NFT Scam UK: Wallet Drainers and Fake Mint Sites
Connecting your wallet is usually not the dangerous step by itself — the approval, listing, or transaction you sign is.
What the modern NFT scam looks like
One common high-value NFT threat is a "wallet drainer" — a convincing fake minting page, marketplace listing, or DeFi site that asks you to connect your wallet and then sign a transaction described as an "approval", "verification", or free "claim". An example of the style: Connect your wallet and sign to claim your free mint before the drop closes. That approval can authorise a smart contract to move assets out of your wallet later, sometimes instantly, sometimes only when the scammer chooses to trigger it.
A related variant lists one of your own genuine NFTs for sale at a token amount, using a signature you were tricked into giving, and the scammer's own linked account buys it instantly.
Warning signs to look for
- You're asked to connect your wallet and sign something described vaguely as "approval", "verification", or a "free claim" — genuine minting rarely needs a blanket approval like this.
- The site creates urgency around a closing drop, a limited allowlist spot, or a countdown timer.
- You were contacted first — by DM, a comment under a genuine project's post, or a fake customer-support reply — rather than finding the project independently.
- The web address is close to, but not exactly, a genuine marketplace or project's domain.
- You're asked for your seed phrase or private key directly — no legitimate mint, marketplace, or wallet ever needs this.
- An account claiming to be "support" messages you first after you post a public question — genuine platform support does not DM users unprompted.
How the wallet-drainer scam works step by step
Contact often starts through a fake customer-support reply, a DM claiming to be from a well-known project, or an ad for an exclusive drop. The linked site looks like a genuine minting page or marketplace listing. You connect your wallet, which usually reveals only your public address and is not the dangerous step by itself. You're then asked to sign a transaction — worded as an approval, a claim, or a verification — and this signature is what actually authorises the malicious contract.
Depending on how it's built, your assets may be drained immediately, or the scammer may wait and drain multiple connected wallets in a single sweep later. Because the blockchain simply executes what was signed, there is no bank or platform that can reverse it.
How to check before you connect or sign anything
Only mint or trade through a project's official, independently-found link — never one sent to you in a DM or reply, even from an account that looks right. Read what you're being asked to sign, not just click through it: a wallet prompt that says "approve" or grants ongoing spending permission over your assets is different from a simple one-off payment, and should stop you. Consider using a separate, low-value "hot" wallet for minting and trying new sites, keeping valuable assets in a wallet that never connects to anything unfamiliar.
Report suspicious listings or accounts through the marketplace's own report function (for example, OpenSea's three-dot "Report" option on a listing, collection, or account). For further steps, see Is This Website a Scam? A Practical Checklist Before You Buy.
What to do if you've already signed a malicious approval
Use a wallet-permission checker (available through most major wallet providers' own help pages) to review and revoke any approvals you don't recognise — this stops a drainer using the same permission again, though it can't undo a transfer that's already happened. Move any remaining assets to a new wallet with a fresh seed phrase as soon as possible, since the compromised wallet's permissions may still be exploitable. Do not respond to anyone contacting you afterwards offering to recover your NFTs or funds for an upfront fee — this is a well-documented follow-up scam.
How to report an NFT scam in the UK
Report it to Report Fraud at reportfraud.police.uk or 0300 123 2040 if you're in England, Wales, or Northern Ireland, including the site address and any wallet addresses involved. In Scotland, report to Police Scotland on 101. Report the listing, collection, or account on the marketplace itself, and forward a phishing email to the NCSC at report@phishing.gov.uk.
Frequently asked questions
Is connecting my wallet to a site dangerous by itself?
Connecting alone typically only shares your public wallet address and isn't the dangerous step. The risk comes from signing a transaction — often worded as an "approval" or "claim" — which is what actually grants a contract permission to move your assets.
How do I know if a mint or NFT drop is genuine?
Only use a link you found independently through the project's own established channels, never one sent to you first in a DM or reply. Read any wallet signature request carefully — a blanket "approval" for ongoing access is a red flag a one-off payment isn't.
I signed something and my NFTs/crypto are gone — what do I do?
Use your wallet provider's permission checker to revoke any approvals you don't recognise, then move any remaining assets to a brand new wallet with a fresh seed phrase. Report the receiving wallet address to Report Fraud in England, Wales or Northern Ireland, or to Police Scotland on 101 in Scotland, though recovery is very difficult once assets have moved.
How do I report a fake NFT site or listing?
Report the listing or account directly through the marketplace (for example, OpenSea's "Report" option), and report the scam to Report Fraud at reportfraud.police.uk or 0300 123 2040 (Police Scotland on 101 in Scotland).
Sources checked
- OpenSea — How can I report fraudulent or disruptive content on OpenSea?
- Report Fraud — reporting a fraud, and who the service covers
- Police Scotland — contact us: non-emergencies on 101