Did I lose my crypto by clicking a free airdrop or claim link?
A 'wallet drainer' is a fake website that looks like a free gift, a new token, or a 'claim your reward' page. When you connect your wallet, it shows a pop-up asking you to sign. That signature can give the scammer permission to take your tokens later. This permission is called an 'approval'. You can often cancel it, which is called 'revoking'.
Warning signs
A message or post says you can claim free tokens, an 'airdrop' (free coins), or a new NFT.
The link came from a comment, a direct message, or an ad, not the project's real website.
The page rushes you: 'Only 10 minutes left!'
Your wallet shows a pop-up asking you to 'approve', 'permit', 'sign', or 'set approval for all'.
The site asks you to 'verify' or 'validate' your wallet to receive something.
Tokens leave your wallet after you signed, even though you did not send them.
If it already happened
Check and cancel (revoke) approvals you do not recognize. Use your wallet's own approvals screen, or type revoke.cash yourself into your browser. Never use a revoke link someone sends you.
Ask your wallet maker's official support what to do next. Reach them inside their own app or by typing their address yourself.
Write down what happened while you still remember. Save the wallet addresses, transaction IDs (the long code for each payment), dates, amounts, screenshots, the website or app name, and the chat usernames.
Report it for free. In the US, use the FBI's Internet Crime Complaint Center at ic3.gov and the FTC at reportfraud.ftc.gov. Outside the US, use your country's official fraud-report service. Type the address yourself.
Expect a second scam. People may soon contact you offering to get your money back for a fee. That is almost always another scam.