Cryptocurrency wallet users increasingly confront a frustrating reality: unsolicited tokens and airdrop campaigns fill their account portfolio, crowding legitimate holdings and creating visual clutter across balances, transaction histories, and asset displays. The problem compounds when spam tokens carry scam websites in their metadata, phishing links embedded in descriptions, or suspicious smart contracts designed to drain wallets when interacted with. A single blockchain address can accumulate dozens or hundreds of unwanted tokens within months, making genuine asset management difficult and turning wallet navigation into a search through irrelevant entries.
The root cause is both technical and economic. Public blockchains make it trivial for anyone to create tokens and send them to arbitrary addresses at minimal cost. Marketing campaigns exploit this by airdropping tokens to large numbers of wallets to create artificial adoption or generate buzz. Scammers use similar methods to distribute fake versions of legitimate tokens, betting that inattentive users will approve spending permissions and drain their actual holdings. Traditional custodial exchanges often shield users from this problem through server-side filtering, but self-custody through a hardware wallet like Trezor means the user must actively manage what appears on their device.
Understanding why spam tokens appear in your portfolio
The mechanics are simple and nearly free for attackers. On Ethereum, creating an ERC-20 token requires deploying a contract, which costs roughly 0.1 to 0.5 ETH in gas fees depending on network conditions. That same contract can then distribute tokens to thousands of addresses in a single batch transaction. From the attacker’s perspective, the investment is minimal compared to the potential return: if even one percent of recipients interact with the token, visit a scam website, or approve a malicious contract to access their wallet, the campaign becomes profitable.
Legitimate airdrops operate on the same mechanism but with transparent intent. A blockchain project may distribute tokens to users who met certain criteria—holding a specific asset, interacting with a protocol, or participating in a community—to bootstrap adoption and reward early participants. These tokens have real value and represent genuine ownership. The problem arises when portfolio interfaces display legitimate airdrops alongside obvious spam, making it difficult to distinguish valuable assets from noise. Users see a list of 50 tokens in their wallet and must evaluate which are worth attention, which should be hidden, and which are potentially dangerous.
Networks beyond Ethereum face the same pressure. Polygon, Arbitrum, Optimism, Solana, and other supported chains all enable low-cost token creation, attracting both legitimate projects and spammers. The Trezor NFT wallet interface alongside standard token management means that scam NFT collections and worthless token airdrops can both overwhelm a portfolio simultaneously. A user might receive an NFT from a collection with a deceptive name, only to discover that interacting with it in any way triggers a malicious smart contract that attempts to steal funds.
The core risk: interaction and approval
Merely receiving a spam token is not directly dangerous. The token sits in the address, visible in block explorers and wallet applications, but harmless until the user takes action. The danger emerges when a user approves a spending permission, attempts to trade the token, or clicks a link in the token’s metadata. Many scam tokens include metadata fields that point to phishing websites mimicking legitimate exchanges or wallet interfaces. A user seeing an unfamiliar token in their portfolio, curious about its origin, clicks the website link and lands on a page that asks them to “connect” their wallet. That connection request is typically a malicious dApp trying to gain approval to spend assets in the user’s account.
The second risk is approval-based theft, which occurs when a user interacts with a smart contract that includes hidden functionality. Approving a contract to spend a token should in theory limit spending to that specific token and amount. In practice, poorly audited or deliberately malicious contracts can exceed those permissions, execute unexpected functions when called, or exploit weaknesses in the ERC-20 standard to drain multiple assets. A user attempting to swap a spam token might unknowingly approve a contract that immediately transfers their entire Ethereum or stablecoin balance to an attacker’s address.
The third risk is social engineering through metadata. Spam tokens often include creator addresses, social media links, and descriptions within their smart contracts. Attackers craft these to appear legitimate, copying branding from popular projects and creating urgency (“Claim your airdrop now before this ends”). Even technically savvy users can be fooled by a convincingly fake token description, especially when the legitimate project simultaneously launches an actual airdrop on the same network. The distinction is subtle and requires verifying contract addresses against official sources before trusting any token.
How to hide tokens in Trezor Suite
Trezor Suite provides straightforward mechanisms to reduce clutter without deleting anything from the blockchain. The most direct approach is to hide tokens from the portfolio view. In the desktop application, navigate to the portfolio or accounts section where your token balances appear. Most tokens display a menu icon or visibility toggle next to their name. Clicking to hide the token removes it from your active view without affecting the underlying asset; the token remains on the blockchain and can be unhidden at any time by reversing the setting.
