It’s 1 a.m. and you’re three tabs deep into a project’s blog post titled “Eligibility Criteria,” trying to figure out if you’re actually getting free tokens or if you just wasted six months bridging tiny amounts of ETH for nothing. The post throws around terms like Sybil score, wallet age, and minimum interaction threshold like everyone already knows what they mean. You don’t. Most people don’t. And that gap between “here’s our eligibility criteria” and “here’s what that actually means for you” is exactly where a lot of confusion, and honestly a lot of scams, live.
So let’s actually break it down. Not the marketing version. The real one, with real numbers, real examples, and the specific scam patterns that hide behind fake versions of these same criteria.
What Airdrop Eligibility Criteria Actually Are
Airdrop eligibility criteria are the rules a protocol sets to decide which wallets qualify for a token distribution. That’s it. But underneath that simple definition sits a whole scoring system, usually built to reward genuine early users while filtering out bots, wash traders, and people who opened a wallet the day before the snapshot just to farm free money.
Every protocol writes its own rulebook. But almost all of them pull from the same handful of criteria categories. Once you know these categories, you can read any project’s eligibility post and actually understand what’s being measured, instead of just hoping you did enough.
The Core Criteria Categories Protocols Actually Use
Wallet age and history. Newer wallets get flagged or excluded outright. Arbitrum’s 2023 airdrop, for instance, required activity before a specific cutoff date, and wallets created purely to farm the snapshot got filtered out during the eligibility check. Age alone isn’t proof of legitimacy, but it’s the first, cheapest filter every team runs.
Transaction count and volume. This measures how much you actually used the protocol, not just whether you touched it once. A single $5 swap looks very different from fifty swaps totaling real volume over several months. Uniswap’s original UNI airdrop rewarded anyone who’d ever swapped or provided liquidity, but later criteria across the industry got stricter, weighting volume and frequency far more heavily.
Minimum balance and holding period. Some criteria require you to hold a minimum token or asset balance for a set duration, not just briefly touch it around snapshot time. This is designed specifically to punish “snapshot tourists” who deposit funds right before a snapshot and pull them out an hour later.
Protocol-specific task completion. Bridging assets, minting an NFT, voting on a governance proposal, deploying a contract. LayerZero’s 2024 airdrop leaned heavily on this, scoring wallets across dozens of specific on-chain actions rather than one simple threshold.
Governance participation. ENS famously rewarded people based partly on how long they’d held a domain and whether they’d engaged with the DAO. Governance-weighted criteria reward long-term stakeholders over drive-by users.
Sybil and anti-farming scoring. This is the criterion most people misunderstand. Protocols run clustering analysis to detect wallets that behave identically, transact with each other in patterns, or were funded from the same source address. Get flagged as a Sybil cluster and your entire wallet group can be zeroed out, regardless of how much genuine activity you did.
Geographic and KYC exclusions. Plenty of projects explicitly exclude US-based wallets or require KYC verification before claiming, largely for regulatory reasons tied to ongoing SEC and CFTC guidance through 2026. Ignoring this criterion is one of the most common reasons eligible-looking wallets get rejected at the claim stage.
Snapshot timing. Every criterion above only counts up to a specific block height or date, announced or unannounced. Activity after the snapshot literally does not exist as far as eligibility is concerned, no matter how much you interact with the protocol afterward.
Eligibility Criteria Types Compared
| Criterion Type | What It Measures | Example Protocol | Easy to Fake? |
|---|---|---|---|
| Wallet age | Time since first transaction | Arbitrum | Somewhat, with aged wallet purchases |
| Transaction volume | Real usage depth | Uniswap | Hard at scale |
| Task completion | Specific on-chain actions | LayerZero | Moderate, bots automate this |
| Governance activity | DAO votes, proposals | ENS | Hard, requires real engagement |
| Sybil score | Wallet clustering patterns | Most 2025-2026 airdrops | Very hard once flagged |
| KYC/geography | Legal compliance | Varies by jurisdiction | Not fakeable, binary pass/fail |
Where Fake Eligibility Criteria Turn Into a Scam
Here’s the part that actually costs people money. Scammers know that “check your eligibility criteria” is now a completely normal thing to see in your Discord or on X. So they copy the format exactly, and use it as the wrapper for a fake airdrop scam.
