Bitcoin Forum

Hi Guys,

Airdrops are just combination of your data like email, bitcointalk username and password through a signup form.
With this data, They cretae a database and keep selling to ICOs, This is how you got membership of some ICO groups automatically.

Another agenda is to apply this email and password to login to different exchanges so that your fund can be stolen.  Never fill any form offered by
unknown ICO airdrop.

I did a lot of registration in the airdrops but there are no airdrops who asked me my password just two conditions must apply never give your private key of your wallet and never give your password

Thats why there are disposable services for email, phone number and even wesbites which will generate your fake indentity and street address  and other sorts of things. So if you are person who fills airdrops and don't want to do the research use available tools and don't provide real information. Simple as that.

Smart move on using separate emails. Don't use your personal emails unless you want to be spammed with ads. Also, never ever give personal information. I've heard on some posts that some airdrops even requires IDs like what the fuck. Big no to that.

They will now ask you password directly. They will ask you to signup for and update profile on their website (I am talking about trustless token airdrops). You will signup with an email and password. They may also ask for mobile number for OTP.

Now with this email and password that you used with signup, they will try to login on different exchange. If anyone using same email password as his exchnage  email id and password, your fund will be in blackhole.  ;D ;D

When you enter the crypto money world, we become a member of the sites for too many airdrop bounty. they are trying to get into my entire stock market. mail is constantly coming. My recommendation is to have a secure email for the stock exchanges and use it.

always use different passwords, emails  and active 2FA and never ever give your private key or any specific password to anyone or any airdrop registration form.

Thank you so much for the useful information. People need to understand that majority of Airdrops nowadays are scam. People are just too desperate and they just drop their details on any airdrop forms. Your information can be released to any third party without your concent.

 yes, I think some of the group collect all info like that, but hard to avoid and protect info.

It's obvious that we must be careful with our personal data. It's not recommend to use main email address for airdrop sign ups. It's very likely that many airdrops are selling email databases that they collected and later users are getting spam to their inbox. Some other basic advices - use unique passwords everywhere, protect your private key and never give it for airdrop, always enable 2FA on your exchange accounts.
But nowadays many people don't see nothing wrong to give even their passport/ID card scan to bounty/airdrop. Is it really worth to give such sensible personal information for little amount of tokens which maybe will be not listed on exchanges.

Well, those are the rules i have been following too, though I have had an encounter with two or more fake airdrops.

Some airdrops don't even have a website they simply create Google form and send msgs to different crypto groups in telegram and fb group and few other communities. They ask user to fill and submit that from to get free blablabla coin...  :'(

i joined a lot of Airdrop but none of them are asking for Email, Phone number or private key. if some ICO Airdrop asking me for Email i immediately refuse to fill :)

I've been doing airdrops quite actively since late last year when I started to really get involved in crypto.

I have to say that many are simply fake. Many twitter airdrops for instance are just fake accounts linked to fake websites (if that) and just want to accumulate followers so they can spam their referral links or get you to join their airdrop telegram group so they can spam their airdrop referral links there.

Sometimes it helps to check with the official coin account (on Twitter) or on their actual website to see if they are actually doing an airdrop or if its just a fake. The official coin account will usually put out a warning if there is a fake airdrop form circulating.

I already think of that, that's why any air drop asking your email then you need to sign up to their site for you to be eligible on their air drop.. .I click automatically the back button! It's better safe than sorry.

This is true of the entire industry now though.

So long as we continue to see scammers in the smoke and mirrors of ICOs, we'll see them try to phish out our info to use for their own benefit. Like the facebook thing, everyone KNEW their info was being recorded... but nobody wanted to acknowledge it, as soon as shit hit the fan EVERYONE wanted their privacy back.

Let's be clear people, you can't expect your info to go into a random website and be safe... do your due diligence or stay out.

scammers exist everywhere. from this not to where you will not leave and you will not escape. Just once a year, and airdrop shoots))) it is necessary for airdrop to have separate telegrams and a tweeter and an account and a purse with mail by itself. and then this garbage is very much

I do lot sign airdrop, later when spreadsheet released someone used my account i was shock not only once but more of them not only for airdrop also for bounty. Im afraid,next time be carefull guys, there are bad people around us,watching us

I joined ICO's before and until never had any issue to hack my account. I always give other information because I know giving real information online is not safe. So the best that you can do is to make other email and use a temporary password just keep your password on the notepad and save.
Giving a personal data is not safe unless if it's government because any time soon they can use your info to scam someone or use to hack your bank accounts. 
If you are receiving many ICO's it means they use your email for their promotion and sell the collected emails to ICO owners that they can use to promote via email.

They don't ask your password directly, but sometimes when you have to register on their website, they check whether you use your login/password combination anywhere else (for example, on exchange)
Most people are lazy when it comes to creating passwords, so they use the same word combinations on different sites.

Exactly, This is what they want. This is how many users claims that their money is moved from a exchange account to an unknown address.

Most recommended thing for this case is: Activation of 2FA authentication

Join airdrop or get free coin. I always use sub accounts to participate. Do not use your main account to join. The risk of losing your account is very high

it seems to me, that before Bounty, you must going to KYC,
so, how ICO put your data? what they can do with it?

Glad to be part of the crypto community, and thanks for creating this post.
Indeed airdrop (much like icos) most are definitely scams. For example I heard about BitcoinZ doing an airdrop on telegram and filled out a form through the telegram bot. Turns out it was a complete scammer and not from the official BitcoinZ.
However, I didn't have to enter any sensitive data such as passwords, private keys, etc. I imagine some airdrop scams could be worse..

