iTechGuides is reader-supported. When you buy through links on our site, we may earn an affiliate commission. As an Amazon Associate I earn from qualifying purchases. Learn more
A crypto wallet drainer tricks you into authorizing an asset transfer—often by posing as a project, claim, or routine Web3 action. Connecting a wallet usually reveals its public address; signing a transaction or message can grant permission to move assets. Treat every wallet prompt as a request to inspect, not a button to click through.
How a crypto wallet drainer works
A drainer is phishing software used to steal cryptocurrency or NFTs. Its operators direct users to a malicious site that imitates a project or service. The site asks the user to connect a wallet and then sign a transaction or message. If that authorization grants access to tokens or NFTs, the drainer can use it to transfer assets. The transfer may be valid on-chain because the wallet owner authorized it, even if the user misunderstood the prompt. Chainalysis and MetaMask describe these patterns.
The usual sequence
- Lure: A fake airdrop, mint, claim, verification step, cloned app, compromised social account, or chat link sends you to an imitation site.
- Prompt: The site asks you to connect a wallet, then sign a transaction or message. The prompt may be described as a claim or listing, while actually requesting permission to move assets.
- Authorization: A token allowance can let a contract transfer tokens up to the approved amount. An off-chain signature, such as a Permit2 authorization, may be submitted later, subject to its terms. Some drainer kits batch transfers.
- Transfer: Once the authorized transfer is confirmed on-chain, the wallet provider cannot simply reverse it. Stolen funds may then be routed through DeFi services or other channels.
Chainalysis reported approximately $500,000 across more than 1,000 malicious transactions as of April 2024 in one case involving a drainer imitating Magic Eden on Bitcoin Ordinals. That is one historical example, not a measure of all drainer theft. The Chainalysis team noted in its May 16, 2024 article, “Understanding Crypto Drainers”, that “It is difficult to track total amounts stolen by drainers, given that many crypto drainer scams are not reported.”
Can connecting your wallet drain it?
A connection alone is generally different from an approval. Connecting commonly shares your public wallet address with a site; it does not, by itself, grant permission to transfer your assets. The risk rises when you approve a transaction or sign a message that authorizes an asset-moving action.
#1 Best Overall
- Effortlessly build your crypto portfolio via the all in one Ledger Wallet app: buy, sell, send, receive, swap, stake and more across popular blockchains. 15,000+ coins & tokens in a single dashboard. Keep a close eye on the market. Compare service providers. Track performance. Get timely alerts. Build your portfolio with confidence.
- Effortlessly build your crypto portfolio via the all in one Ledger Wallet app: buy, sell, send, receive, swap, stake and more across popular blockchains. 15,000+ coins & tokens in a single dashboard. Keep a close eye on the market. Compare service providers. Track performance. Get timely alerts. Build your portfolio with confidence.
- Enjoy Bluetooth connectivity, iOS access, and hours of battery use with this mobile-first, secure backup signer. Freedom you can depend on.
- Genuine Check: confirm your signer is authentic during setup with the Ledger Wallet app.
- Protect your signer: keep it in mint condition at all times with a bespoke Pod or Case to avoid scratches and everyday wear and tear.
Do not assume a prompt is harmless because it says “sign message” rather than “transaction.” MetaMask explains that an off-chain signature is not broadcast when you sign it, but someone may use it later. What matters is what the signature authorizes, not whether the site calls it a message or a routine step. MetaMask’s signature-phishing guidance explains the distinction.
| Action | What it commonly means | Risk to assets |
|---|---|---|
| Connect a wallet | Shares the public address with the site. | Connection alone generally does not authorize a transfer. |
| Approve a token allowance | Gives a spender permission to transfer a token, potentially within an approved amount. | The spender may use the allowance to transfer tokens. |
| Sign an off-chain authorization | Creates a signed permission that may be submitted later, depending on its terms. | A malicious signature can enable a later transfer without a new prompt at signing time. |
How to avoid wallet drainers
Verify the destination before connecting
- Reach a project through a domain or link you already know to be official; do not rely on an unsolicited claim link, promoted post, social reply, or chat message.
- Be skeptical of urgent airdrop, mint, verification, and giveaway prompts, including posts from accounts that may have been compromised.
- Do not follow claim links embedded in unsolicited token descriptions.
Chainalysis and Ledger describe fake project pages, compromised accounts, and unsolicited messages as common phishing routes. See Chainalysis’s drainer overview and Ledger’s security guidance.
Rank #2
- Proven security at scale: Over 9 years and millions of cards issued with no known remote hacks, while military‑grade EAL6+ security keeps your private keys locked inside the chip. Your cryptocurrencies stay strongly protected from online attackers.
- Tap once to manage your entire crypto wallet across 90 blockchains - no USB cables or Bluetooth, no batteries, no setup. Access 14,100+ coins & tokens, DeFi, NFTs, and staking instantly from your phone
- Smart backup: Use your second Tangem Wallet as your Backup keys with end‑to‑end encryption; no more papers, pictures. If one card is lost, the remaining can still restore full access, with an optional seed phrase available for advanced users.
- Engineered to last up to 25 years: Waterproof (IP69K), shockproof and tested for extreme temperatures from −25°C to 50°C. A durable cold wallet with long‑term protection and independently audited security.
- Trusted by 6 million users worldwide (4.9 App Store, 4.8 Google Play) - buy, sell, swap, stake, and spend cryptocurrency directly. The secure offline storage wallet designed for how people actually use crypto wallets
Inspect the wallet prompt
- Read what the wallet is asking you to approve or sign before confirming.
