Approval Drainers: The Scam That Empties Your Wallet in One Click
Learn how approval-drain scams work and how to spot them before connecting your wallet to a shady site.
What Is an Approval Drainer?
An approval drainer is a malicious smart contract that, once you click "Approve" in your wallet, gains permission to transfer every token it can see in your wallet. It doesn't just steal one asset — it empties everything: SOL, USDC, meme coins, NFTs, the works.
These scams are everywhere on Solana and EVM chains. They target beginners who don't yet understand what that "Approve" button actually does.
How the Scam Works
- You find a "free mint" or "claim airdrop" link on Telegram, Twitter, or Discord. The site looks legit — maybe it even shows a fake mint counter ticking down.
- You click "Connect Wallet."
- A pop-up asks you to sign a transaction. The text says "Approve" or "Sign."
- You approve it. Seconds later, every token in your wallet is gone.
You didn't send anything. You didn't paste your seed phrase. You just clicked "Approve" on a transaction that gave the scammer unlimited access to your tokens.
Why Beginners Are the Main Target
Scammers know that new traders often don't check what they're signing. The wallet pop-up shows a long string of code, and most people just click "Confirm" without reading. That's exactly what the scammer is counting on.
How to Protect Yourself
1. Never Sign Blind
Before you click "Approve" or "Sign" in your wallet, look at the details. On Phantom or MetaMask, you can often see what permissions you're granting. If it says "Approve all tokens" or "Unlimited allowance," that's a red flag.
2. Check the Contract Address
Legitimate projects have verified contracts. On GMGN, you can check a token's contract address and see if it's flagged. If the site you're on doesn't show a contract address you can verify, don't connect.
3. Use a Burner Wallet
Never connect your main wallet to a site you don't trust 100%. Create a separate wallet with only the funds you're willing to lose. This is the single most effective defense.
4. Revoke Permissions Regularly
Even if you think you only approved a legitimate site, check your approvals. On Solana, you can use tools like Solscan or the built-in revoke feature in Phantom. On EVM chains, sites like Etherscan let you revoke token approvals. Do this every few weeks.
5. Be Skeptical of "Free" Anything
Free mints, airdrop claims, and giveaway links are the most common delivery method for approval drainers. If something sounds too good to be true, it's a trap. Memecoins are already extremely high risk — free tokens from strangers are almost certainly a scam.
What to Do If You've Been Drained
- Immediately revoke all approvals for that wallet. Use the revoke function in your wallet or a block explorer.
- Transfer any remaining funds to a new wallet you generate fresh.
- Report the scam site to your wallet provider and on-chain security tools.
- Accept that those tokens are gone. No one can reverse a blockchain transaction.
Final Word
Approval drainers are the most common wallet scam in crypto right now. They don't need your seed phrase. They just need one careless click. Treat every "Approve" prompt like it could drain your entire portfolio — because it can.
Stay sharp. Stay paranoid. And never sign blind.