Skip to main content

How to Report a Suspicious NFT in Gem Wallet

Anyone can send an NFT to a public wallet address. An unexpected collectible does not mean the sender controls your wallet, but its image, name, description, or links may be designed to lead you to a scam.

Gem Wallet lets you report an NFT from its details screen. Reporting submits the collection, NFT identifier, and selected reason to the NFT service; it does not create a blockchain transaction or require a network fee.

danger

Do not visit a link, scan a QR code, call a number, or follow β€œclaim,” β€œunlock,” or β€œremove” instructions contained in an unexpected NFT. Reporting it never requires your Secret Phrase, private key, or a signed transaction.

Signs That an NFT May Be Suspicious​

Treat an NFT cautiously when:

  • You did not buy, mint, or expect it.
  • Its name or image promises a reward, refund, or airdrop.
  • It tells you to visit a website to claim or remove it.
  • It imitates a known project but uses a different collection or contract.
  • It asks you to connect a wallet or approve access.
  • It contains threatening, explicit, stolen, or misleading content.
  • The collection is unverified or appears as spam.

Receiving an NFT alone does not expose your Secret Phrase. The main risk begins when you follow its instructions or approve an associated request.

Report the NFT in Gem Wallet​

Use the NFT already visible in your wallet. Do not open an external site to reproduce the issue.

  1. Open Gem Wallet and select the wallet that received the NFT.
  2. Open Collections.
  3. Select the collection, then open the suspicious NFT.
  4. Open the menu in the NFT details screen.
  5. Select Report.
  6. Choose the reason that best describes the issue.

Gem Wallet provides these report reasons:

  • Spam β€” unsolicited, deceptive, or mass-distributed content.
  • Malicious β€” content intended to lead to theft, phishing, or a harmful action.
  • Inappropriate Content β€” content that violates safety or content expectations.
  • Copyright β€” content that appears to misuse protected work or identity.
  • Other β€” another issue not covered above.

After submission, Gem Wallet confirms the report. No wallet signature or blockchain approval is required.

What Reporting Does​

The report identifies the specific NFT and its collection to the NFT service. It can help improve how suspicious content is classified and filtered.

Reporting does not:

  • Send or transfer the NFT.
  • Burn or permanently remove it from the blockchain.
  • Sign a message or transaction.
  • Grant access to your wallet.
  • Recover assets already lost to a scam.
  • Reverse a marketplace purchase or mint.

Blockchain ownership and app visibility are separate. The NFT may remain associated with your public address even when a wallet or data provider filters it.

Do Not Send or Burn an Unsolicited NFT​

Moving or burning a suspicious NFT can require a transaction or contract interaction. That action may expose you to a malicious contract, unexpected approval, or network fee.

The safest response is to avoid interaction and use Gem Wallet's built-in Report action. Do not connect to a website that claims it must burn, validate, or quarantine the NFT.

If you expected the NFT but are unsure whether it is authentic:

  1. Open its public contract or token information through the explorer link available in Gem Wallet, when shown.
  2. Compare the complete contract or collection address with the project's independently verified website or announcement.
  3. Confirm the blockchain network and token identifier.
  4. Check whether the NFT belongs to the expected wallet address.

Do not trust the NFT's embedded website, social profile, or contact information as the source for verification.

If You Opened the NFT but Did Nothing Else​

Viewing an NFT in Gem Wallet does not sign a transaction or reveal your Secret Phrase. If you did not open an external link, connect to a dApp, sign a request, or enter private credentials:

  1. Report the NFT.
  2. Do not interact with it further.
  3. Continue monitoring the wallet for unauthorized outgoing activity.

You do not need to replace the wallet merely because an unsolicited NFT arrived.

If You Connected to Its Website​

If you followed a link and connected through WalletConnect:

  1. Close the website.
  2. Open Gem Wallet > Settings > WalletConnect.
  3. Select the suspicious session and choose Disconnect.
  4. Check whether you also signed a message, approved token or NFT access, or confirmed a transaction.

Follow What to Do After Connecting to a Malicious dApp for the remaining response.

If You Signed an Approval or Transaction​

Review the request and related transactions on the correct blockchain explorer. A collection approval can authorize a spender to transfer multiple NFTs from that collection.

  • Revoke suspicious token or NFT permissions using a trusted checker for the affected network.
  • Save transaction IDs, contract addresses, and the malicious domain.
  • Check for unauthorized outgoing transfers.
  • Do not pay anyone offering asset recovery.

Use How to Review a WalletConnect Signature Request and How to Revoke a Suspicious Token Approval for the verification steps.

If You Shared Your Secret Phrase​

If the NFT or linked website convinced you to enter a Secret Phrase or private key, assume the entire wallet is compromised. Reporting the NFT and disconnecting WalletConnect are not enough.

Create a new wallet on a trusted device and move remaining assets without reusing the exposed phrase. Follow What to Do If Your Secret Phrase Is Exposed immediately.

Suspicious NFT Checklist​

  • Do not follow links or instructions contained in the NFT.
  • Open the NFT in Collections and select Report.
  • Choose the most accurate report reason.
  • Do not send, burn, or approve the NFT merely to remove it.
  • Verify expected collections using independent official sources.
  • Disconnect suspicious WalletConnect sessions.
  • Revoke permissions if you approved access.
  • Replace the wallet if a Secret Phrase or private key was exposed.

For general NFT receiving, sending, and safety information, see NFTs in Gem Wallet.