Unknown Token in Your Wallet: What It Is and What to Do

Why a wallet says “Unknown”

A token is just an entry in a smart contract. Anyone can create one and send it to any address. Your wallet then has to decide what to call it and whether to show a price. When it cannot, you see “Unknown”, “Unverified” or a balance with no dollar value. There are three common reasons.

• It is not on the wallet’s token list. MetaMask detects tokens using lists gathered from community token lists, and says it does not keep its own list of “accepted” or “valid” tokens.^[1] In TON’s token docs, a token is marked “unverified” if it is not in the token asset list.^[2]
• The wallet found no metadata. Phantom looks for a token’s name and symbol on-chain first. If it cannot find more metadata, it shows the token as “Unknown”.^[3]
• It has no reliable price. MetaMask says it may not have prices for all tokens.^[4] Solflare labels a token “Unverified” when it has not met its thresholds for reliable price data, for example because it is brand new, has little trading or few holders.^[5]

Block explorers work the same way. On Etherscan, every token starts with the reputation “Unknown”, which means Etherscan cannot or has not decided on a score. “Spam” is a separate label for tokens whose name or symbol contains links, scripts or referral codes.^[6]

So “Unknown” is not a verdict. It means the wallet has no information. What matters is how the token got there.

Safe case or warning sign?

What happened	What it usually is	What to do
You bought a new or small token yourself, and it shows as Unknown or with no price	Usually a real token the wallet has not listed yet	Add it by contract address from the issuer’s official site. Check it on a block explorer.
A token you never asked for appeared, often with a big balance or a website in its name	Airdropped spam or a scam bait token	Do not touch it. Hide it.
“USDT” appeared that you did not expect, or your USDT shows twice	Often a fake look-alike token with a different contract address	Compare the contract address with Tether’s official list. Do not send or swap it.
Tiny or zero-value transfers from addresses that look like ones you use	Address poisoning	Ignore them. Never copy an address from your history.

The safe case: a real token your wallet doesn’t list

Most wallets let you add a token by hand. In MetaMask, you choose to add a custom token and paste its contract address. MetaMask suggests finding the address with a block explorer such as Etherscan or a listing site such as CoinGecko.^[1]

The safest source is the issuer itself. Tether, for example, publishes the USDT contract address for each blockchain it supports on its own site.^[7] Copy the address from there, not from a chat, an ad or the token’s own description.

A missing price does not mean the token is gone. MetaMask says that even without a fiat value, you still own the tokens and can send or swap them.^[4]

If you issued the token and want wallets to stop calling it “Unknown”, the fix is on the listing side, not in any one wallet. Phantom advises complete and accurate metadata and recognition by established registries such as CoinGecko and Jupiter, and says it does not publish its exact spam criteria.^[3] On TON, the route is the token asset list that wallets use.^[2]

The dangerous cases

Unsolicited airdrops

ethereum.org describes airdrop scams: a scam project sends a token or NFT to your wallet to lure you to a malicious website.^[8] Trust Wallet warns that if you approve the transaction such a site asks for, it can drain your wallet instantly. It also says not to try to sell, swap or send these tokens, because that may trigger a malicious smart contract.^[9]

On Solana, Scam Sniffer described a drainer that sent phishing NFTs to holders of one token as a fake airdrop. The NFT’s name and link pointed to a phishing site that asked victims to sign a transaction with hidden details.^[10]

Fake look-alike USDT

Scammers create tokens with the same name and logo as well-known coins but a different contract address. Trust Wallet says to check the contract address against the project’s official site and never to add or trade a token based only on its name or logo.^[9] The name “USDT” proves nothing. Only the contract address does.

Dust and zero-value transfers

This is address poisoning. Etherscan describes attackers who generate addresses that copy the first and last characters of real ones, then send tiny or zero-value transfers so the fake address appears in your history.^[11] A Carnegie Mellon study of Ethereum and BNB Smart Chain also found counterfeit-token transfers from look-alike addresses used for the same purpose.^[12] On TRON, TRM Labs reports scammers sending tiny amounts of TRX, often worth less than $0.01, and advises treating unsolicited micro-deposits as suspicious.^[13] The full story is in our post on address poisoning and USDT.

What to do

1. Don’t interact. Trust Wallet’s advice is not to interact with tokens you did not request or buy.^[9] Do not visit sites named in the token, its memo or its NFT description.
2. Don’t approve, swap, sell or “claim”. Never connect your wallet to a site to claim an unsolicited airdrop.^[9] A token you did not ask for has no value you can safely unlock.
3. Hide it. Trust Wallet says you can safely hide such a token without interacting with it.^[9] MetaMask lets you remove tokens from your asset list; only the network’s own gas coin, such as ETH, cannot be hidden.^[1] Hiding only changes your view. It sends no transaction.
4. Verify contract addresses yourself. Take them from the issuer’s official site, then compare on the network’s block explorer.
5. Never copy a recipient from your history. Copy it from the source each time, and check the whole address, not just the ends.
6. If you already signed something, follow the steps in our fake AML checker guide: move funds to a new wallet and revoke approvals through your wallet or the official explorer. Ignore anyone who offers to “recover” funds for a fee.

Where an AML check helps — and where it doesn’t

An AML check screens a public address for links to scams, sanctions, stolen funds and similar sources. It needs only the address, never a wallet connection or a signature.

• It helps to check the address that sent you an unexpected token or a payment. A sender already labelled as a scam or phishing address confirms what to do: nothing.
• It does not tell you whether a token is the real one. For that, compare the contract address with the issuer’s list.
• A clean result is not a green light. A freshly made look-alike address may have no history at all, so “no data” means unknown, not safe.

Use a checker that covers the right network: see our pages on Ethereum, TRON and Solana. And use a real one. Sites that ask you to connect a wallet to “check” it are a known trap; see how to spot fake AML checkers.