Fake tokens hit half of 2026's big airdrops, often before the real claim opened

01 · A fake arrivesFour weeks early

In early February, Binance announced a reward campaign for Opinion, a prediction market getting ready to launch its token on BNB Chain. The same day, a token called OPINION, ticker OPN, landed in 181,652 wallets that had never asked for it.

It was a copy. Forty-eight seconds after it landed, it was trading on a DEX, so wallets showed it with a price next to it. The real Opinion claim did not open until four weeks later.

Opinion was not alone. Bitquery indexes every token transfer, so we checked every big airdrop of 2026 for copycats of each drop's name or ticker. About half the drops had them. The copies reached wallets millions of times, often before the real token existed, and thousands of wallets bought them.

02 · The trickHow a fake airdrop token works

Anyone can create a token with any name and send it to any wallet. That is all a copycat needs. The creator gives it the name or ticker of an airdrop people are waiting for, then pushes it into hundreds of thousands of wallets, usually in about a hundred transactions.

The push is the bait. A wallet that suddenly holds OPINION, with a price attached, looks like it has received the airdrop. Some people try to sell it. Others search the ticker and buy it on a DEX, thinking it is the real token. It is a close cousin of the trick in our address poisoning investigation, which uses a look-alike address rather than a look-alike token. On Optimism, unasked pushes like these now carry ads for websites that promise a reward.

03 · How commonHalf the big drops

We found 57 copycat tokens aimed at 25 of the 51 drops, 49% of them. Together they landed in wallets 5.4 million times. The biggest single copy, a UP token aimed at Unitas, reached more than half a million wallets.

BNB Chain carried more than three quarters of the pushes, and most of the rest landed on Base. The ten BNB Chain drops where claimers sold through Binance Wallet drew nearly three in four pushes by themselves.

04 · TimingBefore the real claim

The fakes came early. In 18 of the 25 copied drops, at least one copy landed ahead of the claim. Opinion's came four weeks ahead, Arcium's more than three weeks ahead, and ETHGas's more than two.

Early is the point. Before a token launches, people know its name and ticker but often not its contract address, which is the only thing that tells a real token from a fake. That gap is when a copy is easiest to believe.

05 · The poolA price from the first minute

Every one of the 57 fakes had a DEX pool. In most cases the first trade came a minute or so before the push, so the copy landed in wallets already showing a price. Thirty of the copies were trading before the claim had even opened.

That trading was not all people. One bot address made more than 30,000 trades across ten of the copies, and nearly a thousand addresses traded three or more. Trading bots jump on new pools.

06 · Who paidThousands of small buyers

Some of the buyers were people. We counted wallets that made five trades or fewer in a copy and bought at least once. There were 2,567 of them. They paid about $3.0 million between them and got $1.7 million back when they sold. The median buyer spent $174.

About a third of those buyers never sold. Some bought before the claim had even opened.

07 · Who sent themOne sender, seven fakes

The 57 fakes came from 45 sending addresses. One of them pushed seven fakes, copying Bitway, Opinion, Perle and Unitas, all four of them BNB Chain launches. A small group working the same launch calendar would look like this, though the chain cannot say who holds those keys.

Most senders used an address once and never again. Blocking a sender does little, because the next copy usually comes from a new address.

08 · Staying safeHow not to buy the fake

The rules are simple, and the data shows why each one matters.

Get the contract address from the project itself, its site or its official account, and check it before you buy or claim. A token that shows up in your wallet unasked is not an airdrop you claimed. A price in your wallet means only that someone made a pool. If you want a second check on eligibility, use a trusted airdrop checker rather than a link that came with the token.

09 · The answerHow we checked, and what it means

We took the 51 airdrops from our 2026 airdrop scorecard and looked for tokens on the same chain, within 30 days of each claim, that copied the ticker or the name. To count, a copy had to be pushed to thousands of wallets at once. We dropped five that shared only a ticker and carried an unrelated name. Trades come from Bitquery's own DEX data, and dollar values use our price data on the day of each trade.

So how risky is a big airdrop? Half of them came with a copy attached. Every copy had a DEX pool, and many arrived before the real thing. The money we can see is small next to the airdrops themselves: small buyers put in about $3 million and got $1.7 million back. It landed on people who thought they were early.

FAQ

What is a fake airdrop token?

A token someone creates with the name or ticker of a real airdrop and pushes into many wallets, so it looks like the real thing. About half of 2026's biggest EVM airdrops drew at least one.

How do I tell a real airdrop token from a fake?

Check the contract address against the project's own site or official account. Names and tickers can be copied; the address cannot. Treat any token that arrives without a claim as a copy.

Do fake airdrop tokens show a price?

Often, yes. Every copy we found had a DEX pool, and most started trading within minutes of the push, so wallets showed them with a price.

How much did people lose to fake airdrop tokens?

Small buyers paid about $3.0 million for copies in 2026 and got $1.7 million back when they sold. About a third of them never sold.