How to check and revoke token approvals
Updated 2026-10-27
Short answer: an approval is permission you gave an app to spend a token from your wallet. Old or unlimited approvals to unknown contracts are how most wallets get drained. Check yours on My Rewards under Approvals, and revoke any you don't recognise or no longer use.
What an approval is
When you trade on a DEX or list an NFT, your wallet asks you to approve the app to move a token. Many apps ask for unlimited access so you only approve once. That permission stays in place after you leave the app, until you revoke it. If that app, or a fake one you approved by mistake, is ever compromised, it can take those tokens.
Do this
- Open My Rewards, paste your address and press Check my rewards.
- Open the Approvals tab and press Check token approvals. It reads the full history, then rechecks each approval so only live ones are shown, riskiest first.
- For each approval, look at who can spend: a verified contract with a name, an unverified contract, or a plain wallet (the riskiest). Flags show Unlimited amounts, approvals for all of your NFTs in a collection, and lookalike token names.
- Press Revoke next to any you don't need, connect the wallet that owns the address, check the dry run and confirm. A revoke can only remove access; it can never grant it.
- Repeat for Other chains (Ethereum, Base, Arbitrum, Optimism) under your Flare results.
Watch out
- Revoking doesn't undo the past. It stops future spending only. If tokens have already been taken, a revoke won't bring them back.
- Each revoke costs a small network fee. Start with unlimited approvals and anything you don't recognise.
- Approvals to a plain wallet (not a contract) are almost always a scam. Revoke those first.
- Fake "revoke" sites exist too. Open approval tools from a bookmark, never from a link in a message.