A crypto wallet drainer tricks you into authorizing an asset transfer—often through a fake claim, mint, or project page. Simply connecting a wallet usually shares its public address; signing an unfamiliar transaction or message is the more dangerous step. Check exactly what a prompt authorizes, limit what you expose, and act quickly if you suspect you approved a malicious permission.
How a crypto wallet drainer works
A drainer is a phishing operation that uses an imitation website and a wallet prompt to get permission to move tokens or NFTs. The resulting transfer can be valid on-chain: the wallet owner authorized it, even if the request was disguised as a routine claim or verification.
As an Amazon Associate I earn from qualifying purchases.
- The lure: A fake airdrop, mint, claim, or verification offer—or a cloned app or compromised social account—directs you to a malicious page. Chainalysis describes drainers using deceptive sites to trick users into signing transactions that transfer assets. Chainalysis: Understanding Crypto Drainers
- The prompt: The site asks you to connect your wallet, then requests a transaction or signature. A prompt framed as a listing or claim may instead grant token or NFT permissions. MetaMask: What is a token approval?
- The authorization: A conventional token approval sets an allowance for a spender, which may then transfer tokens within that allowance. An off-chain signature, such as a Permit2 authorization, may be submitted later, subject to its terms. Some drainer kits batch transfers. Chainalysis: Understanding Crypto Drainers MetaMask: What is a token approval?
- The transfer: After authorization, the drainer uses the permission to move assets. Stolen funds may then be routed through DeFi services and other channels, as Chainalysis describes. Chainalysis: Understanding Crypto Drainers
Chainalysis reported that one drainer imitating Magic Eden on Bitcoin Ordinals was associated with approximately $500,000 across more than 1,000 malicious transactions as of April 2024. That is an example involving one operation, not an estimate of total drainer losses. The team also notes that total losses are difficult to track because many scams go unreported.
Can connecting a wallet drain it?
A typical wallet connection shares your public address with a site; it is not, by itself, the same as approving a token transfer. The risk rises when you sign a transaction or message that grants authority over assets. Review the wallet’s requested action and permission details rather than relying on the site’s description.
#1 Best Overall
- Effortlessly build your crypto portfolio via the all in one Ledger Wallet app: buy, sell, send, receive, swap, stake and more across popular blockchains. 15,000+ coins & tokens in a single dashboard. Keep a close eye on the market. Compare service providers. Track performance. Get timely alerts. Build your portfolio with confidence.
- Effortlessly build your crypto portfolio via the all in one Ledger Wallet app: buy, sell, send, receive, swap, stake and more across popular blockchains. 15,000+ coins & tokens in a single dashboard. Keep a close eye on the market. Compare service providers. Track performance. Get timely alerts. Build your portfolio with confidence.
- Enjoy Bluetooth connectivity, iOS access, and hours of battery use with this mobile-first, secure backup signer. Freedom you can depend on.
- Genuine Check: confirm your signer is authentic during setup with the Ledger Wallet app.
- Protect your signer: keep it in mint condition at all times with a bespoke Pod or Case to avoid scratches and everyday wear and tear.
A message signature is not automatically harmless. MetaMask explains that off-chain signatures are not broadcast when you sign them, but may be used later to authorize an action. MetaMask: What is a token approval?
What to check before signing
- Verify the site independently. Navigate through a project’s known official channels instead of following an urgent unsolicited claim link. Fake links can circulate through social media, Discord, or compromised accounts. Chainalysis: Understanding Crypto Drainers MetaMask: What is a token approval?
- Read the wallet prompt. When shown, check the asset, spender, amount, and duration. If you cannot understand what a request permits, do not sign it. Alerts and transaction simulation can add context, but they cannot guarantee that an interaction is safe. MetaMask: What is a token approval?
- Use a separate wallet for unfamiliar sites. Keep only the amount you are prepared to expose there; avoid using a wallet holding valuable assets for speculative claims or unknown apps.
- Protect your recovery phrase. Never enter it on a website or provide it in response to unsolicited support messages. Treat unexpected tokens as possible bait and do not follow links embedded with them. Ledger: How to protect yourself from phishing scams
Hot wallets, offline wallets, and the limits of hardware protection
An online wallet is convenient for frequent interactions, but keeping valuable holdings in a separate offline wallet can reduce routine exposure of its secret keys. A hardware wallet can help keep keys offline; it cannot stop you from approving a malicious operation on that wallet. If you use one, verify the action on the device and do not treat a hardware confirmation as proof that the request itself is safe. Chainalysis: Understanding Crypto Drainers MetaMask: What is a token approval?
Rank #2
- Proven security at scale: Over 9 years and millions of cards issued with no known remote hacks, while military‑grade EAL6+ security keeps your private keys locked inside the chip. Your cryptocurrencies stay strongly protected from online attackers.
- Tap once to manage your entire crypto wallet across 90 blockchains - no USB cables or Bluetooth, no batteries, no setup. Access 14,100+ coins & tokens, DeFi, NFTs, and staking instantly from your phone
- Smart backup: Use your second Tangem Wallet as your Backup keys with end‑to‑end encryption; no more papers, pictures. If one card is lost, the remaining can still restore full access, with an optional seed phrase available for advanced users.
