The bait is soft: join a testnet, claim a drop, “complete the pool” after a small return lands. Reader reports describe mentor-branded channels that walk people through a few tiny payouts, then ask for a matching top-up that never comes back. The technical version is colder: a cloned site, a connect-wallet button, and a signature that looks like participation while it grants a spender rights over your tokens.
Testnet coins themselves are worthless. The danger is operational. A page that felt like a sandbox can switch the wallet prompt to mainnet. An approve or permit with an unlimited allowance lets a contract move tokens later without another friendly “claim” screen. Seed phrases and private keys are never required for a real airdrop; anyone who asks for them is finished as a trustworthy contact.
Practical habits beat slogans. Use a burner wallet with almost nothing on it for experiments. Read the network, spender and amount before you sign — reject blind hex and “approve all”. Prefer official links from a project’s verified profile, not a reply guy under a viral post. If you already signed something odd, revoke stale approvals through a reputable revoke tool and move remaining funds to a fresh wallet you control.
Urgency (“one hour left”) is part of the product. Legitimate campaigns publish addresses early enough that you can check them without a stopwatch.
Start at Get help for reporting routes. Read Fake recovery before you pay anyone selling a guaranteed clawback.
This article is for general information only. It is not legal or financial advice. Details change. If you have lost money, contact your bank or card issuer and use the routes on the help pages.