Scam tokens are one of the most persistent threats on the Solana network. Whether it's a fake airdrop that appeared overnight or a token mimicking a well-known project, these tokens exist for one purpose: to trick you into visiting a malicious website or approving a transaction that drains your wallet. The good news is that scam tokens follow predictable patterns, and once you know what to look for, they're easy to identify and safely remove.

TL;DR: Scam tokens on Solana typically show up uninvited, mimic popular projects, have no real liquidity, and try to lure you to phishing websites. Never interact with unknown token websites. Instead, burn the token to zero and close the empty account to recover your ~0.00204 SOL rent deposit.

1. Unknown Tokens Suddenly Appear in Your Wallet

The most obvious red flag is a token you never bought, traded, or claimed showing up in your wallet. Solana's permissionless design means anyone can send any token to any wallet address. Scammers exploit this by airdropping worthless tokens to thousands of wallets at once.

If you open your wallet and see a token you don't recognize — especially one with a dollar value attached — treat it with suspicion. Legitimate airdrops from real projects are announced publicly through official channels long before tokens land in your wallet. Random tokens with no context are almost always scams.

This is different from legitimate airdrops like the Jupiter or Tensor distributions, which were widely announced, well-documented, and claimable through official interfaces. If you can't find a credible announcement from the project team, the token is not real.

Name spoofing is a favorite tactic. Scammers create tokens called "Jupiter V2," "Bonk Rewards," "Raydium Airdrop," or similar variations designed to make you think a real project sent you something. The token might even have a logo that closely matches the original project.

Here's how to check: look up the token's mint address on a Solana explorer like Solscan or Solana FM. Compare it against the official mint address listed on the project's verified website or CoinGecko page. If the mint addresses don't match, it's a fake.

Real projects don't send tokens from random, unverified mint addresses. If a token claims to be from a major protocol but the mint address isn't the one listed in their official documentation, you're looking at a scam.

3. No Liquidity on Any DEX

Legitimate tokens have liquidity pools on decentralized exchanges like Jupiter, Raydium, or Orca. Scam tokens typically have no trading pairs at all, or they have a tiny, one-sided pool designed to show an inflated price without any real buy-side depth.

Try looking up the token on Jupiter's swap interface. If it doesn't appear, or if it shows a price but the swap fails or has extreme slippage, that's a strong signal. Some scam tokens are intentionally programmed to be non-sellable — they have a transfer restriction built into the contract that prevents anyone except the creator from moving them.

This "honeypot" design is particularly insidious because your wallet might display a dollar value for the token, making you think you've received something valuable. You haven't. The price is artificial, and you can't actually realize it.

4. Suspicious Contract Permissions

More sophisticated scam tokens have contract features that give the creator disproportionate control. While checking this requires some technical knowledge, tools like Solscan and RugCheck can surface red flags:

  • Freeze authority retained: The creator can freeze your account, preventing you from transferring or burning the token.
  • Mint authority retained: The creator can mint unlimited new tokens at will, making any value meaningless.
  • Metadata that points to a phishing URL: The token's on-chain metadata includes a website designed to steal your credentials or get you to sign a wallet-draining transaction.

Most legitimate tokens either renounce these authorities or transfer them to a governance contract. A random airdrop token where one wallet controls minting, freezing, and metadata is a scam until proven otherwise.

5. Too-Good-to-Be-True Airdrop Claims

Some scam tokens come with on-chain memo messages or metadata descriptions telling you to visit a website to "claim your reward," "unlock your airdrop," or "migrate to V2." These instructions are the actual attack vector.

The websites they link to are phishing sites designed to look like legitimate dApps. When you connect your wallet and approve a transaction, you're not claiming an airdrop — you're signing a transaction that transfers your real assets to the scammer.

The rule is simple: never visit a URL you found inside a token you didn't expect to receive. No legitimate project distributes tokens this way and then requires you to visit an unknown website to activate them.

Found scam tokens cluttering your wallet? After burning them to zero, use SolRecover to close the empty accounts and recover your locked SOL rent deposits.

