Random tokens appearing in your wallet that you never asked for. Some are harmless junk. Others are traps — the token contract is coded so that when you try to sell or interact with it, you’re redirected to a phishing site, or you unknowingly sign a malicious approval.
The rule: don’t interact with tokens you don’t recognize. Don’t try to swap them. Don’t click any links in the contract or token name. Most modern wallets (MetaMask, Phantom) have token-blocking features — use them.
