Crypto drainers can steal assets without ever asking for a wallet’s recovery phrase: a victim may connect to a fake site and approve a transaction or token allowance that lets a scammer move funds. Treat unsolicited airdrops, NFT rewards, and wallet prompts as security decisions—not routine clicks.
What a crypto drainer does
Chainalysis defines a drainer as a phishing tool built for the Web3 ecosystem. Scammers commonly impersonate a legitimate project, lure people to a site, and prompt them to connect a wallet or approve an on-chain action. Fake airdrops and NFT offers are recurring hooks. Chainalysis explains how crypto drainers work.
There are two distinct risks. A seed phrase is the secret that can give someone control of a wallet; never disclose it to a site, support agent, or stranger. Separately, a malicious transaction approval can authorize a particular address to spend specific tokens. A scammer may use that authorization later, even if the victim never shared a recovery phrase. A wallet connection and a transaction approval are not the same action: read each prompt and stop if its effects are unexpected or unclear. Chainalysis describes approval phishing.
How victims are lured
Documented approaches include links shared through Discord or social media, compromised official accounts, fraudulent airdrop pages, fake NFT or discount pop-ups on compromised websites, and unsolicited email. These are examples, not a complete list, and not every drainer uses the same method.
#1 Best Overall
- Effortlessly build your crypto portfolio via the all in one Ledger Wallet app: buy, sell, send, receive, swap, stake and more across popular blockchains. 15,000+ coins & tokens in a single dashboard. Keep a close eye on the market. Compare service providers. Track performance. Get timely alerts. Build your portfolio with confidence.
- Effortlessly build your crypto portfolio via the all in one Ledger Wallet app: buy, sell, send, receive, swap, stake and more across popular blockchains. 15,000+ coins & tokens in a single dashboard. Keep a close eye on the market. Compare service providers. Track performance. Get timely alerts. Build your portfolio with confidence.
- Enjoy Bluetooth connectivity, iOS access, and hours of battery use with this mobile-first, secure backup signer. Freedom you can depend on.
- Genuine Check: confirm your signer is authentic during setup with the Ledger Wallet app.
- Protect your signer: keep it in mint condition at all times with a bespoke Pod or Case to avoid scratches and everyday wear and tear.
- Airdrop and reward bait: The FBI’s June 3, 2025 alert about Hedera describes fraudulent NFT airdrop rewards that direct people from wallet memos, social media, third-party sites, or email to malicious pages. Those pages may ask for login details or a seed phrase, or prompt the user to link a wallet to a decentralized application before funds are moved. Read the FBI alert.
- Fake pop-ups on compromised websites: MetaMask reported in April 2024 that nearly 2,000 hacked WordPress sites displayed fake NFT and discount pop-ups that led visitors to connect wallets. MetaMask’s 2024 review describes the campaign.
- Impersonation and urgent prompts: A page or account can look familiar or official and still be compromised. A link’s appearance is not proof that the offer or transaction is genuine.
What the reported losses do—and do not—show
Chainalysis reported that its updated analysis found more than US$2.7 billion lost to approval phishing since May 2021. That is an estimate for approval phishing, not a measured total for every type of crypto drainer; Chainalysis notes that losses are difficult to track because many scams go unreported. See Chainalysis’s Operation Spincaster announcement.
One case illustrates the potential scale of an individual campaign, not a typical outcome: Chainalysis said a fake Magic Eden site targeting Bitcoin Ordinals had stolen approximately US$500,000 in more than 1,000 malicious transactions as of April 2024. Chainalysis’s drainer analysis discusses the case.
Quick Recap
Best Value
- All your digital assets in one place. You can manage thousands of crypto including Bitcoin, Ethereum, Solana, Tether and more.
- Defend your identity against hackers: secure your online accounts with passwordless, hardware backed, 2FA logins for all your favorite apps and websites.
- Connectivity: USB-C cable connection only. No Bluetooth.Compatible with the Ledger Wallet crypto app, both desktop (Windows, macOS, Linux) and mobile (Android only). Not compatible with iOS.
- Protect your digital assets with the industry's best security: keep your private keys offline in your private signer, battle-tested by the Donjon's white hat hackers, CC EAL 6+ certified Secure Element, constantly updated Ledger OS.
- Effortlessly build your crypto portfolio via the all in one Ledger Wallet app: buy, sell, send, receive, swap, stake and more across popular blockchains. 15,000+ coins & tokens in a single dashboard. Keep a close eye on the market. Compare service providers. Track performance. Get timely alerts. Build your portfolio with confidence.
Rank #4
- UNPARALLELED SECURITY: Protect your assets with Trezor Safe 5's NDA-free EAL 6+ Secure Element, offering robust defense and complete transparency.