The pattern usually starts with a compromised account, not a stranger’s DM. A Discord admin’s session token gets stolen, often through a fake CAPTCHA verification bot or a malicious authorized app, and the attacker posts from inside a server people already trust. A widely documented June 2026 case, published by security researcher Ringmast4r after their own Discord crypto hack, traced the infrastructure behind one such operation to a syndicate running over a thousand domains and pulling an estimated 30 to 60 million dollars a year from users who trusted exactly this kind of “verify eligibility” message.
Once you click through, the fake criteria page doesn’t ask for a password. It asks you to connect your wallet and sign something, usually framed as “verify eligibility” or “claim your allocation.” That signature is where the real damage happens. Many of these pages exploit Uniswap’s Permit2 contract, a widely used token approval standard, by requesting a malicious signature Permit2 grant that hands the attacker unlimited, gasless spending rights over your tokens. You don’t send anything. You sign, and the drain happens later, quietly, sometimes days afterward. This exact technique is called ice phishing crypto in security research, because unlike traditional phishing it never asks for your seed phrase at all, just a signature that looks routine.
CertiK tracked over 311 million dollars lost to phishing in January 2026 alone, with a single social engineering incident accounting for 284 million of that. Scam Sniffer separately measured a 207 percent month-over-month jump in signature phishing losses that same January, totaling 6.27 million dollars across 4,741 victims, and noted something worth sitting with: victim count actually fell while stolen value rose, meaning attackers are increasingly targeting bigger wallets rather than casting a wide net.
Real vs Fake Eligibility Criteria: The Signal Table
| Signal | Real Criteria | Fake Criteria |
|---|---|---|
| Where it’s posted | Official docs, verified project X/Twitter | DM, unverified Discord ping, fake mirror site |
| What it asks for | Wallet address to check, nothing to sign | Wallet connection plus a signature request |
| Urgency | No deadline pressure, or a clearly announced one | “Claim in the next hour” countdown |
| Domain | Matches the project’s official domain exactly | One character off, or a .xyz/.claim lookalike |
| Snapshot reference | Specific block height or announced date | Vague, or references a snapshot that “just happened” |
How to Verify Eligibility Criteria Safely
Before you connect a wallet to anything claiming to check your eligibility, run through this:
- Go to the project’s official domain directly by typing it yourself, never through a link someone sent you
- Cross check any Discord announcement against the project’s verified X account before trusting it
- Use a read-only wallet checker where possible instead of connecting your main wallet
- Read exactly what you’re signing. If a signature request mentions Permit2 or unlimited allowance, stop and close the tab
- Revoke old token approvals periodically using a tool like Revoke.cash, since a malicious permit signed months ago can still be exploited today
- Never rush because of a countdown timer. Real snapshots already happened before you’re reading about them
Airdrop Eligibility and Indian Tax Rules
If you do turn out eligible and claim tokens, the tax event happens the moment you receive them, not when you sell. Under Section 115BBH, airdropped tokens are taxed at a flat 30 percent on their fair market value at receipt, with Section 194S applying a 1 percent TDS on qualifying transfers when you later move or sell them. Worth tracking the value on the exact claim date, since that’s the figure your tax filing will need.
FAQ
What’s the most common reason a wallet gets rejected despite meeting the criteria? Sybil clustering. Even genuine users sometimes get flagged if they funded multiple wallets from the same source address or interacted with the protocol in an identical pattern to other wallets.
Can eligibility criteria change after a snapshot? The snapshot itself is fixed, but a project can and often does adjust scoring weights or add exclusions before the final claim list is published.
Is it safe to check eligibility on a project’s official site? Generally yes, if it’s genuinely their domain and the check only requires entering a wallet address rather than connecting and signing anything.
Why do some real airdrops still ask for a signature? Some legitimate claim portals require a signature to prove wallet ownership before releasing tokens. The difference is scope. A real claim signature is narrow and specific. A malicious one requests broad or unlimited permissions.
