Unexpected tokens in your wallet: when leaving them alone is enough

Unexpected tokens appearing at your public address do not mean you must interact with them. You can leave them alone or hide their display in the wallet. A claimed high value is not proof that you can sell them for that amount.

Trezor’s airdrop-scam guidance explains how apparently valuable tokens can lure recipients into risky interactions. Token names and explorer metadata can contain links chosen by the token creator.

Do not follow the token’s instructions

A token telling you to visit a site, pay an activation fee or approve another asset is making a new request. Receiving a balance does not make that request trustworthy.

Check whether you expected a distribution from a genuine project using its independent official channels. Do not use only the URL embedded in the token name as the verification source.

Separate receiving from authorizing

A stranger can send tokens to a public address without your consent. Their arrival alone is not evidence that your private key leaked. Risk changes when you connect to an unknown site, sign a request, approve assets or expose secrets.

Hiding a token removes visual clutter; it does not delete the contract or revoke permissions. If you already signed while trying to sell or claim it, inspect those authorizations separately.

Avoid experimenting with an unknown token just to clear the balance. The relevant question is whether you have a legitimate reason to interact with that contract, not whether the wallet’s estimated portfolio value makes the airdrop look attractive.