How to Spot an NFT Scam: A Practical Guide

Before you mint, buy or accept an NFT, check who controls the offer, whether the collection is authentic and what your wallet is being asked to do. A familiar image, a busy social account or a “verified” badge is not enough on its own. Scammers copy art, project names and marketplace pages, then use fake urgency or giveaway promises to rush you.

Pause if someone says you must act immediately, pay a fee to claim a prize, or sign a message to prove you own your wallet. Never give anyone your seed phrase or private key. Keep your wallet connection separate from permission to move assets: read each transaction or signature prompt, and reject anything whose purpose you cannot explain.

Before proceeding, ask yourself:

• Did I reach this project through a channel I found independently?
• Can I match its contract address to an official announcement?
• Do I understand the total cost and the permissions in this wallet prompt?
• Is the offer pressuring me to bypass those checks?

If you cannot verify the answers, do not connect, sign or pay. You can always investigate later; a rushed decision can be difficult or impossible to undo.

Fake collections imitate popular projects by copying artwork, names, logos and descriptions. A scammer may create a marketplace page that looks convincing or send you to a counterfeit mint site through a direct message, email, search ad or social post. The NFT may look identical to a genuine one while being issued by a different contract.

Verify the collection’s contract address, not just its title or thumbnail. Find the address through a project channel you locate independently, such as an established official site or its verified social account. Compare the full address with the one shown by the marketplace or on the relevant blockchain explorer. Similar-looking addresses and symbols are easy to mistake, so check them character by character.

Then look for signs that the project is active and coherent. Does it explain who is creating it, what is being sold and what holders can actually expect? Are announcements consistent across its established channels? A vague roadmap, copied text, anonymous team or promises of guaranteed returns should raise concern, though none alone proves fraud. A legitimate-looking project can still be risky, and a genuine NFT does not guarantee future demand or resale value.

Treat unexpected offers and messages as untrusted, even if the sender’s profile appears to belong to an artist, collector, marketplace or project team. Scammers impersonate real accounts, create lookalike profiles and sometimes take over legitimate ones. Common hooks include a free NFT giveaway, a special mint, a paid collaboration or an offer to buy your artwork for an unusually high amount.

Be especially cautious when a buyer insists that you use a particular unfamiliar marketplace, pay a “verification” or “account upgrade” fee, or send crypto to release sale proceeds. A real sale should not require you to pay a stranger an extra fee outside the normal transaction flow. Do not follow a link in a direct message to log in or connect your wallet. Instead, navigate to a platform using a route you already trust and check whether the offer appears there.

Before accepting a sale or collaboration:

1. Verify the person through an independent, established channel.
2. Check that the offer and payment are visible in the platform you chose.
3. Read the transaction details and confirm the recipient and amount.
4. Decline requests for advance payments, private keys or recovery phrases.

If a buyer changes the deal at the last minute, stop and recheck everything.

A website asking to connect your wallet is not automatically malicious, but connection is not the same as a harmless guarantee either. The more serious danger is approving a transaction, granting an NFT or token allowance, or signing a message that authorizes an action. Some prompts are hard to interpret; a request described as a login or verification step may contain permissions you did not expect.

Read the wallet’s own prompt rather than relying on the website’s explanation. Check the network, the action, the asset or contract involved, the recipient and any displayed amount. If the prompt is unclear, asks for broad or unlimited access, or does not match what you intended to do, reject it. Never paste your seed phrase into a site, share it with support, or enter it in a form reached through a mint link.

You can reduce exposure by using a separate wallet for experimental mints and keeping valuable assets in a wallet you do not connect to unfamiliar sites. This does not make risky transactions safe, but it can limit what is exposed. Disconnecting a site from a wallet may end a session; it does not necessarily cancel permissions already granted. Review and revoke unwanted approvals with reputable tools for the relevant blockchain, checking every transaction before you confirm it.

