# Unexpected tokens and NFTs: what does receiving an airdrop mean? An unknown token or NFT can be sent to your public address without your consent. Its appearance is not evidence that someone knows your private key or that a reward is legitimate. The danger often begins when its name, image or website persuades you to reveal secrets, sign an authorization or approve access to valuable assets. Evidence: [Airdrop phishing scams](https://support.metamask.io/stay-safe/protect-yourself/nfts/nft-airdrop-scams/); [Ethereum security and scam prevention](https://ethereum.org/en/security/); [ERC-721 NFT standard](https://eips.ethereum.org/EIPS/eip-721) Canonical: https://degreesofsatoshi.com/encyclopedia/unsolicited-tokens-and-nfts/ Published: 2026-10-02 Substantively modified: 2026-10-02 Independently verified by an automated reviewer: 2026-10-02T19:27:58.939Z Data current through: 2026-10-02 AI-assisted research and drafting with a separate automated source-verification pass; no external expert or named human review is implied. ## Key facts - **Receipt:** Receiving an unsolicited NFT does not require an ordinary wallet login. ([Airdrop phishing scams](https://support.metamask.io/stay-safe/protect-yourself/nfts/nft-airdrop-scams/); [ERC-721 NFT standard](https://eips.ethereum.org/EIPS/eip-721)) - **Bait:** Airdrop metadata can direct recipients to phishing sites. ([Airdrop phishing scams](https://support.metamask.io/stay-safe/protect-yourself/nfts/nft-airdrop-scams/)) - **Hiding:** An interface can hide an asset without transferring it. ([Displaying tokens in MetaMask](https://support.metamask.io/manage-crypto/tokens/how-to-display-tokens-in-metamask)) ## A wallet list is not a list of trusted senders Public addresses can receive unsolicited assets. A token name that claims a prize, a support alert or an expiring reward is information supplied by its creator, not an authenticated message from the wallet provider. Do not infer value from a displayed price. The scam can rely on getting you to visit a redemption page even when the unexpected item itself is worthless. Evidence: [Airdrop phishing scams](https://support.metamask.io/stay-safe/protect-yourself/nfts/nft-airdrop-scams/) ## The costly step can involve a different collection Imagine an unsolicited NFT whose image says “claim your reward.” The linked page requests operator approval over a collection you already own. That approval concerns the valuable collection, even though the page introduced itself through the unrelated airdrop. Read which contract and operator a request affects. The fact that the initial item arrived for free does not make the follow-up authorization harmless. Evidence: [Airdrop phishing scams](https://support.metamask.io/stay-safe/protect-yourself/nfts/nft-airdrop-scams/); [ERC-721 NFT standard](https://eips.ethereum.org/EIPS/eip-721) ## Ignoring the bait can be enough If you have only received the asset, avoid its links and use supported hide or spam-report controls where available. You do not need to send it to a special cleanup address to regain control of your wallet. If you already approved or signed something, inspect that specific authorization and affected assets. Merely hiding the original airdrop does not revoke permissions granted to another contract. Evidence: [Airdrop phishing scams](https://support.metamask.io/stay-safe/protect-yourself/nfts/nft-airdrop-scams/); [Displaying tokens in MetaMask](https://support.metamask.io/manage-crypto/tokens/how-to-display-tokens-in-metamask); [Ethereum security and scam prevention](https://ethereum.org/en/security/) ## Questions ### Does an unexpected NFT prove my wallet was hacked? No. Passive receipt is possible at a public address. Investigate outgoing transactions and authorizations separately from the unsolicited item’s presence. Evidence: [Airdrop phishing scams](https://support.metamask.io/stay-safe/protect-yourself/nfts/nft-airdrop-scams/) ### Should I visit its website to remove it? An unsolicited asset’s website is not a trusted cleanup service. Use the wallet’s own display controls and independently verified permission tools when relevant. Evidence: [Airdrop phishing scams](https://support.metamask.io/stay-safe/protect-yourself/nfts/nft-airdrop-scams/); [Ethereum security and scam prevention](https://ethereum.org/en/security/) ## Claims and scope ### unsolicited-tokens-and-nfts-quick-answer An unknown token or NFT can be sent to your public address without your consent. Its appearance is not evidence that someone knows your private key or that a reward is legitimate. The danger often begins when its name, image or website persuades you to reveal secrets, sign an authorization or approve access to valuable assets. Scope: {"collection":"ethereum","dataAsOf":"2026-10-02","blockHeight":null} ### unsolicited-tokens-and-nfts-fact-receipt Receipt: Receiving an unsolicited NFT does not require an ordinary wallet login. Scope: {"collection":"ethereum","dataAsOf":"2026-10-02","blockHeight":null} ### unsolicited-tokens-and-nfts-fact-bait Bait: Airdrop metadata can direct recipients to phishing sites. Scope: {"collection":"ethereum","dataAsOf":"2026-10-02","blockHeight":null} ### unsolicited-tokens-and-nfts-fact-hiding Hiding: An interface can hide an asset without transferring it. Scope: {"collection":"ethereum","dataAsOf":"2026-10-02","blockHeight":null} ## Sources - [Airdrop phishing scams](https://support.metamask.io/stay-safe/protect-yourself/nfts/nft-airdrop-scams/) — MetaMask. Unsolicited-token links and permissions create risks distinct from passive receipt. Locator: Airdrop scams; unsolicited tokens. Retrieved: 2026-10-02T18:55:24.143Z. - [Ethereum security and scam prevention](https://ethereum.org/en/security/) — ethereum.org contributors. Primary community guidance on wallet secrets, phishing, malicious sites and transaction checking. Locator: Wallet security; common scams; hardware wallets. Retrieved: 2026-10-02T18:55:24.140Z. - [ERC-721 NFT standard](https://eips.ethereum.org/EIPS/eip-721) — Ethereum Improvement Proposals. Ownership, receiver checks, token-level and operator approvals, mint/burn event semantics. Locator: safeTransferFrom; approve; setApprovalForAll; Transfer; metadata. Retrieved: 2026-10-02T18:55:25.399Z. - [Displaying tokens in MetaMask](https://support.metamask.io/manage-crypto/tokens/how-to-display-tokens-in-metamask) — MetaMask. Wallet display and token contract identity are separate from onchain holdings. Locator: Enhanced detection; custom tokens; hiding tokens. Retrieved: 2026-10-02T18:55:24.137Z. ## Revision history - 2026-10-02: First publication after primary-source research and separate automated verification. ## Cite this entry Degrees of Satoshi editorial project. “Unexpected tokens and NFTs: what does receiving an airdrop mean?.” Published 2026-10-02; updated 2026-10-02. https://degreesofsatoshi.com/encyclopedia/unsolicited-tokens-and-nfts/