Community experience — unverified
Unsolicited $10,000 USDT voucher airdropped into wallet contained an approval phishing drainer
I checked my Web3 wallet on Polygon scan and noticed a newly deposited token named "VOUCHER-10000-USDT" with a note directing me to visit "claim-tether-voucher.net" to redeem the funds for real Tether. When I visited the website and clicked "Connect Wallet", a prompt popped up in MetaMask. Instead of a simple signature, the transaction requested permission for an unlimited token allowance (`setApprovalForAll` / `approve`) on my USDC and WETH holdings. Had I confirmed, the smart contract would have possessed full authority to drain all assets from my wallet. I rejected the prompt and immediately disconnected my wallet.