← Back to Fix archive
Security Recovery
How to Identify a Wallet Drainer Transaction
Learn common signs of wallet drainer activity in transaction history.
Quick answer
What this usually means
Wallet drainers often involve suspicious approvals, permit signatures, rapid token transfers, or interactions with unknown contracts.
Common causes
Why it happens
- A fake claim page requested approval or signature.
- A malicious contract used an existing allowance.
- The seed phrase was exposed.
- The wallet signed a dangerous message.
Fix path
What to check first
- Check the suspicious transaction hash.
- Review token transfers and spender contracts.
- Look for approvals before the drain.
- Check whether multiple assets moved quickly.
- Preserve evidence before closing pages or chats.
Safety note
Do not make the problem worse
- Do not interact with the drainer contract again.
- Do not pay recovery fees to strangers.
- If the seed phrase was exposed, create a clean wallet.