The hiding feature is particularly valuable because it separates account management from display preferences. You maintain complete control of the underlying assets—they remain in your address, recoverable through your backup seed phrase, and accessible if you reconnect to the blockchain. Hiding them simply adjusts what the Trezor Suite interface shows you. This means you can hide a token that appears worthless today, and if it somehow gains value or legitimacy later, you can unhide it and access your balance without recovering from backup or moving funds.
For tokens you are certain are spam and want to actively monitor for removal, check the token’s contract address against verified sources before making any decision. Popular tokens have official websites and documentation; cross-reference the contract address shown in Trezor Suite with the official source. Scammers frequently create near-identical contract addresses that differ by a single character, relying on users not to notice. Once you confirm a token is spam, hiding it is the prudent first step. Only if you later decide to actively remove the token by sending it to a burn address or exchange should you interact with it at all.
Distinguishing legitimate airdrops from spam
A legitimate airdrop typically meets several criteria. First, the project behind the token has an established presence: a documented whitepaper, a clear team, social media accounts that have existed for months or years, and community participation. Second, the airdrop was announced in advance on official channels, with specific criteria for eligibility published before the distribution occurred. Third, the token has recognizable utility or value, either through trading history on known exchanges or clear utility within a protocol. Fourth, the community can verify the distribution through public records or official communications.
Spam and scam tokens characteristically lack these attributes. They appear with no advance announcement, often targeting broad swathes of addresses indiscriminately. The project behind them is either nonexistent, recently created with a copy-paste team page, or deliberately mimics another project. The token’s contract may contain no real functionality beyond basic token transfers. Social media accounts, if they exist, are either inactive or full of suspicious links.
One practical filter is to check whether the token appears on major blockchain explorers and is listed on at least one legitimate exchange or aggregator. Etherscan, Polygonscan, and similar explorers show token holders, transaction history, and contract source code if the creator verified it. A token with thousands of holders and substantial trading volume is more likely to be legitimate than one with no transactions or a handful of holders. Conversely, a token with an unverified contract and a URL in its description pointing to a suspicious domain is almost certainly spam.
When evaluating tokens you receive, resist the urge to immediately test them. Do not click links in token descriptions, do not attempt to trade them, and do not approve spending permissions for unfamiliar tokens. Instead, research the project through independent sources—search the token symbol and name on major platforms, check if cryptocurrency news sites have covered the airdrop, and verify any claims against official project documentation. If you cannot find corroborating information from reputable sources, treat the token as spam and hide it.
Managing tokens across multiple networks
Users who maintain accounts on multiple blockchains face a compounded spam problem. Trezor Suite crypto wallet supports dozens of networks and thousands of tokens, allowing a single seed phrase to control assets across Ethereum, Polygon, Arbitrum, Optimism, Solana, and many others. Each network accumulates its own spam tokens independently. An address that has been public for months will likely have received airdrops or spam on nearly every chain it touches.
The interface challenge is that portfolio management requires reviewing tokens across all networks simultaneously while also filtering network-specific spam. Trezor Suite addresses this through account organization and filtering. You can view accounts by network, allowing you to hide spam tokens on one chain without affecting your view of legitimate assets on another. This separation is important because a token named “USDC” on Polygon is entirely different from USDC on Ethereum, and a spam token named “USDC” on Arbitrum requires the same scrutiny as any other fake.
For power users managing cryptocurrency accounts across many networks, developing a systematic approach is essential. Create a routine: weekly or monthly, check your portfolio on each network, identify any new unrecognized tokens, research them briefly, and hide those confirmed as spam. This prevents accumulation from becoming overwhelming. Additionally, consider whether you actually need to maintain active accounts on every network. Consolidating to fewer networks reduces the surface area for spam and simplifies overall wallet management.
Advanced token filtering and smart contract awareness
Beyond basic hiding, Trezor Suite allows for more granular management through coin control and custom filtering features. Advanced users can exclude specific token contracts from their portfolio view or set custom display rules based on token type, value, or verification status. These options are typically found in settings or preferences, though availability varies between the desktop application and the web interface at suite.trezor.io/web.
Understanding smart contract risk is equally important. Not all tokens are simple transfers of value; some contain complex logic, dynamic fees, or governance mechanisms. Before approving any spending permission or attempting to interact with a token, examine the contract on a block explorer. If the source code is available and verified, review it for obvious issues such as functions that allow the creator to modify balances, hidden fee mechanisms, or delegated approval rights. If the source code is not verified, that is a red flag indicating the creator did not publish it for inspection.
When you must interact with a token—perhaps selling it, swapping it, or transferring it off your device—do so through Trezor Suite’s integrated swap feature rather than approving random contracts. The swap feature is vetted by Trezor and uses known routing protocols, reducing the risk that you are approving a malicious contract. If the token is not supported by the swap feature, it is probably not worth the security risk to attempt trading it yourself. The safest option is to leave it hidden and ignore it entirely.