Kyc is done by ICOs as well as shit airdrops. They can misuse your data. So never give them too much information. If any ico or airdrop is asking for too much sensitive data better to stay away.
Identify only true ico and airdrop and after making sure as much you can , invest with them

If an Airdrop requires more than your wallet address, you can be sure that its being used for marketing purposes.

That is why I joined only airdrops that are not asking lots of details like KYC.

Right!
Airdrop collect so much informations...
I just realize it now and it's too late...

What can I do?

And on the other hand, If you don't ask for KYC you also look like a scam.
So what's the right attitude ?
Don't know... If I had to run an Ico I would ask for KYC for sure!

sometimes I think that too. but the more dangerous are those who want to join a aidrop by using kyc. this is so unfair, they got your kyc and you just got some.

A very cost-effective form of data mining, I should say. First of all, before joining any airdrops or ICO, you must first do some form of background check to the ones conducting the said airdrop. They might not be a well-known figure of the community but having some idea on who this dudes are is a plus, considering that you will be entrusting your private data in exchanges of a few pennies/dollars. Also, in light of the recent bans and regulations in ICOs, it's best to join or look for ICOs that are registered or have complied to the government's rules and regulations. Most importantly, ask for any ToS or any agreement between you and the people conducting this. Airdrops are not free money: they need your info to send you marketing ads and whatnot when the time comes and who knows what will they use the info to as well.

Its basic knowledge when product is free you are payment which is your data in this case.
So many services doing that including google and facebook and twitter.
You can protect yourself.

Well, I've seen many airdrop created from scratch and ask for the basic data, with which in many could be used by these people to enter other projects using your identity to take advantage of them. It has happened to me that I want to enter some and they have already used my data and the truth is very disappointing and at the same time it is even dangerous. hey to be careful and a lot of caution where this information is given your data

Some mistakenly entered thier private keys instead of eth address when they fill up a form to join the airdrop and before joining in airdrops make sure if they entered the correct details that was ask.

I think we have to carefull what airdrop we sign in, and never give our password.

I honestly never considered that these guys could be storing passwords in plaintext form. If this were the case, even if the exchange had the integrity to not mess with your data, they're a hack away from all of your accounts being compromised. Definitely use unique passwords on everything.

Another thing to consider is that the overwhelming majority of these are scams, so it's usually not worth it to give them sensitive data when they ask for it. Don't risk thousands for a few pennies.

Most of the KYC requests are made from external companies.
So, no risk from any steal I guess. Am I right or just a dreamer ?  ???

I also didn't like airdrops. Because they didn't pay enough tokens, but sell our informations to other companies. I never get profit from ardps.

Thats true. Also they are collecting even your KYC. Be careful and dont add your personal data on SCAM websites.

good

Airdrop is a very lucrative matter. All of them jumped over it. But the companies that offer Airdrop offer little. All the rest of the companies collect information from participating only. Participate can not understand that they are giving their important information to them. They are deceived by these facts.
We should always exclude it. Because many times AirDrop provides web links which are likely to be a computer hacking.

UI could live with that and make some fake accounts to share with the airdrop teams, if only they were legit and really give coins to people. The problem with airdrops is most of them are scams. I even posted in a number of giveaway threads a few times and never got anything. Some forum members were asking people to PM the wallet addresses, and also did not send the promised coins.

 :D

So how can I know what good airdrop what bad

Always be careful when entering your ethereum address cause some may have problem with this.  Stay away on airdrops that ask your email or asking the password that you used on thier site they will use it to hack your email.

Good morning! And what about the airdrop - airdrop.luckchemy.com

It seems not bad

This isn't an important precaution. Some companies require their employees to use emails that include their name. Some people are also doing it to look more professional. Knowing someone's name or initials doesn't give a huge advantage to hackers or scammers. Names can be found everywhere and aren't treated like vulnerable data.

I feel my belly knot while reading through... I do lot of airdrop-means I do almost every airdrop that comes my way and I never think twice about my email or phone number. Thanks guys for the pointers... Cotton head like me need to take a breath and stop running after 'free'.

So there is a really easy solution. For airdrops just don't use your main email account or wallet address. If they ask for KYC, do not do unless you trust them highly...

This precaution is running hot these days as the hacker works are increasing day by day during the period of chaos

Such a important article .very helpful

first of all there's a dfference between airdrop and bounty. Airdrop you get free coins by simply joining their social media account basically twitter and telegram. Bounties is doing some marketing task for the project to get some coins.

So you're saying, stay away from airdrop coz it's collecting personal data so my question is why are you going to give your personal data for aidrop? Airdrop don't require KYC, some bouty does but mostly don't.

So what personal data are you referring? When sign up for airdrop rule of thumbs don't use personal social media account nor personal email and don't just give personal information for some tokens!

There is danger in every step in this market, because bad guys can get a lot of use of easy-go people. One should always think twice before giving some information to the public and try to remain private.

password? how? buy keylogger or something like that?
no password was asked, but forms were filled. There they can capture?

Dont worry about Airdrop, if you affraid about airdrop here is tips to avoid data collector

1. Dont use your premier email to register airdrop
2. Skip airdrop if they ask your identity (KYC) because for airdrop no need KYC.
3. Check developer team, make sure on linkedin they have more connection and have same project related background
4. Skip project if they ask all of your security account like Password, PIN or private key
5. dont use untrusted extension please check reviews before install.

What about Airdrops that only ask for ETH address and Telegram? Are that use a telegram bot. As long as the airdrop is reputable and isn't a scam, they usually are good to sign up for.

I've encountered a ton of google forms and other forms that claim to airdrop popular currencies, like EOS, TRX, etc. These are definitely scams that solicit your data.

If there was one thing to never do, that would be to NEVER give your wallet's private keys. Or send Crypto to a random address and expect them to send x10 back.

It is best to participate in the airdrop with additional accounts, and not with the main accounts.  ;)