaranteed. Never enter a seed phrase, private key, recovery words, password, or OTP into an airdrop page.

Why Link Checks Matter

Phishing pages can copy a project's name, design, and social posts. A small spelling change in a domain can send you to a different operator. Verify the destination before connecting a wallet, signing a message, submitting personal information, or downloading a file.

A Safer Link-Checking Workflow

1. Start from a project source you already know and can independently verify. Do not begin with a direct message, reply, sponsored search result, or forwarded claim link.
2. Compare the full domain carefully. Check spelling, added words, hyphens, and the domain ending.
3. Follow links in both directions. The main website should identify its official documentation and social accounts, and those accounts should point back to the same website.
4. Compare the announcement across more than one official channel. A single compromised account or copied post should not be your only evidence.
5. Read wallet security warnings. WalletConnect documents domain-match, unverified, mismatch, and threat states. A mismatch or threat is a stop signal.
6. Remember that a verified indicator is not an endorsement or safety guarantee. MetaMask says trust signals are informational and may not detect every threat.

Before Any Wallet Action

• Confirm that the page explains why a wallet connection or signature is needed.
• Read the complete wallet prompt, including the requesting domain, network, contract, and permission.
• Stop if a simple social task unexpectedly requests token spending, NFT management, or an unclear signature.
• Do not continue because a timer, limited allocation, or support account pressures you.
• Use a separate learning wallet only as an additional limit. It does not make a malicious page safe.

Stop Conditions

Leave the page if official channels disagree, the domain does not match, the wallet shows a malicious or mismatch warning, the requested action changes unexpectedly, or anyone asks for a secret recovery phrase or payment to unlock a reward.

An unknown or unverified status does not prove a scam, but it means the system could not confirm the domain. Pause and gather stronger evidence.

Official Sources And Evidence Limits

MetaMask's security guidance explains phishing indicators and states that trust signals do not guarantee safety. WalletConnect documents domain verification states and also warns that its Verify system is not foolproof. These sources explain safety controls; they do not verify any particular airdrop.

Disclaimer

This is general security education, not investment advice or a recommendation to join an airdrop. Doing nothing is a valid choice when the official destination or requested wallet action cannot be verified.