Backup and recovery considerations
An often-overlooked aspect of token spam management is the relationship to wallet backups and recovery. Your recovery seed phrase allows you to restore your account on any device with access to all assets, including every spam token that has ever been sent to your address. This is important for two reasons: first, it means you never actually lose access to an asset simply by hiding it; second, it means your backup is complete and needs no modification for spam tokens.
When you recover a wallet from your backup seed phrase on a new device or new installation of Trezor Suite, all your tokens will reappear, including those you previously hid. This is correct behavior—the wallet is recovering its actual state from the blockchain, not your preferences about which tokens to display. You will need to re-apply your hiding preferences after recovery. This is a minor inconvenience but reflects the correct architecture: the backup preserves your assets, while the Trezor Suite application preserves only your preferences about how to display them.
For users considering hardware wallet upgrades or migrating to a new device, this distinction also clarifies what happens. Migrating your Trezor device does not change your addresses or balances; it continues to control the same accounts. All your tokens, spam and legitimate alike, move with you because they are tied to your recovery seed phrase, not to the physical device. Your hiding preferences may not transfer, but your underlying assets remain fully accessible.
Preventing future spam accumulation
While you cannot prevent spam tokens from being sent to your address, you can reduce their visibility and impact through proactive practices. First, keep your wallet address somewhat private when possible. Public addresses displayed on social media, in forum signatures, or on donation pages become targets for airdrop campaigns because they are known to be active accounts. This is not a severe security risk—your public address is intentionally public—but it does correlate with spam volume. Alternate addresses or subaddresses for different contexts can reduce spam concentration on any single address.
Second, monitor new token arrivals rather than ignoring them. Trezor Suite shows incoming transactions clearly. When you see a new token in your portfolio, spending a minute to quickly research it is far faster than letting months of spam accumulate before doing a cleanup. A quick search for the token symbol and contract address will usually reveal whether it is a known project or obvious spam.
Third, use passphrases or separate accounts for genuinely sensitive funds if you anticipate high spam volume. Manage cryptocurrency accounts by account type: one account for active trading and experimentation, where spam is likely to accumulate, and another isolated account for long-term holding of core assets. The passphrase feature in Trezor allows you to create separate wallet instances from the same seed phrase, enabling this separation at the hardware level. This approach compartmentalizes spam to less sensitive areas of your portfolio.
Recognizing genuinely dangerous tokens
Not all spam tokens are merely annoying; some are actively dangerous. A dangerous token is one where merely holding it or viewing it in certain wallet interfaces could trigger a malicious action. Most Trezor-based security prevents this because Trezor requires physical confirmation for transactions, and viewing tokens in Trezor Suite does not execute smart contract code. However, if you export your wallet to another interface or attempt to trade the token, the risk increases substantially.
Dangerous tokens typically exhibit specific characteristics. They may have contract functions that execute automatically when the token is viewed or transferred, attempting to trigger approvals or steal funds. They may impersonate popular tokens with subtle differences in the name or symbol. They may include hidden logic that triggers only under specific conditions, such as when a holder attempts to sell, making the risk invisible until you try to move the token. If you are suspicious of a token, do not attempt to interact with it. Hide it and treat it as permanently unusable.
The safest assumption for any unfamiliar token is: never approve a spending permission, never click links in metadata, never attempt to trade it, and never transfer it to another wallet or exchange unless you have thoroughly verified it is legitimate through independent sources. If a token offers to give you something—a free reward, a bonus, a claim—assume it is a scam until proven otherwise. Legitimate projects do not require wallet approval or suspicious interactions to deliver value.
Frequently asked questions
If I hide a token in Trezor Suite, does it disappear from the blockchain?
No. Hiding a token only changes your Trezor Suite interface display. The token remains in your address on the blockchain and can be unhidden at any time by reversing the setting in the application. The underlying asset is completely preserved and accessible through your recovery seed phrase if you ever restore the wallet on a different device.
Can I permanently delete a spam token from my account?
You cannot delete a token that has been sent to your address; it belongs to your account permanently. Your only options are to hide it in Trezor Suite to reduce visual clutter, or to send it to a burn address (a provably inaccessible address) if you want it completely gone. However, most users should simply hide unwanted tokens rather than attempting to interact with them.
Is it safe to hold my account on multiple networks if it increases spam?
Yes, it is safe. Each network operates independently, and spam on one network does not affect assets on another. The primary inconvenience is portfolio management overhead. Use Trezor Suite’s filtering to organize tokens by network and hide spam on each chain separately. If you want to minimize spam exposure, consider consolidating to fewer networks and hiding accounts you do not actively use.