The question I have is, how do you activate the malicious contracts?....I'm asking this because I wanna try to import one of those tokens (I found a namesake on CMC and want to see if it's the same token present in my wallet), so, importing the token is enough to activate the malicious contract (I don't want to accidentally activate it and let it destroy my account)?
As far i know, importing any tokens in your wallet won't active the contract until you're trying to sell on dex and make approval transection into that dex. So just ignore those fake/scam tokens like @ryzaadit said. Also, don't submit your private key or seed phrase into any unknown dex/AMM as we don't need to submit the access point to any defi projects to interact and we can do transections using metamask or other dapp wallet.
One more thing for those who wanna reduce the spending amount for any smart contract on ethereum, they can do this on
Etherscan's Token Approval page using metamask. Basically, we provide unlimited access to any smart contract for spending any tokens from our wallet whenever we make an approval transection to do trade/swap into dex/amm and it's better to set it limited so that fake projects can't drain funds from our wallet by using their smart contract. Hopefully, bscscan and polygonscan will have the samething as those are also products from etherscan team.