Scam tokens and NFTs
Why strangers send you tokens and NFTs, how Morsel hides spam and marks verified tokens, and what to do with things you didn't buy.
Anyone can send anything to your address. Scammers use that: they airdrop tokens and NFTs whose names, images or QR codes lure you to a site that drains wallets. They can't take anything by sending it. The danger is only in what you do next.
The rule
If you didn't buy it, don't touch it. Don't open its links, don't scan its QR code, don't try to sell it, and don't "claim" anything it offers.
What Morsel does with NFTs
Morsel hides collectibles it can't verify, so they never clutter your wallet:
- On Solana, only collections verified by Helius, a major Solana data provider, are shown.
- On Cookie Chain, Morsel shows verified collections and creators, and filters the rest with spam rules.
Hidden NFTs aren't deleted. They're tucked under a quiet Hidden ([n]) row at the end of your collectibles, along with any you hid yourself. If something you own is hidden by mistake, tap Unhide. See Hidden and unverified NFTs.
What Morsel does with tokens
- Badges. A blue Verified tick or a grey Known ecosystem token tick marks tokens Morsel knows. No badge means unverified. Not every unverified token is a scam, but every scam is unverified.
- Unverified on swap. Confirm Swap shows an Unverified chip next to the token's address.
- Warnings in Manage tokens. Tokens that look suspicious carry an amber warning triangle. Hide them.
- Mint and freeze authority on a token's page: Revoked in green means nobody can create more of it or freeze yours. An address in amber means someone still can.
Clean up
- Hide a token: Manage tokens on Home, then turn it off. See Tokens and Manage tokens.
- Hide a collection: the manage icon in the Collectibles header, or Hide collection on an NFT.
- Hiding is enough. It never moves anything and you can undo it.
Dust and address poisoning
Strangers also send tiny amounts of COOK or SOL from addresses made to look like yours or your contacts'. The goal is for you to copy their address from your history next time. Morsel hides most of this dust in Activity, and Send warns This looks like a saved address, but isn’t. Always pay from your contacts.