Wallet Flagged as Sybil: What to Do and How to Appeal an Exclusion

Your wallet was flagged as Sybil and excluded from an airdrop: how to confirm it is real, how appeals usually work, what to prepare and how to avoid scammers.

By the CoinDropster editorial team · Updated:

«Wallet flagged as Sybil» is a message that arrives with no explanation and no right of reply: the checker shows zero, the address is not on the recipient list, and the project chat is full of thousands of the same question. Why was I excluded from the airdrop, and does an appeal work — both questions have calm answers. This article lays out the sequence of steps after an exclusion: how to confirm it is real, how appeals are usually structured, what to prepare and what to protect yourself from.

This describes a general course of action, not a guarantee of an outcome. Appeals are reviewed at the project's discretion, their terms vary, and no one promises the allocation will be restored. This is not financial or legal advice.

How to confirm the exclusion is real

The first step is not an action but a check. Some «exclusions» turn out to be a user error or a fake:

  • Check through the official checker. Its link must match in the project's documentation and its verified social accounts. Third-party «checkers» from chats can show anything, including a fake zero followed by an offer to «fix» it.
  • Check the right address. With several wallets it is easy to check the wrong one. Compare the address character by character.
  • Read the wording. «Does not meet the criteria» and «flagged as Sybil» are different things. In the first case there is usually no appeal: the activity simply fell short of the rules. In the second, the project decided the address is linked to others, and that can be contested.
  • Check the stage. If the project is in Verification status, the list may not be final. If it is already Reward available or Distributed, decisions have been made and appeals, if there were any, are most likely closed.

How protocols arrive at a flag and why mistakes happen is covered in the article on Sybil detection methods.

How appeals usually work

There is no single standard, but the recurring pattern looks like this. The project publishes a list of excluded addresses or clusters, sometimes with a reason code: shared funding source, identical behavior, consolidation. At the same time an appeal window opens — a form, a forum thread or a dedicated section on the site. The window is limited, usually days or weeks, and once it closes submissions are no longer reviewed.

The form typically asks for: the address, which cluster it was assigned to, an explanation of why the link is wrong, and links to evidence. Submissions are read by people, the volume is large, so review takes time, and the reply may be brief or never arrive at all — the project simply updates the final list.

What matters to understand: the project is not obliged to explain the decision or to revisit it. An appeal is an opportunity to show data the model did not see, not an argument about fairness. The more specific and verifiable the arguments, the higher the chance they are read to the end.

What to prepare for the submission

The main argument in an appeal is proof of independence, laid out so that it can be verified in an explorer in a minute.

  1. Source of funds. Where the first deposit and the following ones came from. If it was a withdrawal from your own exchange account, say so, with the date and transaction hash. If from your own main wallet, name it and explain that it is the only such transfer.
  2. History outside the campaign. Transactions unrelated to this project: other protocols, transfers, NFTs, domains, governance votes. The longer and more diverse the history, the weaker the «instrumental wallet» argument.
  3. An explanation of the overlap. If you know why the address landed in a cluster — a shared exchange withdrawal address, for example, or a public guide you followed — say so directly. The model saw a correlation; you need to show it has an innocent cause.
  4. One address — one appeal. Do not submit for several wallets at once: that confirms they are yours and closes the question not in your favor.

The tone is short and factual. Transaction hashes, dates, explorer links. No emotion, no stories about how much you spent, no accusations against the team. How to build a wallet so that this evidence exists in advance is covered in the article on how to avoid a Sybil flag.

Scammers on the appeal theme

The moment an exclusion list is published is one of the most profitable for scammers: thousands of people are upset and looking for a way out. Typical schemes:

  • Paid «help with the appeal». An account in your DMs offers to «push» your appeal through contacts on the team. No such channels exist; the money leaves, the appeal is never filed.
  • A fake appeal form. A link to a site that looks official, where «ownership verification» requires connecting a wallet and signing a message or transaction. The signature turns out to be an approval on your tokens. How to recognize such a site is covered in the article on spotting fake claim sites.
  • A request for the seed phrase «for verification». No project, support desk or moderator asks for a seed under any circumstances.
  • «Revised list» and «second round». Messages claiming the excluded have been reinstated and you must claim urgently through a new link. Verified only through official channels.

One rule: an appeal is submitted only through the channel named in the project's official documentation, and never requires payment, a seed phrase, or a signature that grants rights over assets. Any deviation from this is a scam.

What not to do

Several actions that feel natural but make things worse:

  • Arguing in public. Angry posts in the chat and on social media do not affect the decision, but they do attract scammers who DM you to «help». Arguments go in the form, not the feed.
  • Creating a «replacement». Opening a new wallet to «start fresh» in the same project and funding it from the old one. That creates exactly the link you were excluded for and carries the flag over to the new address.
  • Appealing on behalf of other people's wallets. Or several of your own. That confirms the cluster.
  • Moving balances in a panic. Rapid consolidation of funds from the flagged address to others is another signal for the analysis projects run after distribution.
  • Waiting for the decision to reverse itself. If the appeal window is open, it will close on schedule. If it is closed, support tickets will not help.

If the appeal did not work, or there was none, the only useful response is to learn from it. Look at the address history the way the model does: which feature could have fired — funding source, timing, identical route, consolidation? The past cannot be fixed, but you can stop reinforcing the links and build an independent history for the next campaigns. The Verification stage, where projects open and close appeals, is tracked on CoinDropster as a separate status for every project. See tracked airdrops →