1. Start with the official domain
Open the project page from a verified project account or a known documentation page. Do not trust a search ad, a shortened URL, or a message that creates urgency.
Compare the domain character by character. Airdrop pages are often copied, and a familiar brand name does not make a lookalike domain legitimate.
2. Treat wallet requests as a decision point
A directory should help you research; it should not ask for your seed phrase or private key. Never type either secret into a website, form, chat, or support ticket.
Before signing, read the wallet prompt and check the network, contract, spender, and requested permission. If the action is not clear, stop and verify it through an independent official channel.
3. Price the participation cost
Record every cost before you start: gas, deposits, bridge fees, trading volume, subscription fees, and possible KYC requirements. A reward headline can hide a cost that changes the decision.
A campaign that says "free" may still require a funded wallet or a transaction approval. Keep a separate test wallet for experiments and do not fund it with more than you can afford to lose.
4. Read the reward wording literally
Words such as points, eligibility, access, and potential reward are not the same as a confirmed token allocation. Our listing pages preserve reward language as a dated snapshot so you can see what was actually written.
Use the capture date as a starting point, not as proof that a campaign is still open. Confirm deadlines and terms on the official page before acting.
A five-minute stop rule
If a campaign fails any of the checks above, leave it alone until you have better evidence. A missed campaign can be replaced; an approved malicious transaction may not be reversible.
- Verify the domain and the project social account.
- Confirm the network and transaction purpose.
- Estimate every direct and indirect cost.
- Never share private keys or seed phrases.
- Save the official source and your own notes.