High riskCrypto & Investment Scams

NFT Mint Scam

NFT mint scams ride the hype around a new collection or surprise drop. A link, usually shared on social media or in a Discord or Telegram, leads to a fake mint site or a malicious smart contract. When you connect your wallet and approve the transaction, instead of minting an NFT you may sign away access that lets the attacker drain your tokens or transfer your existing NFTs. The hype and a ticking countdown are designed to make you approve quickly without checking.

Quick verdict

Risk level
High risk
Scam type
Wallet-draining scam
Main red flag
A hyped mint link asks you to connect your wallet and approve a transaction under time pressure.
What to do first
Do not connect your wallet; verify the official contract and mint link through the project's verified channels first.

What this scam usually looks like

NFT mint scams ride the hype around a new collection or surprise drop. A link, usually shared on social media or in a Discord or Telegram, leads to a fake mint site or a malicious smart contract. When you connect your wallet and approve the transaction, instead of minting an NFT you may sign away access that lets the attacker drain your tokens or transfer your existing NFTs. The hype and a ticking countdown are designed to make you approve quickly without checking.

Example message pattern

Example pattern — not a real report
Example pattern: "GO GO GO! Surprise mint is LIVE for the next 15 minutes only. Free for early supporters, just pay gas. Connect your wallet and approve to claim your NFT before they're gone: [suspicious link]. Don't miss out, whitelist closes soon!"

This is a fictional, anonymised example used to illustrate the pattern. It is not a verified real message, and any names are used only to show how the scam typically reads.

Red flags to watch for

  • A surprise or 'live now' mint with a short countdown that pressures you to act before you can check it.
  • The link is shared in DMs, comments or a compromised channel rather than the project's verified accounts.
  • Connecting your wallet triggers an approval or signature request you do not fully understand.
  • The mint site domain is slightly misspelled or different from the project's known official address.
  • Promises of a 'free' mint where you only pay gas, used to lower your guard before a draining transaction.

What to do

  • Confirm the mint link and contract address through the project's verified website and official social accounts.
  • Use a separate burner wallet with limited funds for any new or unverified mint.
  • Read each wallet prompt carefully and reject signatures or approvals you do not recognise.
  • Slow down and ignore countdowns; legitimate projects survive you taking time to verify.

If you already clicked or replied

  • Immediately move remaining assets to a fresh, secure wallet you control.
  • Revoke token and NFT approvals for the suspicious contract using a reputable approval-management tool.
  • Never enter your seed phrase anywhere, and treat any 'support' that asks for it as a further scam.
  • Record the transaction hashes and contract address, and report the incident to the marketplace and your local fraud service.

What not to do

  • Do not approve wallet transactions you do not understand just because a countdown is running.
  • Do not enter or share your wallet seed phrase or private key with anyone, for any reason.
  • Do not trust mint links from DMs, comments or unverified channels without checking the official source.

Similar scams

Frequently asked questions

How can a mint drain my wallet if I didn't send anything?
Approving a malicious transaction can grant a contract permission to move your tokens or NFTs. The attacker then transfers them out later. That is why reading and rejecting unfamiliar approvals matters.
Is a 'free, just pay gas' mint safe?
Not necessarily. The 'free' framing is sometimes used to lower your guard. The real risk is the approval or signature the site asks you to sign, not the small gas amount.
How do I find the genuine mint link?
Use the project's verified website and official social accounts to find the contract address and mint page. Avoid links from DMs, comments or any channel that may have been compromised.
I connected my wallet. What should I do now?
Move remaining assets to a new wallet, then revoke the contract's approvals using a reputable tool. Never share your seed phrase, and be alert to fake recovery offers that may follow.

Last reviewed: June 2026

Disclaimer: This page provides educational information only to help you recognise common scam patterns. It is not legal, financial, cybersecurity, or law enforcement advice, and it does not confirm whether any specific message, company, or person is genuine or fraudulent. When in doubt, contact the official organisation directly and report concerns to your local authorities.