Phishing

Phishing is a scam in which an attacker poses as a trusted company or project, by email, message, ad or fake website, to trick people into handing over passwords, seed phrases or wallet approvals. The FTC's guide says phishing emails and texts try to steal passwords and account numbers by claiming suspicious activity, a problem with your account or an offer of free stuff, and that scammers launch thousands of such attacks every day. ethereum.org says crypto phishing links lead to imitation websites that ask for your seed phrase, a password reset or a payment in ETH, or get you to install malware.

A fake airdrop claim page is phishing, and the wallet drainer behind it does the stealing. Arbitrum's airdrop page named one official site, arbitrum.foundation, and revoke.cash advises double-checking URLs and bookmarking the sites you use often. See airdrop scams.