Fake Rabby wallet airdrop page rabbysend.site asks visitors to connect a wallet to 'claim', MalwareTips warns
In a post dated October 23, 2026, MalwareTips warns about a Rabby-branded airdrop scam at rabbysend[.]site, which is not the Rabby wallet's real website, rabby.io. According to MalwareTips, a capture of the page shows…
- First reported
- Reports
- 1
Source: malwaretips.com · published
What happened
In a post dated October 23, 2026, MalwareTips warns about a Rabby-branded airdrop scam at rabbysend[.]site, which is not the Rabby wallet's real website, rabby.io. According to MalwareTips, a capture of the page shows an advertised airdrop with two buttons inviting visitors to connect a wallet and claim the reward, and the page has been reported as a cryptocurrency-drainer lure. MalwareTips says it did not connect a funded wallet or sign anything, so it does not claim specific post-connection requests. It advises not to proceed, to treat wallet approvals and signatures as possibly authorizing more than a connection, never to reveal a recovery phrase, and to check wallet history and revoke approvals if already interacted.
How the scam works
Fake airdrop pages copy a wallet's name and style and offer free tokens to anyone who connects. The page MalwareTips captured shows just an airdrop heading and two buttons, 'Connect Wallet' and 'Claim Airdrop', so the next step feels simple. A wallet selector showing familiar wallet names can look like ordinary crypto infrastructure, but MalwareTips says it isn't an endorsement of the site. After connecting, a drainer page can ask for a signature or token approval that lets it move assets, sometimes presented as a 'claim' transaction.
MalwareTips explains that viewing the page does not prove funds moved, and connecting does not automatically grant every spending permission. However, approvals or signatures may authorise far more than a connection, and a revealed recovery phrase compromises the whole wallet. The right response depends on what was actually approved, so check your wallet history and a blockchain explorer rather than the promotional page. Rabby is impersonated and is not involved.
Source
MalwareTips, "Rabby Airdrop Scam Exposed: Fake Rewards And Dangerous Wallet Approvals" (published 23 October 2026).
Red flags
- An airdrop page on a domain such as rabbysend.site instead of rabby.io.
- 'Connect Wallet' and 'Claim Airdrop' buttons with no other details about the reward.
- A signature or approval request that doesn't clearly match a simple claim.
- Requests for a recovery phrase to receive tokens.
If you were targeted
- 1Don't connect your wallet to rabbysend.site or sign anything there.
- 2Never type a recovery (seed) phrase or private key into a website or give it to 'support'.
- 3Check announcements only through the project's official website or accounts that you open yourself.
- 4If you connected and approved something, revoke the token approval with your wallet's or the network's approval tool and move remaining assets to a new wallet if you're unsure what you signed.
- 5If you disclosed a recovery phrase, treat the wallet as compromised and move assets to a new wallet created with a new phrase.
- 6Report the site to your wallet provider and, in the U.S., to the FBI's IC3 at ic3.gov.