$12.5B
FTC-reported fraud losses in 2024
FTC says consumers reported losing $12.5 billion to fraud in 2024.
Fake airdrop scams/Twitter
layer-2 bridge exploit airdrop scam
Fake airdrops impersonate layer-2 scaling solutions and direct users to fraudulent bridge interfaces that steal deposited funds instead of bridging them to another network.
“airdrop scam”
↑ 459%Key indicators
Usually targetsDeFi participants
Often hitsFreelancers and contractors
Common regionUnited States
Last updated2026-04-04
Estimated impact
$1.4K
median reported loss
Typical range$90 – $9.0K
Recovery rate~15%
Scam breakdown
1
Scammers create phishing sites mimicking popular layer-2 bridge interfaces and announce fake airdrops that require users to bridge funds
2
Users deposit ETH or other tokens into the fake bridge contract, expecting them to appear on the L2 network along with airdropped tokens
3
The deposited funds are sent directly to the scammer wallet and never appear on any layer-2 network
What to do first
Use bridge interfaces only from the official project website and verify the URL through multiple trusted sources
Related terms
fake bridge airdropL2 phishing scambridge drain attackFake airdrop scamsTwitterStableDeFi participantsCrypto usersDevelopersFreelancers and contractorsTech workers and developersUnited StatesSouth KoreaGermanyfake bridge airdropL2 phishing scam
Real-world example
How this scam plays out in practice
Based on reported patterns. Names and details are illustrative.
The setup
Rebecca, 35, a defi participants, encountered what appeared to be a legitimate fake airdrop scams situation while using Twitter. Scammers create phishing sites mimicking popular layer-2 bridge interfaces and announce fake airdrops that require users to bridge funds
Step 2
What happened next was calculated: Users deposit ETH or other tokens into the fake bridge contract, expecting them to appear on the L2 network along with airdropped tokens
Step 3
The pressure escalated quickly: The deposited funds are sent directly to the scammer wallet and never appear on any layer-2 network
The outcome
Rebecca realized something was wrong when airdrop requires bridging assets to a new layer-2 network through an unfamiliar bridge interface. By that point, significant damage had already been done — money sent, personal information shared, or trust exploited.
The lesson
Use bridge interfaces only from the official project website and verify the URL through multiple trusted sources Rebecca's experience shows why airdrop requires bridging assets to a new layer-2 network through an unfamiliar bridge interface and the bridge url does not match any official layer-2 project domain are the clearest early warning signs.
How to identify it
- Airdrop requires bridging assets to a new layer-2 network through an unfamiliar bridge interface
- The bridge URL does not match any official layer-2 project domain
- Promotion comes from accounts impersonating Arbitrum, Optimism, zkSync, or similar L2 projects
- Pause before paying, clicking, or sharing information. Scammers rely on speed.
- Verify the sender, company, or agency using a phone number or website you already know is legitimate.
- Treat secrecy, urgency, and off-platform payment requests as strong scam signals.
What to do now
- ✓Use bridge interfaces only from the official project website and verify the URL through multiple trusted sources
- ✓Be skeptical of any airdrop that requires you to deposit or bridge funds as a prerequisite
- ✓Check the bridge contract address on Etherscan to verify it matches the official contract listed in project documentation
What to save before reporting
- ✓Save the message, profile, phone number, email, or URL that was used.
- ✓Keep payment confirmations, receipts, and account alerts before you dispute or delete anything.
- ✓Write down the timeline while the details are still fresh.
How big is this problem
You are not alone — this scam affects millions of people.
These numbers come from government agencies and official reports. If you have been affected, know that this is a widespread problem — not something that only happens to careless people.
FTC 2024 fraud losses
Imposters
Most common FTC fraud category in 2024
FTC says imposter scams remained the most commonly reported fraud category in 2024.
History and evolution
- This scam family tends to persist because the social-engineering pressure works even when the exact scripts, platforms, and payment methods change.
- The specific packaging evolves over time, but the core pattern usually stays the same: create urgency, control the channel, and push action before verification.
- Cross-chain bridge exploits and phishing attacks accounted for over 2 billion USD in losses in 2022, making bridges one of the highest-risk areas in DeFi
Recovery and follow-up
- ✓Save the messages, receipts, account alerts, and transaction details before you block or delete anything.
- ✓Report the scam through the official platform or government channel that best matches where it happened.
- ✓Use bridge interfaces only from the official project website and verify the URL through multiple trusted sources
- ✓Be skeptical of any airdrop that requires you to deposit or bridge funds as a prerequisite
- ✓Check the bridge contract address on Etherscan to verify it matches the official contract listed in project documentation
Why this pattern keeps working
Even when the story changes, most scams still use the same pressure pattern: urgency, authority, and a request to move money or data fast.
