Spam token scams#
Last modified: August 10, 2026
Spam tokens are unsolicited tokens sent to many wallets. In CenturionDEX token warnings, Spam means a token has been flagged based on signals such as airdrop history, distribution pattern, or other screening data.
A spam token warning does not always mean a token can directly move your assets. The danger often starts when the token convinces you to visit a fake site, sign a wallet request, or copy a malicious address.
What it looks like#
You receive a token you never bought. Its name claims you won a reward and tells you to claim it. When you follow the instructions, the claim page asks for a CRC-20 approval. The spam token was the advertisement; the wallet approval is how the attacker tries to steal funds.
How spam tokens are used#
Attackers may:
- Send a token to many wallets so it appears in balances and history.
- Use token names or metadata to advertise fake claims.
- Copy a real project's name to create confusion.
- Poison address history with lookalike transfers.
- Create fake volume or holder counts.
- Move faster than automated screening on new token contracts.
What to do when you see a spam token#
- Do not visit claim instructions from the token name or metadata.
- Do not approve, swap, or transfer the token just to remove it.
- Hide the token in your wallet if your wallet supports that feature.
- Verify any real campaign through official sources.
- Report suspicious tokens or pages through official channels.
A Spam warning is informational. Scanners can miss new or obscure spam tokens, and a token without the warning is not guaranteed to be safe.