The 60-second scan
Before you sign up anywhere, do this. Open the site, but don't register yet. Look for these three things on the homepage alone:
- Is there a payment history or "last payouts" feed? Real faucets usually show one. If nothing visible proves payments happen, move on.
- Does the homepage promise "guaranteed returns" or a "daily profit"? No legitimate faucet ever does. Close the tab.
- Is there a contact method? A real operator has an email, a Telegram, or a contact form. If the only way to reach anyone is to send a DM on a platform they don't own, that's a red flag.
If all three look fine, keep going. Now the eight red flags that should make you walk away — every single one of them.
Red flag #1 — The site asks you for money upfront
Legitimate faucets are free. They earn their money from ads, offerwalls and referral commissions — not from you. Any site that asks for a deposit, an "activation fee", a "verification payment", or a "withdrawal unlock fee" is a scam, full stop.
Red flag #2 — The site asks for your seed phrase or private key
This is the single clearest sign of phishing, and it's the one that causes the most damage. Your seed phrase is your wallet. Anyone who has it owns everything in that wallet — not just what you were about to earn, but anything you might deposit later.
No legitimate faucet ever needs your seed phrase. Not to pay you, not to verify you, not to "sync" your wallet. If a site asks for it, it is stealing from you. There is no exception.
What faucets do need is your public wallet address — which is safe to share. If a site can't articulate the difference, that's also a warning.
Red flag #3 — It promises "guaranteed daily returns"
This is the definition of a Ponzi scheme. Real earning sites pay you for work — watching ads, completing surveys, playing games. They never promise a fixed return on money you put in, because they aren't taking money in.
Common phrasings to watch for:
- "Invest £10, earn £1 per day"
- "2% daily forever"
- "Fixed 15% weekly returns"
- "Passive income — no effort required"
- "Stake your crypto and receive guaranteed daily payouts"
Every one of these is the same structure: earlier investors are paid with later investors' money until the operator disappears. In practice they always collapse. The early payouts are the trap — they create real-looking testimonials that bring in the next wave of victims. If a site promises any fixed daily return, it is a Ponzi scheme. There are no exceptions.
Red flag #4 — Withdrawals require you to invite friends
Some sites tell you that before you can withdraw, you need to refer 3, 5 or 10 friends. This is a pyramid structure dressed up as a referral programme. Legitimate referral bonuses exist and they're fine — but they should be optional, not a barrier to withdrawal.
A genuine faucet will let you withdraw as soon as you hit the minimum. A pyramid will keep raising the bar.
Red flag #5 — There is no verifiable payment history anywhere
Real faucets live and die by their reputation. They publish payment proofs, they have Trustpilot reviews, they're listed on FaucetPay with visible weekly payout totals, and independent monitoring sites track their activity. If a faucet has none of that — no proof, no reviews, no third-party data — that's a strong signal.
Check these three sources before signing up anywhere:
- FaucetPay directory — shows whether the faucet has actually sent a payout through their system in the last 7 days.
- Faucet Monitor or similar trackers — independent crawlers that record payment timestamps.
- Trustpilot — real user reviews, especially recent ones (ignore reviews older than 6 months; sites change ownership often).
Red flag #6 — The domain was registered in the last 90 days
Most faucet scams are cheap and quick. The operator buys a domain, sets up a template, harvests whatever they can, then disappears and repeats with a new name. A domain that's less than 3 months old isn't automatically a scam, but it has no track record and no verified history.
Check registration age at whois.domaintools.com or use a browser extension. If a site claims to have "paid out £2 million" but was registered two months ago, that's arithmetic that doesn't work.
Red flag #7 — The domain has a bad security reputation
Reputation services like ScamAdviser, Gridinsoft and VirusTotal scan billions of sites for malware, phishing infrastructure and known scam patterns. If two or more of them flag a domain as "malicious" or "phishing", do not visit it.
Note the distinction: reputation services rate domain safety, not trustworthiness. A site can be technically safe (no malware) but still a scam. Treat a bad reputation as a hard no, and a good reputation as only the absence of one specific problem.
Red flag #8 — Missing or broken legal pages
Real operators have a Privacy Policy, Terms of Service, and a way to contact them. They don't have to be elaborate. But they exist. If a site has "coming soon" placeholders, generic text copied from another site, or no legal pages at all, that's a sign the operator hasn't bothered to establish accountability.
The 30-second test that always works
Once you've cleared the eight red flags, do this: earn a small amount, reach the minimum withdrawal, and withdraw immediately. Before investing any meaningful time, prove the site actually pays.
What to do if you've already been scammed
- Stop immediately. Do not send any more money to "release" funds — that is how the loss compounds.
- If a wallet seed phrase was exposed, move funds immediately to a new wallet with a fresh seed. Consider the compromised wallet burned forever.
- Change passwords on any account that shares the email or password you used on the scam site.
- Report the site to your local cybercrime authority — Action Fraud in the UK, IC3 in the US, ACSC ReportCyber in Australia. Recovery is rare, but reporting builds the pattern that gets these sites shut down.
- Warn others — post in the relevant subreddit, comment on Trustpilot, and vote "Scam" on the site in our directory so the next person sees it.
How our directory helps
Every site in our directory is checked against five signals: current payout activity through FaucetPay, independent monitoring data, site age, community votes, and known complaints. Sites that fail on any of these are labelled accordingly — Paused, Defunct, or Blacklisted.
It's not a guarantee. Nothing can be. But it's the closest thing to a shortlist of sites that are currently paying, curated by people who've actually tested them.
If you've used a site we haven't yet flagged, vote on it. One click is all it takes to warn the next person.