Guide
Solana Scams: 6 Common Tactics and How to Protect Yourself
Bottom line: scams target your signature or your seed phrase
Scams that steal assets on Solana look endless, but their goals boil down to two: (1) make you sign a malicious transaction (approving a transfer of your wallet's contents), or (2) extract your seed phrase (the secret 12–24 words). Conversely, just two habits — never sign anything you don't recognize and never type your seed phrase anywhere — stop the vast majority of losses.
Key takeaways
The 6 main Solana scam tactics: (1) fake sites (search ads, lookalike URLs), (2) fake tokens/NFTs, (3) fake support/DMs, (4) airdrop scams, (5) impersonation (official accounts, celebrities), (6) wallet drainers. The core defenses: bookmark official URLs, read what you sign, and never enter your seed phrase. New to wallets? See How to use Phantom.
The 6 common tactics
| Tactic | What it is | Main defense |
|---|---|---|
| Fake site | Lookalike site via a search ad or fake domain | Use bookmarked official URLs |
| Fake token/NFT | An unrequested token that lures you to a fake site | Don't touch it, don't sell it, don't click its links |
| Fake support/DM | "I'm support" — then asks for your seed phrase | Official support never asks — block immediately |
| Airdrop scam | "Free claim" that demands a connection or signature | Verify the official distribution from a primary source |
| Impersonation | Posing as an official/celebrity, "send and I'll double it" | If you send, it never comes back — always a scam |
| Wallet drainer | A malicious script that drains assets in one signature | Read what you sign; don't connect to shady dApps |
5 basic rules of defense
- Never tell anyone your seed phrase, and never type it anywhere.
- Bookmark official URLs and don't open them via search ads.
- Read before you sign (what is being approved, the recipient, the amount).
- Keep large holdings on a hardware wallet, separate from a daily-use wallet.
- Periodically review and revoke token approvals.
If you've been hit
Transactions that moved your assets generally cannot be reversed. Even so, move any remaining assets to a new wallet (a new seed phrase) immediately and stop using the compromised one. Reusing the same seed phrase leads to repeat losses. Follow the official help guides from Phantom and others.
Read next
- Wallet safety → How to use Phantom
- Foundation → What is Solana?
- Handing an AI agent your wallet? → Solana AI agents explained
FAQ
Q. What's the most common Solana scam? A. Luring you from a fake site or fake token into a malicious signature. Reading what you sign and opening sites from bookmarks stops most of them.
Q. Is an unrequested token dangerous? A. Receiving it usually won't drain you on its own — the trap is the attached link or "cash it out" prompt. The safe move is to leave it alone.
Q. Can I recover stolen assets? A. Blockchain transfers generally can't be reversed. Move remaining assets to a new wallet and stop using the compromised one.
Sources
- Phantom (scammed / drained wallet help): https://help.phantom.com/hc/en-us/articles/5487893286291-I-was-scammed-or-my-wallet-was-drained-What-can-I-do
- Solana security guide: https://solana.com/developers/guides/getstarted/intro-to-security
Disclaimer
This article is for general information only and is not investment advice. Crypto assets (including SOL) carry risks such as price volatility, hacking, scams, and network outages. Make your own decisions, verify the latest official sources, and only use funds you can afford to lose.
Sources
FAQ
- What is the most common Solana scam?
- Luring you from a fake site or fake token into a malicious signature. Reading what you sign and opening sites from bookmarks stops most of them.
- Is a token that arrives unrequested dangerous?
- Receiving it usually won't drain you on its own, but the attached link or cash-out prompt is the trap. The safe move is to leave it alone.
- Can I recover assets after a scam?
- Blockchain transfers generally cannot be reversed. Move remaining assets to a wallet with a new seed phrase and stop using the compromised one.
- What's the single most important defense?
- Never tell anyone your seed phrase or type it into any site. Next, always review the transaction before you sign.
This article is informational only and is not financial, investment, or trading advice. Prices are reference snapshots and may be outdated. Always do your own research.
