A fake NFT mint-fee scam tricks you into connecting a crypto wallet (MetaMask, Phantom, Coinbase Wallet, Ledger Live browser) to a malicious site that looks like an OpenSea, Blur, Magic Eden, or “official” project mint page. Instead of a normal mint, the site requests unlimited token approvals or a signature that drains NFTs and coins. A related script charges an upfront “mint,” “whitelist,” or “gas” fee by card or wire to a fake studio that never delivers art.
This is adjacent to crypto giveaway scams (send first to receive more) and crypto recovery scams (pay after a loss). The mint variant often hits while you still hold assets and uses wallet-connect or approve prompts rather than a celebrity livestream.
How the script works
- A Discord/Twitter/Instagram ad, Google ad, or DM shares a mint URL that is one letter off from the real project.
- You connect the wallet. The site asks you to sign “List for mint,” “Claim airdrop,” or “Verify wallet.”
- The signature is a setApprovalForAll or similar permission—or a blind signing request that moves assets.
- Assets leave for the attacker’s address; the “minted” JPEG is worthless or never appears.
- Advance-fee variants skip the drainer and simply take a Visa/Mastercard “mint deposit” on a cloned checkout, then vanish.
| Tell | Why it matters |
|---|---|
| Mint link only in a DM or boosted ad | Official mints are announced on the project’s verified channels |
| Unlimited approval for all NFTs in a collection | Classic drainer permission |
| “Pay gas on this card form first” for an Ethereum mint | Real L1 mints pull gas from the wallet, not a random Stripe clone |
| Countdown + fake OpenSea verify badge on a new domain | Social proof is forged |
| Support asks for seed phrase to “whitelist you” | Instant wallet empty |
Worked example
Riley sees a Discord ping for “Azuki Season 2 mint - OpenSea verify.” The link is opensea-mint[.]app (not opensea.io). Riley connects MetaMask and signs what looks like a mint. Within minutes, two NFTs and the ETH balance move out. A Telegram “OpenSea Recovery” account then offers to reverse the TX for a 0.4 ETH fee—the second scam.
Riley’s next steps: disconnect sites in the wallet, revoke approvals via a reputable revoker when safe, move remaining assets to a new wallet seeded offline, document TXIDs, report to FTC and IC3, and ignore recovery DMs. Phishing hygiene: Phishing and account takeover. Consumer patterns: Credit and debt scams.
Mint fee vs giveaway vs recovery
- Fake mint / wallet-connect: connect and sign; approvals or blind signatures drain the wallet—or a card “mint fee” is stolen without a chain TX.
- Giveaway / doubling: send coins to an address to “receive more.”
- Recovery: targets people who already lost assets; demands fees or seeds.
Gift cards and prepaid debit sometimes appear as the “whitelist fee” rail (Gift cards and prepaid debit risks). Romance-to-fake-trading funnels can also push fake NFT “investment clubs” (Romance and pig-butchering scams).
What real mints look like
OpenSea, Blur, Magic Eden, and major projects publish mint URLs on verified social accounts and official sites. Gas is paid from the wallet on-chain. No legitimate marketplace needs your 12- or 24-word seed phrase. Hardware wallets (Ledger, Trezor) still require you to read the permission on the device—blind-signing a drainer still loses assets.
Checklist
- Type mint URLs from official project sites; do not click boosted-ad or DM links.
- Read every wallet permission; reject unlimited setApprovalForAll you did not intend.
- Never enter a seed phrase on a website to “verify” a mint.
- Prefer hardware-wallet prompts you understand; abort unclear blind signatures.
- If drained, revoke approvals from a clean wallet workflow, report TXIDs, refuse recovery DMs.
- Treat card-only “mint deposits” to unknown studios like any advance-fee fraud.
Telegram airdrop bots and VIP groups that end in the same wallet-drain pattern: Fake Telegram wallet-drain scams.
Educational only. Not legal advice, investment advice, or a fraud-recovery service. Scam scripts change; use FTC, IC3, and official wallet/marketplace support for current steps.