Guide · Updated

Telegram Mini-App Airdrops: What to Check Before You Connect a Wallet

Are Telegram mini-app airdrops safe? What a mini-app can see, what connecting a TON wallet allows, and how fake mini-apps and checkers drain wallets.

Tap-to-earn games, “mining” apps and quest boards inside Telegram have pulled millions of people into crypto airdrops. You open a bot, press “Play”, and a full app opens inside Telegram. At some point it asks you to connect a wallet.

Most of the risk sits in two places: what you connect, and whether the mini-app is the real one. This guide covers both. It doesn’t predict which airdrops will be worth anything; nobody can, and many end up worth very little. It’s part of our guide to finding good crypto Telegram channels.

What a mini-app is

A Telegram Mini App is a web app that opens inside Telegram, launched from a bot, a button or a link. Technically it’s a website running in a window in the Telegram app. That matters, because it means:

  • Anyone can build one. Telegram doesn’t vet the content of every mini-app in advance.
  • It behaves like any website: it can show you anything, including a fake wallet connection screen.
  • It’s tied to a bot. The bot’s @username is how you know which app you’re in.

What a mini-app can see

When you open a mini-app, Telegram passes it some basic information about you, such as your Telegram user ID, name, username and language setting. It’s used to log you in without a password.

Other things need your permission, and the app has to ask:

  • Your phone number. Telegram shows a prompt asking whether to share it. For an airdrop game, there’s rarely a good reason to say yes.
  • Sending you messages. The bot may ask permission to message you. That’s usually harmless, but it’s also how spammy “your reward is waiting” messages arrive.
  • Location, biometrics, home-screen shortcuts and similar device features are each separate requests.

A mini-app can’t read your chats or your contacts, and it can’t see your wallet unless you connect one.

Connecting a wallet: what it allows

Most crypto mini-apps on Telegram use TON Connect to link a TON wallet (such as Keeper, previously called Tonkeeper, or another TON wallet). The flow is:

  1. The mini-app asks to connect.
  2. Your wallet opens and shows the request.
  3. You approve the connection.

Connecting shares your wallet address with the app. On its own, that doesn’t let the app move your funds. What moves funds is a transaction you approve later. Each time the app wants to send something, your wallet should open again and show what’s being sent and where.

This is where drains happen. A malicious app asks you to “verify your wallet”, “pay a small fee to claim”, “activate your airdrop”, or “confirm eligibility”. The wallet screen shows a transaction that actually sends most of your balance, or your tokens or NFTs, to the attacker. People approve it because they’re expecting a confirmation and don’t read the amounts.

The rule: read every transaction screen in your wallet. If it sends more than a small, expected fee, or sends tokens you didn’t intend to send, reject it.

Keep up with your wallet’s own announcements, for example the Keeper news channel, for warnings about scams targeting its users.

Fake mini-apps

When a tap-to-earn game gets popular, copies appear fast:

  • Lookalike bots. Same name and avatar as the real game’s bot, a slightly different @username. They’re advertised in comments, groups and ads.
  • Fake “official” channels for the game, posting links to the copy.
  • Phishing “claim” pages dressed up as the game’s airdrop portal.

To find the real one:

  1. Start from the project’s official website or official X account and follow its link to the bot.
  2. Check the bot’s @username character by character against that source.
  3. Check that the bot’s official channel links back to the same bot.

The same methods for checking any official account are in how to verify an official exchange Telegram channel. They work for games and projects too.

“Airdrop checkers” and “eligibility” tools

Before and right after a big claim date, links appear promising to check whether you’re eligible or how much you’ll get. Some are run by the real project. Many are drainers: you connect your wallet to “check”, and the next screen asks you to sign a transaction.

  • Use only the checker linked from the project’s official site or channel.
  • Checking eligibility should never require sending funds or signing a transfer.
  • If a “checker” asks for your seed phrase, it’s a scam, without exception.

Other risks with tap-to-earn

  • Paid boosts. Many games sell upgrades for Telegram Stars or crypto. That’s a real purchase with no guarantee of any airdrop value.
  • Referral pressure. Games often reward inviting friends. That’s how they spread, and it’s also how scam copies spread.
  • “Sell your account” or “buy allocations” offers. Deals to buy someone’s game account or future tokens in a private chat are an easy way to lose money. There’s nothing to enforce the deal.
  • Fake token listings. When the game’s token launches, copycat tokens with the same name appear on DEXes. Verify the contract address from official sources, as in how to verify a token contract address.

Use a burner wallet

The single best protection: connect mini-apps only to a wallet that holds little or nothing. Create a separate TON wallet with its own seed phrase, keep just enough TON for fees, and move any rewards you want to keep elsewhere. The full setup, including how to separate browser and wallet profiles, is in how to set up a burner wallet for airdrops.

A quick pre-connect checklist

  1. Did I get to this bot from the project’s official site or channel?
  2. Does the @username match exactly?
  3. Is the wallet I’m connecting a burner?
  4. When my wallet opens, does the transaction send only what I expect?
  5. Is anyone asking for my seed phrase, phone number or a “fee to claim”? If so, stop.

Where to find airdrop channels

Our airdrops category lists airdrop channels and groups with review notes. Use them as starting points, not as proof that every link a channel posts is safe. Even a good channel can repost a link that turns out to be bad, which is exactly why the burner wallet comes first. Bots in general, including trading and wallet bots, are covered in crypto Telegram bots and what never to give them.

Part of our series on crypto Telegram. Start with the overview: How to Find Good Crypto Telegram Channels (and Skip the Junk).