How to set up a burner wallet for airdrop hunting

Why a burner at all

Airdrop hunting means connecting a wallet to software you have not used before. Some of it is audited and well known; much of it is new, unaudited and a few days old. Even honest teams ship bugs, and dishonest ones rely on you signing something you did not read. A wallet that holds only a small balance turns that risk from "everything" into "this budget".

There is a second reason that is easy to miss: airdrops are tied to addresses, so the address you use becomes part of a public history. A dedicated address keeps your farming activity, and any mistakes in it, separate from the address that holds your long-term assets. The guidance on ethereum.org's security page pushes the same direction: keep recovery phrases secret, double-check what you sign, set spend limits instead of unlimited approvals and consider a hardware wallet for the keys that matter.

The three-wallet model

Think in roles rather than brands. Each role has different rules, and the rules are what protect you.

If the difference between the burner and the exchange account is unclear, read custodial vs non-custodial first; the two behave very differently when something goes wrong.

Setup in eight steps

The order matters: the browser profile comes before the wallet, and the budget comes before the funding.

1. 1

   Decide what the burner is for

   Write down one sentence: which campaign, which network, and the maximum amount you are willing to lose. If you cannot name both, you are not ready to connect anything.

2. 2

   Create a separate browser profile

   Use a new browser profile (or a different browser) that contains no saved passwords, no password-manager extension and no other wallets. Install only one wallet extension in it, from the wallet's official site.

3. 3

   Generate a brand-new wallet

   Create a new wallet with a fresh recovery phrase. Do not derive it from your main seed and never import your main phrase. Treat "add another account" under the same seed as a convenience, not as isolation, because one phrase controls all of them.

4. 4

   Back up the phrase offline

   Write the phrase on paper, or on metal if you plan to keep the wallet for a long time. Never photograph it, store it in cloud notes or paste it into any website.

5. 5

   Fund it with only the budget you wrote down

   Send the network's gas token plus the small amount the task needs. Send a test amount first and confirm it arrives on the right network before sending the rest.

6. 6

   Verify every site before connecting

   Reach the dapp from the project's official documentation, not from a search ad, a message or a post reply. Compare the domain character by character and read each signature request in full.

7. 7

   Keep a log of what you sign

   Record the date, site, network and action for each transaction. The log helps with taxes, with debugging and with spotting an approval you did not intend.

8. 8

   Sweep and clean up

   After a claim, move the proceeds to a wallet you control more strictly, revoke token approvals the burner granted, and retire the wallet when the campaign ends.

Funding without regret

Funding is where people undo their own safety work. Three rules cover most of it.

1. Decide the number first. Write the amount before you open the sending app. Anything above it needs a reason you can state in one sentence.
2. Send a test, then the rest. Transfers are irreversible. A small first transfer confirms that the address and the network are right; the cost of the test is trivial compared with a wrong-chain transfer.
3. Know what a funding trail reveals. If you withdraw from an exchange to the burner, the exchange knows which verified account sent it. That is acceptable for safety and wrong for privacy, so do not treat a burner as anonymous. If privacy matters to you, that is a separate topic with its own legal and practical considerations.

Mind the gas token. A burner with tokens but no native currency cannot sign anything, including a revoke, so keep a little extra on the network you use. On busy networks, fees can be material relative to a small budget; that is part of the cost of any campaign and one reason we describe expected costs in each listing.

Habits that matter more than tools

The tool is only as good as the habit around it. These are the behaviours that decide whether a burner actually protects you.

Of these, reading signature requests is the one that most often separates a harmless interaction from a drained wallet. A claim should ask you to sign a claim; a request to approve a token you did not intend to trade, or to sign an opaque message with no readable description, is a reason to stop. The scam guide covers the signature patterns drainers use in detail: how airdrop scams work.

Five mistakes that defeat the purpose

Most burner-wallet losses are not clever hacks; they are shortcuts taken on a busy evening. These are the ones we see described most often, and each has a simple counter.

Choosing the wallet software

We deliberately do not rank wallets: the right choice depends on the network. A few questions narrow it down without brand loyalty. Does the wallet support the network you need natively, so you do not have to paste in an RPC address from a blog post? Does it show decoded transaction details, so that a request reads as "approve this token for this contract" rather than a block of hex? Does it warn about known phishing domains? Is it open to inspection, and is the download page the one linked from the project's own documentation?

For Ethereum-compatible networks, a browser-extension wallet is the usual choice; Solana, Cosmos and TON each have their own wallet families, covered on the ecosystem pages. A hardware wallet is excellent for the cold tier. For the burner, convenience matters more, which is exactly why its balance must stay small. Whatever you choose, install it only from the link in the vendor's official documentation, as the MetaMask guidance above advises, and ignore extension-store look-alikes.

What a burner does not do

• It does not protect a compromised computer. If malware reads your clipboard or screen, a separate wallet in the same system is exposed. A separate browser profile reduces risk; a dedicated device reduces it further.
• It does not make you anonymous. Addresses are public, and funding and withdrawal routes can link them to you.
• It does not make multiple-wallet farming acceptable. Projects publish rules against it and filter it. Arbitrum's documentation, for instance, describes removing points from some activity patterns and excluding wallets flagged as Sybil addresses (Arbitrum Foundation). A burner is a safety tool, not a multiplier.
• It does not undo approvals. Approvals remain until you revoke them. Revoke.cash explains that an approval lets a contract spend your tokens at any time, which is why a compromised or malicious contract is dangerous (Revoke.cash).

Cleanup and retirement

When a campaign ends, close it properly. Move any proceeds to the wallet that is meant to hold them. Then revoke the approvals the burner granted: for fungible tokens that means setting the allowance back to zero, and for NFT collections it means turning off the blanket approval, both of which you can do with an approval-management tool, as our revoke guide shows step by step.

Finally, decide whether the burner has a future. A wallet that has interacted with many unfamiliar contracts carries a long list of approvals and a long tail of risk. For most people the clean answer is to retire it and create a new one for the next campaign; the cost is a few minutes and a small gas payment, and the benefit is a fresh list. Keep the phrase offline until you are sure there is nothing left on the wallet, and then keep it a little longer, because late claims occasionally appear.

Written and fact-checked by the airdrop.promo Editorial Team. Method: how we verify. Spotted an error? contacts@airdrop.promo. Educational content only, not financial or tax advice.