- EFFORTLESS NAVIGATION: Experience seamless crypto management with the vibrant color touchscreen, designed for intuitive and user-friendly interactions.
- ENHANCED USER EXPERIENCE: Enjoy tactile confirmation with Trezor Touch Haptic Engine, making each interaction precise and engaging.
- SUPPORTS 1000s OF COINS & TOKENS: Securely handle thousands of assets, including Bitcoin, Ethereum, and more, all in one wallet.
- EASY ASSET MANAGEMENT: Monitor and transact seamlessly with Trezor Suite, our user-friendly desktop and mobile app
Rank #3
- Unparalleled Security: Protect your assets with EAL 6+ Secure Element, offering robust defense and complete transparency
- Simple & Secure Interface: Manage your digital assets easily with a clear OLED screen for secure on-device confirmations
- Supports 1000s of Coins & Tokens: Securely handle thousands of assets, including Bitcoin, Ethereum, and more, all in one wallet
- Effortless Asset Management: Monitor and transact seamlessly with Trezor Suite, our intuitive desktop and mobile app
- Enhanced Backup Solution: Multi-share Backup eliminates single points of failure for secure cold wallet recovery
Rank #2
- Proven security at scale: Over 9 years and millions of cards issued with no known remote hacks, while military‑grade EAL6+ security keeps your private keys locked inside the chip. Your cryptocurrencies stay strongly protected from online attackers.
- Tap once to manage your entire crypto wallet across 90 blockchains - no USB cables or Bluetooth, no batteries, no setup. Access 14,100+ coins & tokens, DeFi, NFTs, and staking instantly from your phone
- Smart backup: Use your second Tangem Wallet as your Backup keys with end‑to‑end encryption; no more papers, pictures. If one card is lost, the remaining can still restore full access, with an optional seed phrase available for advanced users.
- Engineered to last up to 25 years: Waterproof (IP69K), shockproof and tested for extreme temperatures from −25°C to 50°C. A durable cold wallet with long‑term protection and independently audited security.
- Trusted by 6 million users worldwide - buy, sell, swap, stake, and spend cryptocurrency directly. The secure offline storage wallet designed for how people actually use crypto wallets
How to reduce the risk
- Verify an offer independently. Be skeptical of unsolicited tokens, airdrops, rewards, and discounts. Find the project’s official channels independently rather than relying on the link in a message or pop-up.
- Keep secrets secret. Never give a website or person your seed phrase, password, or one-time code. The FBI describes a seed phrase as a string of 12 to 24 words that serves as a key to crypto. The FBI’s alert explains the warning in its Hedera context.
- Inspect every wallet prompt. A connection request does not itself mean the same thing as a transaction approval. Check what a transaction authorizes, particularly which tokens and address are involved; reject prompts you did not expect or cannot understand.
- Limit what an everyday wallet holds. Chainalysis recommends keeping valuable or large holdings in offline storage and moving funds to a hot wallet only as needed. MetaMask likewise advises hardware storage for substantial holdings and separating accounts by risk level. A hardware wallet can reduce online exposure, but it cannot make a malicious approval safe or protect a recovery phrase that is exposed. Chainalysis’s guidance and MetaMask’s guidance discuss these measures.
- Use a separate, empty wallet for unfamiliar sites. Chainalysis suggests considering a temporary wallet with no assets. This limits assets directly exposed in that interaction; it does not establish that the site is safe.
- Treat security warnings as an extra layer. Browser extensions or wallet checks may flag suspicious sites or transactions, but they are not guarantees. MetaMask reported that Wallet Guard was acquired by Consensys in 2024; that report does not establish the tool’s current availability or features, so verify both before relying on any product. MetaMask’s report.
What to do if you suspect your wallet was drained
- Stop interacting with the suspicious page or contact. Do not enter more credentials, disclose a recovery phrase, or approve another prompt in an attempt to fix the problem.
- Contact the wallet or platform provider through its official support channel. Do not use contact details supplied in the suspicious message or page.
- Preserve the transaction and wallet details. Record relevant wallet addresses, transaction hashes, asset types, amounts, and dates. The FBI specifically identifies transaction details as useful for reporting a Hedera-related incident. See the FBI alert.
- Report the incident to the appropriate authority. The FBI directs Hedera victims to the Internet Crime Complaint Center (IC3). Use the reporting route appropriate to your location and the affected service.
- Be wary of recovery offers. The FBI warns that people or companies claiming they can recover scam losses may be running another scam. Chainalysis notes that an incomplete transaction may sometimes be cancellable; this is not a promise that completed transfers can generally be reversed. FBI warning and Chainalysis guidance.
Product prices and availability are accurate as of the date/time indicated and are subject to change. Any price and availability information displayed on Amazon at the time of purchase will apply.
