How to Revoke Token Approvals (approve/delegate) on Solana

Key points of this article

How to revoke: ① check and remove approvals via Phantom's "Revoke token approvals," or ② connect your wallet to a trusted revoke tool and clear them in bulk. When to check: after any suspicious signature, and on a regular schedule. For the big picture on Solana scams, see tactics and countermeasures; for permission abuse, see wallet drainers.\n\n## How to revoke (the basics)\n\n1. Check from Phantom's settings: Following Phantom's official help page for \"Revoke token approvals,\" review the delegate for each token.\n2. Remove suspicious or unneeded approvals: Revoke approvals for dApps you no longer use or delegations you don't recognize.\n3. If you use a dedicated tool: Connect your wallet to a trusted revoke-style tool and clear approvals from the list. (Verify the tool's URL against official sources and watch out for fake sites.)\n\n| Permission to check | What it means |\n|---|---|\n| delegate | Grants the other party authority to move your tokens up to a set amount |\n| revoke | Cancels that delegation so the other party can no longer move them |\n\n## When should you check?\n\n- After connecting to a suspicious dApp / making a signature you're unsure about\n- On a regular schedule (e.g., once a month) as a routine review\n- Wallets holding a lot of assets deserve especially careful checks\n\n> [!IMPORTANT] Revoking does not reverse past damage\n> Revoking is an action that prevents future abuse. It cannot reverse transfers that have already been executed. If you suspect you've been compromised, consider moving your remaining assets to a new wallet.\n\n## Read next\n- How it works → What is a wallet drainer\n- Start here → Solana scam tactics and countermeasures\n\n## Frequently asked questions\n\nQ. Can token approvals (approve) be revoked?\nA. Yes. You can review and remove delegations via Phantom's \"Revoke token approvals\" or a trusted revoke tool.\n\nQ. If I revoke, does it undo past damage?\nA. No. Revoking prevents future abuse; it cannot reverse transfers that have already been executed.\n\nQ. How often should I check?\nA. It's best to check after connecting to a suspicious dApp or making a signature you're unsure about, plus on a regular basis (such as once a month).\n\n## Sources\n- Phantom official (Revoke token approvals): https://help.phantom.com/hc/en-us/articles/19142125651731-Revoke-token-approvals\n- Solana official (Security): https://solana.com/developers/guides/getstarted/intro-to-security\n\n> [!WARNING] A note on investing and security\n> This article is for informational purposes only and is not investment advice. Crypto assets (including SOL) carry risks such as price volatility, hacking, fraud, and network outages. Make your own security and investment decisions at your own responsibility, and always verify the latest official information first.