Do not assess an NFT by its advertised floor price alone. A few trades can create a misleading impression of demand, and related wallets may trade among themselves to make activity look stronger. Listings can be withdrawn, prices can fall, and there may be no buyer when you want to sell. An NFT’s display image or metadata may also change if the project’s underlying hosting or configuration allows it.

Before buying, examine the actual transaction history and collection contract. Look at how many distinct wallets appear to hold items, whether trading is sustained rather than limited to a burst, and whether sales are concentrated among a small number of accounts. These clues are imperfect: wallet counts do not prove who owns the wallets or whether activity is genuine.

Check the full amount you will pay before confirming. Depending on the marketplace and network, costs can include the NFT price, network gas, marketplace charges and any applicable royalty or service terms. Those costs vary, and royalties are not guaranteed to be enforced in every setting. A seller may also ask for a separate payment outside the marketplace; that removes protections the platform might otherwise provide. Never treat a displayed valuation or projected resale price as a promise.

Scam sites often imitate a project’s mint page and create urgency with countdowns, limited-supply claims or warnings that you will lose access unless you act. A page can look polished and still be fake. Check the domain carefully, but do not rely on appearance or search placement; reach the project’s official channels independently and confirm that they point to the same mint and contract.

Before a mint, use this checklist:

• Confirm the official contract address and blockchain.
• Check that the collection and mint are announced through established project channels.
• Review the wallet prompt, including the amount, network and permissions.
• Confirm the total cost, including variable gas and any marketplace charges shown.
• Avoid links from unsolicited messages, pop-ups and giveaway posts.
• Stop if the site asks for your recovery phrase, a surprise payment or a signature you cannot understand.

Do not assume that an NFT is free just because its listed price is zero. You may still be asked to pay network fees, and a fake claim page may use a free offer to lure you into signing a harmful request. If your wallet shows details that differ from the page’s promise, reject the transaction and investigate through a separate, trusted route.

If you think you interacted with a scam, stop using the site and do not sign more messages to “fix” the problem. A supposed support agent or recovery service may contact you next and ask for an advance payment, your recovery phrase or remote access to your device. Those are serious warning signs; no one needs your private key to return an NFT.

Take these steps in order:

1. Save the transaction hash, wallet address, site details, messages and screenshots. Do not publish sensitive account information.
2. Report the incident to the marketplace, wallet provider and relevant social platform through channels you find independently.
3. If you approved an unwanted permission, inspect and revoke it using a reputable tool for that blockchain. Revocation may require a network fee and cannot undo an earlier transfer.
4. If you suspect your recovery phrase or private key was exposed, treat that wallet as compromised. From a secure device, create a new wallet with a new recovery phrase and move any remaining assets only after checking the destination and transaction carefully.
5. Consider reporting the theft to the appropriate local authorities or cybercrime reporting service.

On-chain transfers are generally difficult or impossible to reverse. Keep realistic expectations: reporting can help document the incident, but it does not guarantee that assets or funds will be recovered.

The most damaging mistakes are often small decisions made under pressure. Do not rely on an image search result, a social badge, a high floor price or a crowded chat as proof that an NFT is genuine. Do not assume a site is safe because it uses familiar branding, or that an account is legitimate because it has posted for a long time. Accounts can be impersonated or compromised.

Avoid these shortcuts:

• Clicking a mint or support link sent in an unexpected message.
• Signing a wallet prompt without understanding what it authorizes.
• Sharing a seed phrase or private key with anyone, for any reason.
• Paying an extra fee to unlock a sale, prize, verification or withdrawal.
• Believing claims of guaranteed returns, guaranteed resale or risk-free NFTs.
• Sending more money to someone who promises to recover assets you lost.

Slow down and verify the project, contract and transaction through independent channels. Use a wallet with limited funds for unfamiliar activity, keep valuable assets away from experimental sites, and review permissions periodically. These steps reduce avoidable exposure, but they cannot eliminate all project, marketplace, smart-contract or market risks. If a deal only works when you skip checks, walk away.