Clean Up Your Wallet

What to Do When You Find Scam Tokens

Now that you know how to spot them, here's how to safely handle scam tokens:

Step 1: Do not interact with any linked website. This is the most important rule. The token itself is harmless — the danger is entirely in the phishing site it tries to send you to.

Step 2: Burn the token. Use your wallet's built-in burn feature or a trusted tool to set the token balance to zero. Burning is a standard SPL Token instruction that runs entirely on-chain. It doesn't interact with the scam token's creator or any external website.

Step 3: Close the empty account. Once the balance is zero, the token account is just an empty shell holding your rent deposit of ~0.00204 SOL. Close it to get that SOL back. If you've accumulated many empty accounts — from scam tokens, old trades, and past airdrops — SolRecover can close them all in a single batch transaction.

Step 4: Move on. Don't engage with the scam in any other way. Don't try to investigate the contract, don't try to sell the token, and don't respond to any messages about it.

For a detailed walkthrough on burning unwanted tokens, see our guide on how to burn Solana tokens. And for broader wallet hygiene practices, check out our Solana wallet cleanup guide.

How Cleanup Recovers Your SOL

Every scam token that lands in your wallet creates a token account that locks ~0.00204 SOL in rent. If you've received dozens of spam tokens over the past year, that's a meaningful amount of SOL sitting in worthless accounts.

By burning these tokens and then closing the accounts, you reclaim every rent deposit. SolRecover makes this efficient by scanning your entire wallet, identifying all zero-balance accounts, and batching up to 20 closures per transaction. The 1.9% fee comes out of the recovered rent, and you keep 98.1%.

It's not just about the SOL — a clean wallet is a safer wallet. Removing scam tokens means fewer attack surfaces, less visual clutter, and a clearer picture of what you actually hold.

Scam tokens are locking your SOL in empty accounts. SolRecover scans your wallet, finds every closeable account, and recovers your rent deposits in under a minute.

Recover Your SOL Now

How Recovery Tool Fees Compare

Fees vary dramatically across SOL recovery tools. Here's how they compare on a typical 30-account cleanup at SOL's January 2025 peak of $295 (0.0612 SOL / $18.06 USD recoverable):

Tool Fee Cost on 30 Accounts (USD) You Keep (USD)
SolRecover 1.9% $0.34 USD $17.72 USD
PandaTool 4.88% $0.88 $17.18
ReclaimSOL 5% $0.90 $17.16
SlerfTools 8% $1.44 $16.62
RefundYourSOL 15% (base) $2.71 $15.35
SolRefunds 20% $3.61 $14.45
RentSolana 20% $3.61 $14.45

Competitor fees last verified: March 12, 2026. With SolRecover, you pay just $0.34 USD on a 30-account cleanup — over 10x less than the $3.61 USD charged by 20% tools like SolRefunds or RentSolana. That's a $3.27 USD difference for the exact same operation. SolRecover also runs fully client-side (your browser connects directly to Helius RPC with no backend server), and offers a generous referral program where the referrer earns 1% while the platform keeps just 0.9%.

Solana Scam Tokens FAQ

What should I do if I find a scam token in my Solana wallet?

Never interact with any website linked to the token. Instead, burn the token to zero balance and then close the empty account to recover your rent deposit. SolRecover can help you close empty accounts in bulk.

Can scam tokens steal my SOL?

The token itself cannot steal your SOL. The danger is in visiting phishing websites associated with the token and signing malicious transactions. As long as you don't interact with unknown dApps or sign suspicious transactions, the token is harmless.

Is it safe to burn scam tokens on Solana?

Yes. Burning a token simply sets its balance to zero in your account. This is a standard SPL Token Program instruction and does not interact with any external contract or website.

Why do scam tokens keep appearing in my wallet?

Scammers send tokens to thousands of wallets in bulk using automated scripts. Any publicly visible wallet address can receive unsolicited tokens. You cannot prevent this, but you can safely clean them up.