How to Verify a Token Contract Address Before You Swap or Claim: 5 Checks (2026)
How do you verify a token contract address before you swap, claim or add it?
Ignore the token’s name and logo, because anyone can create a token with any name. A token is identified by its contract address (on Ethereum and other EVM chains) or its mint address (on Solana). Get that address from the project’s own official website or documentation, cross-check it on a block explorer and a market data site, and compare the full string, not just the first and last characters. If the three sources do not agree, or the only place you can find the address is a social post or a direct message, do not use it. This guide gives the five checks, the red flags that mark a fake token, and how the check applies to our two apps, CoinDrop and Swappr.
Educational guide, not financial or security advice. Verifying an address reduces risk; it does not make a token a good investment.
Why the name and ticker prove nothing
On Ethereum, a token is a smart contract, and the ERC-20 standard lets the creator choose any name and symbol. On Solana, every token is a mint account, identified by its mint address. Nothing stops a scammer from creating a second “USDT” or a copy of a new airdrop token with the same logo. Wallets make this worse when they show tokens automatically: MetaMask notes that its token detection uses community token lists and that it “doesn’t keep a proprietary list of ‘accepted’ or ‘valid’ tokens.”
| What you see | Can it be copied? | Use it to verify? |
|---|---|---|
| Name and ticker (e.g. “USDT”) | Yes, freely | No |
| Logo | Yes | No |
| Price shown in a wallet | Can be missing or misleading for new tokens | No |
| Contract or mint address | No; each is unique on its network | Yes, when it comes from an official source |
The five checks
- Start from the official source. Type the project’s website address yourself or use a bookmark, then find the page or documentation that lists the contract or mint address. Tether, for example, publishes its USDT contract for each supported network on its own site.
- Check the network. The same address string means nothing on the wrong chain. USDT on Ethereum and USDT on TRON have different addresses; a Solana mint address is not an Ethereum contract.
- Cross-check on a block explorer. Paste the address into the explorer for that network (Etherscan for Ethereum, Solscan or Solana Explorer for Solana). Look at the token name, total supply, creation date and number of holders. A copy of a well-known token is often days old with a handful of holders.
- Cross-check on a market data site. CoinGecko and CoinMarketCap list contract addresses on each coin’s page. If the official site, explorer and listing all show the same address, that is a good sign; if any disagree, stop.
- Compare the whole string. Address poisoning and lookalike tokens rely on matching only the first and last few characters. Copy from the official page and compare every character, or paste into the explorer search and confirm it opens the same token page.
The same habit protects deposits and withdrawals; our guide to choosing the right network for a crypto deposit address covers the network side in detail.
Red flags that mark a fake token
| Red flag | What it usually means |
|---|---|
| A token you never bought appears in your wallet | An unsolicited airdrop, often a lure to a phishing site |
| The address only appears in a DM, comment or ad | No official source; treat as fake |
| Token name contains a website address | Spam token pointing to a drainer site |
| Very recent creation date and few holders, but a famous name | A copy of an established token |
| Selling or transferring fails with a message telling you to visit a site | MetaMask warns this is likely a phishing site |
The safe response to an unknown token in your wallet is to leave it alone: do not try to sell it, approve it, or visit any site named in it. If you are setting up a fresh wallet for apps like ours, our guide to setting up a self-custody wallet before using CoinDrop or Swappr walks through it.
How this applies to CoinDrop and Swappr
CoinDrop (our app) is an Android app where you earn in-app rewards; rewards relate to the $DROP token on Solana. The only mint address to trust is the one CoinDrop publishes itself, on the $DROP token details and official mint address page on the CoinDrop website. Any other “DROP” token, including one that appears in your wallet unasked, is not ours. See the CoinDrop app page on CoinX for what the app does.
Swappr (our app) is a free Android app for multi-coin swaps processed by FixedFloat. You never paste a token contract into Swappr: you pick coins from a list where each is labelled with its network, such as USDT (TRC20) or USDT (ERC20), and paste only your own receiving address. The check that matters there is choosing the network your wallet uses. See the Swappr app page on CoinX.
Honest limits: both apps are Android-only and contain ads, neither is a wallet, and neither can recover funds sent to a fake token or the wrong address. If a token you expected does not appear, our list of seven checks when crypto is not showing in your wallet helps before you add any token manually.
Adding a token to your wallet manually, safely
- Get the address from the official source as above, on the right network.
- In your wallet, choose to add or import a token by address rather than by searching the name.
- Check that the name, symbol and decimals the wallet fills in match the explorer.
- If the wallet shows a warning that the token is unverified or not on its list, read it before continuing.
FAQ
Can two tokens have the same name?
Yes. Names and tickers are chosen by whoever creates the token, so many tokens can share a name. Only the contract or mint address on a given network identifies the real one.
Where do I find a token’s official contract address?
On the project’s own website or documentation, reached by typing the address yourself. Then confirm it on a block explorer and a market data site such as CoinGecko.
What should I do with a token I didn’t buy?
Leave it alone. Do not sell, approve or visit any site it mentions; unsolicited tokens are a common lure for phishing and wallet drainers.
What is the official $DROP mint address?
Use only the address published on the CoinDrop website’s $DROP token details page. Do not trust an address from a message, comment or ad.
Sources
- ethereum.org: ERC-20 token standard (checked 2026-10-23)
- Solana documentation: tokens and mint accounts (checked 2026-10-23)
- MetaMask Support: how token detection works and token safety (checked 2026-10-23)
- Tether: supported protocols and contract addresses (checked 2026-10-23)