- Engineered to last up to 25 years: Waterproof (IP69K), shockproof and tested for extreme temperatures from −25°C to 50°C. A durable cold wallet with long‑term protection and independently audited security.
- Trusted by 6 million users worldwide (4.9 App Store, 4.8 Google Play) - buy, sell, swap, stake, and spend cryptocurrency directly. The secure offline storage wallet designed for how people actually use crypto wallets
How to revoke a suspicious token approval
Revocation removes a spender’s allowance for the relevant token; it does not undo a transfer that has already happened. MetaMask defines revoking an approval as setting the allowance for a specific spender back to zero. Revoking is an on-chain transaction, so it incurs network fees. Disconnecting a site from your wallet is not the same as revoking its on-chain approval. MetaMask: What is a token approval?
- Identify the wallet account and network involved in the interaction.
- Review that account’s token permissions in your wallet’s official interface or a trusted approval-management tool. MetaMask names Revoke.cash and ScamSniffer as options. MetaMask: What is a token approval?
- Check the spender and allowance, then revoke any permission you do not recognize or no longer need. Confirm the network and fee before submitting the revocation transaction.
- Check the permission again after the transaction is confirmed. This addresses the approval you revoked; it does not establish that no other permission or compromise exists.
What to do after a suspicious signature or confirmed theft
If you signed something but see no unauthorized transfer
Inspect approvals for the relevant account and network promptly, and revoke suspicious permissions using an official wallet interface or trusted tool. A hidden or off-chain authorization may not appear as a transfer at signing time, so the absence of an immediate transaction does not prove the signature was harmless. Revocation cannot recover assets already transferred.
Quick Recap
Best Value
- All your digital assets in one place. You can manage thousands of crypto including Bitcoin, Ethereum, Solana, Tether and more.
- Defend your identity against hackers: secure your online accounts with passwordless, hardware backed, 2FA logins for all your favorite apps and websites.
- Connectivity: USB-C cable connection only. No Bluetooth.Compatible with the Ledger Wallet crypto app, both desktop (Windows, macOS, Linux) and mobile (Android only). Not compatible with iOS.
- Protect your digital assets with the industry's best security: keep your private keys offline in your private signer, battle-tested by the Donjon's white hat hackers, CC EAL 6+ certified Secure Element, constantly updated Ledger OS.
- Effortlessly build your crypto portfolio via the all in one Ledger Wallet app: buy, sell, send, receive, swap, stake and more across popular blockchains. 15,000+ coins & tokens in a single dashboard. Keep a close eye on the market. Compare service providers. Track performance. Get timely alerts. Build your portfolio with confidence.
Rank #4
- UNPARALLELED SECURITY: Protect your assets with Trezor Safe 5's NDA-free EAL 6+ Secure Element, offering robust defense and complete transparency.
- EFFORTLESS NAVIGATION: Experience seamless crypto management with the vibrant color touchscreen, designed for intuitive and user-friendly interactions.
- ENHANCED USER EXPERIENCE: Enjoy tactile confirmation with Trezor Touch Haptic Engine, making each interaction precise and engaging.
- SUPPORTS 1000s OF COINS & TOKENS: Securely handle thousands of assets, including Bitcoin, Ethereum, and more, all in one wallet.
- EASY ASSET MANAGEMENT: Monitor and transact seamlessly with Trezor Suite, our user-friendly desktop and mobile app
Rank #3
- Proven security at scale: Over 9 years and millions of cards issued with no known remote hacks, while military‑grade EAL6+ security keeps your private keys locked inside the chip. Your cryptocurrencies stay strongly protected from online attackers.
- Tap once to manage your entire crypto wallet across 90 blockchains - no USB cables or Bluetooth, no batteries, no setup. Access 14,100+ coins & tokens, DeFi, NFTs, and staking instantly from your phone
- Smart backup: Use your second Tangem Wallet as your Backup keys with end‑to‑end encryption; no more papers, pictures. If one card is lost, the remaining can still restore full access, with an optional seed phrase available for advanced users.
- Engineered to last up to 25 years: Waterproof (IP69K), shockproof and tested for extreme temperatures from −25°C to 50°C. A durable cold wallet with long‑term protection and independently audited security.
- Trusted by 6 million users worldwide - buy, sell, swap, stake, and spend cryptocurrency directly. The secure offline storage wallet designed for how people actually use crypto wallets
If assets moved or your recovery phrase may be exposed
- Stop using the affected wallet. If the recovery phrase may be compromised, treat accounts derived from that phrase as compromised too.
- From a separate browser profile or device, create a new wallet and store its recovery phrase offline.
- Move remaining assets only if it is safe to do so. Do not send extra gas funds to an account that may have a sweeper script.
- Report the incident to your wallet provider and relevant authorities. MetaMask says confirmed transactions cannot be reversed and that it cannot restore self-custodial funds. MetaMask Help Center: What to do if your account is compromised
- Ignore unsolicited recovery agents who contact you in replies or direct messages, especially anyone requesting your recovery phrase. Ledger identifies unsolicited messages and recovery-phrase requests as phishing indicators. Ledger: How to protect yourself from phishing scams
Product prices and availability are accurate as of the date/time indicated and are subject to change. Any price and availability information displayed on Amazon at the time of purchase will apply.
