Scammers airdrop fake Jupiter tokens to Solana wallets in wallet-drainer scheme

Analysts at Solana Floor have sounded the alarm after a fraudulent airdrop impersonating Jupiter Exchange came on its radar earlier today. The warning from the blockchain analytics outlet noted that the phishing campaign targets Solana users with the promise of a fake airdrop, luring them into connecting their wallets to a malicious asset-draining site.

According to Solana Floor, one of the first red flags from the scam is that it distributes tokens labeled “$CJUP” directly into user wallets, a knockoff version of Jupiter’s JUP token and the project’s legitimate Jupuary airdrop program. 

Anyone who interacts with the fake aidrop promoters is directed to a phishing site that functions as a wallet drainer. As Kaspersky describes it, a “crypto drainer is designed to (quickly) empty crypto wallets automatically by siphoning off either all or just the most valuable assets they contain, and placing them into the drainer operators’ wallets.”

🚨ALERT: A scam is impersonating @JupiterExchange, airdropping fake $CJUP tokens to wallets and asking users to connect their wallets to a scam drainer website. pic.twitter.com/6vAuMjUJ4B

— SolanaFloor (@SolanaFloor) May 22, 2026

Is Jupiter running an airdrop right now? 

The Jupiter community usually runs hot in the weeks and months leading up to the project’s annual Jupuary airdrops, because they always come up in the month of January since at least 2024. That’s why some community members may be conditioned to expect periodic token distributions. 

However, the exchange has not announced any active distribution for May 2026.

The Solana-based decentralized exchange aggregator distributed 1 billion JUP tokens to nearly 1 million wallets in 2024. The second round in January 2025 sent 700 million JUP tokens worth approximately $616 million to eligible users, according to reports.

Looking at those precedents, along with Phantom’s wallet guide noting that Jupiter has committed to annual distributions through 2027, unsuspecting JUP holders may easily rationalize news that another tranche of tokens may be on the way. 

Notably, Jupiter has an official airdrop checker at jup.ag/portfolio/airdrop-checker, where community members can see if they are eligible for upcoming reward distributions. 

Proposed changes to Jupuary airdrop are confusing users 

The timing exploits ongoing uncertainty around JUP’s airdrop schedule. In February 2026, Jupiter DAO opened a governance vote on whether to cancel future Jupuary events entirely and adopt a zero-emission token model, Cryptopolitan reported at the time. 

The proposal offered two paths: continue with a reduced 200 million JUP distribution or return 700 million prepared tokens to the Community Cold Multisig wallet and halt team emissions indefinitely.

Separately, Jupiter faced backlash in January 2026 when it required users to import seed phrases into the Jupiter wallet to claim ASR staking rewards, a requirement the exchange later walked back after community pushback, according to Cryptopolitan reporting. 

That episode primed users to associate unusual claim processes with legitimate Jupiter activity.

What is the real Jupiter token? 

The fraudulent tokens use the ticker $CJUP. The official $JUP (contract address: JUPyiwrYJFskUPiHa7hkeR8VUtAeFoSYbKedZNsDvCN), according to Phantom’s token guide and confirmed on CoinMarketCap. Any unsolicited airdrop asking users to visit an external site to “claim” tokens should be treated as a phishing attempt.

Jupiter’s official claim process runs exclusively through jup.ag. 

JUP trades at $0.22 with a market capitalization of $721 million, according to CoinMarketCap data. The token sits roughly 89% below its January 2024 all-time high of $2.04.

The smartest crypto minds already read our newsletter. Want in? Join them.