Cross-chain bridge exploits and phishing attacks accounted for over 2 billion USD in losses in 2022, making bridges one of the highest-risk areas in DeFi
OpenScam research
Where to report it
If you have been targeted by this scam, reporting it helps authorities track the pattern and protect others. United States has dedicated agencies that handle fraud reports.
ReportFraud.gov
Federal Trade Commission
Central U.S. consumer fraud reporting portal.
File an IC3 complaint
FBI Internet Crime Complaint Center
FBI portal for internet-enabled crime reports.
Start identity theft recovery
IdentityTheft.gov
Official U.S. identity theft recovery plan builder.
Explore further
Understand the bigger picture
Who is most at risk
Who this scam targets
Primary targets
DeFi participants, Crypto users, Developers
Geographic concentration
United States, South Korea, Germany
Primary channel
Twitter — Fake airdrop scams
Why this group is vulnerable
DeFi participants are particularly vulnerable because this scam exploits trust in familiar brands, authority figures, and time-sensitive decisions. The ongoing nature of reports suggests that awareness among this demographic remains low.
Sources and methodology
How we verify this information
OpenScam tracks scam patterns using a combination of government consumer protection databases (FTC, IC3, Action Fraud), platform-specific fraud reports, and verified consumer complaint data. Each entry is cross-referenced against at least two independent sources before publication.
Severity ratings are based on financial impact potential, reversibility of damage, and volume of reports across multiple reporting channels. Trend velocity reflects the rate of change in report volume over the most recent 90-day window.
This page was last verified on 2026-04-04. Red flags, recovery steps, and reporting resources are reviewed quarterly against current agency guidance.
Evidence and indicators
- Cross-chain bridge exploits and phishing attacks accounted for over 2 billion USD in losses in 2022, making bridges one of the highest-risk areas in DeFi
Source notes
- OpenScam research
Frequently asked questions
Common questions about layer-2 bridge exploit airdrop scam
How does the layer-2 bridge exploit airdrop scam work?+
Scammers create phishing sites mimicking popular layer-2 bridge interfaces and announce fake airdrops that require users to bridge funds Users deposit ETH or other tokens into the fake bridge contract, expecting them to appear on the L2 network along with airdropped tokens The deposited funds are sent directly to the scammer wallet and never appear on any layer-2 network
What are the warning signs of layer-2 bridge exploit airdrop scam?+
Airdrop requires bridging assets to a new layer-2 network through an unfamiliar bridge interface The bridge URL does not match any official layer-2 project domain Promotion comes from accounts impersonating Arbitrum, Optimism, zkSync, or similar L2 projects
What should I do if I encounter layer-2 bridge exploit airdrop scam?+
Use bridge interfaces only from the official project website and verify the URL through multiple trusted sources Be skeptical of any airdrop that requires you to deposit or bridge funds as a prerequisite Check the bridge contract address on Etherscan to verify it matches the official contract listed in project documentation
Who is most at risk for layer-2 bridge exploit airdrop scam?+
This scam primarily targets DeFi participants, Crypto users, Developers. It is most commonly reported in United States, South Korea, Germany and typically appears on Twitter.
Is layer-2 bridge exploit airdrop scam still active?+
layer-2 bridge exploit airdrop scam is currently on our watch list. It has been reported across US, KR, DE. Last updated 2026-04-04.
Related scams
Similar scams to watch out for
Employment fraud
↑ 80%Freelance project unlock fee scam
A freelancer wins a project but is told they must buy a platform license, ID badge, or portfolio review to start.
What to do first
Do not buy access tools or badges to start freelance work.
Targets
Freelancers
Seen in
Global
Employment fraud
↑ 80%Coding test malware job scam
A fake tech employer sends a take-home exercise or coding test that installs malware or steals credentials from the candidate's device.
What to do first
Open interview files in a sandbox and never disable device protections for a candidate task.
Targets
Developers
Seen in
Global
Investment scams
↑ 19%AI trading bot dashboard scam
A platform promises AI-managed profits, shows a convincing dashboard, and keeps asking for larger deposits while withdrawals quietly fail.
What to do first
Attempt a small withdrawal before trusting any AI or automated trading platform.
Targets
Retail investors
Seen in
Global
Help someone avoid this scam.
Scammers succeed because people do not talk about it. If you or someone you know has been affected, there is no shame in it — it happens to millions of people every year. Share this page with friends and family so they know what to look for.