A token you never bought suddenly appears in your wallet, and its name looks pretty intimidating. Your first reaction should not be "Is this an airdrop from some project?" but rather "This is most likely a phishing token. Don't touch it."
The world's largest cryptocurrency exchange by trading volume,leading in security and liquidity.
New user benefit: Enjoy 20% off trading fees upon registration!
If you receive this kind of unknown asset in your Binance Web3 wallet, the correct action is to "hide" it, not "remove" or "transfer" it. Removal on the blockchain corresponds to "sending a transaction," and sending this risky token itself may trigger a malicious contract.
Step 1: Determine What You Received
Risky tokens usually have several obvious characteristics. Binance's official security tips and third-party wallet security guides both mention that these tokens often come from "token pollution" attacks.
Characteristic 1: Unknown source. You did not buy it, did not trade it, and did not participate in any related activity. This token suddenly appeared in your wallet. Binance officially states, "If you do not recognize the token or have not interacted with the project, it is likely a spam token."
Characteristic 2: The value is absurdly high. The displayed price is very high, but when you try to sell or swap it, you find that the operation cannot be completed. Some scammers even add liquidity to these tokens to artificially create the illusion that they "look valuable," tempting you to try to trade or buy more.
Characteristic 3: The name imitates official tokens. They use names like "USDT2," "FreeETH," or "Binance Gift," or imitate the names and icons of mainstream tokens such as BNB and USDT.
Characteristic 4: It contains a guiding link or prompt. The token name or description contains guiding text such as "claim rewards" or "click to verify," pointing to an external link.
Completion standard: You can determine that this token "appeared out of nowhere and has a suspicious name," rather than being an airdrop from a project you actively participated in.
Step 2: Absolutely Do Not Do These Things
Risk warning: After seeing a risky token, absolutely do not click, transfer, swap, authorize, or connect your wallet to any link or DApp shown in the prompt. Even just trying to "sell" or "move" this risky token may trigger a malicious contract and cause other assets in your wallet to be transferred away. Binance officially and multiple wallet security documents emphasize: "Do not interact with them—do not click, swap, or attempt to move them. Even interaction may trigger a malicious smart contract."
Common reason for failure: Some people think, "I can just sell it for money, right?" But the contract of a risky token is often designed to be "buyable but not sellable"—when you try to sell it, the transaction will fail; or at the moment you authorize the sale, the malicious contract obtains permission to transfer your other assets.
Step 3: The Correct Action—Hide the Token
The goal is: to make this token no longer appear in your wallet interface while not interacting with its contract in any way.
How to do it:
Case A: Hide directly in the Binance Web3 wallet. Open the Binance Web3 wallet and find the suspicious token in the asset list. Long-press or swipe left on the token (the specific operation may vary slightly depending on the version) and find the "Hide" or "Don't show" option. If you cannot find it, click the menu in the upper left corner of the wallet homepage → go to [Security Center] → run a [Security Scan]. The system will automatically mark risky tokens and provide a one-click option to hide or ignore them.
Case B: Hide using the "Token Management" feature on a block explorer. Open the block explorer for the corresponding chain (Etherscan for Ethereum, BscScan for BNB Chain), enter your wallet address, and find the "Hide Token" feature under the "Tokens" or "Token" tab. Set the suspicious token to hidden.
Completion standard: The token disappears from your wallet asset list, and you have not initiated any transfer or authorization operation related to it.
The world's largest cryptocurrency exchange by trading volume,leading in security and liquidity.
New user benefit: Enjoy 20% off trading fees upon registration!
Step 4: Check Your Authorization List as Well
After receiving a risky token, it is recommended to check your wallet's authorization status. Some users receive risky tokens after connecting to a malicious DApp, and they may have also clicked authorization at that time.
How to do it: In the [Security Center] of the Binance Web3 wallet, find the "Authorization Security" or "Approval Security" module and run a check. The system will list all contract authorizations for that address and mark "dangerous, excessive, or unnecessary" authorization items. You can revoke them directly on that page with one click.
Completion standard: There are no unrecognized contract addresses in the authorization list, and all retained authorizations are ones you actively confirmed.
Verification method for completed operation: The risky token has been hidden from the asset list, and the security scan report shows that your "asset security" status is green (no risk). There are no suspicious items in the authorization management list.
Next action: In the future, treat any token that "appears out of nowhere" in your wallet as a risky token by default. Do not check how much it is worth, do not try to sell it, and do not click any link in its description. Just hide it directly.