- When the details are shown, check the asset, spender, amount, and duration. Stop if the request does not match the action you intended.
- Do not sign an unfamiliar request merely because a website says it is required to claim, list, verify, or receive something.
- Wallet alerts and transaction simulation may add context, but they cannot guarantee that a request is safe.
Separate valuable holdings from unfamiliar activity
For valuable holdings, offline storage can reduce exposure to routine online threats. A separate temporary wallet with no valuable assets can also limit what is at risk when trying an unfamiliar site. Neither measure makes a malicious approval safe: if you approve an asset-moving action from a wallet, assets in that wallet can still be exposed. Chainalysis discusses offline storage in its drainer guidance.
What’s actually slowing this PC down?
Pick the symptom - the matching free tool is one click away.
Revoke approvals you no longer need
Revoking an approval sets the relevant spender’s allowance for that token back to zero. It is an on-chain transaction, so it incurs network fees. Disconnecting a site from your wallet is not the same as revoking an on-chain approval. Use your wallet’s official interface or a trusted approval-management tool; MetaMask identifies Revoke.cash and ScamSniffer as options in its token-approval guidance.
Rank #3
- Proven security at scale: Over 9 years and millions of cards issued with no known remote hacks, while military‑grade EAL6+ security keeps your private keys locked inside the chip. Your cryptocurrencies stay strongly protected from online attackers.
- Tap once to manage your entire crypto wallet across 90 blockchains - no USB cables or Bluetooth, no batteries, no setup. Access 14,100+ coins & tokens, DeFi, NFTs, and staking instantly from your phone
- Smart backup: Use your second Tangem Wallet as your Backup keys with end‑to‑end encryption; no more papers, pictures. If one card is lost, the remaining can still restore full access, with an optional seed phrase available for advanced users.
- Engineered to last up to 25 years: Waterproof (IP69K), shockproof and tested for extreme temperatures from −25°C to 50°C. A durable cold wallet with long‑term protection and independently audited security.
- Trusted by 6 million users worldwide - buy, sell, swap, stake, and spend cryptocurrency directly. The secure offline storage wallet designed for how people actually use crypto wallets
Keep your recovery phrase secret
Never enter your recovery phrase on a website or share it with someone claiming to provide support. Ledger warns that unsolicited support messages and recovery-phrase requests are phishing indicators. Treat unsolicited tokens as potential bait rather than a reason to visit an embedded link. See Ledger’s scam guidance.
Independent reader supportYour contribution helps us test, update, and keep practical guides available for everyone.What to do after a suspicious interaction
You signed an approval, but see no unauthorized transfer
- Check approvals for the affected account on the relevant network.
- Revoke suspicious or unnecessary permissions promptly using your wallet’s official tools or a trusted approval-management service. Revoking an allowance does not guarantee recovery if assets have already been transferred.
- Keep monitoring the account for unauthorized transactions.
You see unauthorized transactions or your recovery phrase may be exposed
- Stop using the compromised wallet. If the recovery phrase may be compromised, treat every account derived from it as at risk.
- Using a separate browser profile or device, create a new wallet and store its recovery phrase offline.
- Move remaining funds only if it is safe to do so. Do not send additional gas funds to an account that may have a sweeper script, which can automatically move incoming funds.
- Report the incident to the relevant authorities and wallet provider. Do not trust unsolicited recovery agents who contact you through social media replies or direct messages.
MetaMask states that “Unfortunately, transactions cannot be reversed, nor missing funds restored.” A self-custodial wallet provider cannot rescue funds lost in a confirmed transaction. See the MetaMask Help Center’s compromised-account guidance.
Quick Recap
Best Value
- All your digital assets in one place. You can manage thousands of crypto including Bitcoin, Ethereum, Solana, Tether and more.
- Defend your identity against hackers: secure your online accounts with passwordless, hardware backed, 2FA logins for all your favorite apps and websites.
- Connectivity: USB-C cable connection only. No Bluetooth.Compatible with the Ledger Wallet crypto app, both desktop (Windows, macOS, Linux) and mobile (Android only). Not compatible with iOS.
- Protect your digital assets with the industry's best security: keep your private keys offline in your private signer, battle-tested by the Donjon's white hat hackers, CC EAL 6+ certified Secure Element, constantly updated Ledger OS.
- Effortlessly build your crypto portfolio via the all in one Ledger Wallet app: buy, sell, send, receive, swap, stake and more across popular blockchains. 15,000+ coins & tokens in a single dashboard. Keep a close eye on the market. Compare service providers. Track performance. Get timely alerts. Build your portfolio with confidence.
Rank #4
- UNPARALLELED SECURITY: Protect your assets with Trezor Safe 5's NDA-free EAL 6+ Secure Element, offering robust defense and complete transparency.
- EFFORTLESS NAVIGATION: Experience seamless crypto management with the vibrant color touchscreen, designed for intuitive and user-friendly interactions.
- ENHANCED USER EXPERIENCE: Enjoy tactile confirmation with Trezor Touch Haptic Engine, making each interaction precise and engaging.
- SUPPORTS 1000s OF COINS & TOKENS: Securely handle thousands of assets, including Bitcoin, Ethereum, and more, all in one wallet.
- EASY ASSET MANAGEMENT: Monitor and transact seamlessly with Trezor Suite, our user-friendly desktop and mobile app
Product prices and availability are accurate as of the date/time indicated and are subject to change. Any price and availability information displayed on Amazon at the time of purchase will apply.
Recommended Free Tools
