Don't Get Drained: How to Spot an Approval Scam Before You Connect Your Wallet
Learn how approval-drain scams work and how to avoid losing everything when connecting your wallet to a memecoin site.
The Scam That Empties Wallets in Seconds
You find a new memecoin. The website looks legit — clean design, a roadmap, maybe even a fake audit badge. You click "Connect Wallet." A popup asks you to sign a transaction. You approve it. Seconds later, your wallet is empty.
This is an approval-drain scam. It is the most common way beginners lose money in crypto. No hack. No virus. You gave them permission to take everything.
How Approval Drains Work
Every token you hold sits in a smart contract. To let another contract move that token, you must first approve it. That approval is a transaction that says: "This contract can spend up to X amount of my token."
Scammers build fake trading websites that request unlimited approval. When you sign, you give them permission to drain every token of that type from your wallet. They don't need your private key. They just need that one signature.
Red Flags to Watch For
Unlimited approval requests. Legitimate platforms ask for a specific amount — usually just enough for the transaction. If the approval popup says "unlimited" or a ridiculously high number, do not sign.
Fake or cloned websites. Scammers copy the look of real platforms. Check the URL carefully. One wrong letter and you are on a phishing site.
No clear contract address. Real memecoin projects publish their contract address publicly. If the site hides it or asks you to approve before showing you the address, walk away.
Pressure to hurry. "Limited time!" "Presale ends in 5 minutes!" Scammers create urgency so you skip the checks.
How to Protect Yourself
Use a burner wallet. Never connect your main wallet to a site you do not fully trust. Create a separate wallet with only the funds you are willing to lose. This is the single most important habit.
Revoke approvals after use. Even if a site is legitimate, old approvals can be exploited. Use a tool like Revoke.cash to check and remove approvals you no longer need. Do this regularly.
Check the transaction details before signing. Most wallet interfaces show what you are approving. Look for the amount. If it says "unlimited" or a number larger than your balance, reject it.
Use a hardware wallet for large holdings. Keep your long-term assets on a Ledger or Trezor. Never connect it to a memecoin site.
What to Do If You Get Drained
If you realize you approved a scam, act immediately:
- Revoke the approval on Revoke.cash or through the token contract on the blockchain explorer.
- Move remaining funds to a new wallet that has never interacted with the scam site.
- Report the scam to the platform where you found it (Twitter, Telegram, Discord).
No one can reverse the transaction. Once the tokens are gone, they are gone. Prevention is the only cure.
The Bottom Line
Every time you connect your wallet to a new site, you are trusting that site with your tokens. Do not give that trust blindly. Check the approval request. Use a separate wallet. Revoke old approvals.
Memecoins are high risk. Most go to zero. But getting drained by a scam is worse than losing on a trade — you lose everything with nothing to show for it. Stay sharp.
For more on how to read contract data and set up alerts, check the metrics reference, alerts guide, and rules for safe trading.