Rabby Wallet has given its mobile users a faster way to deal with scam tokens. Hold your finger on one, and you can remove it.
The update was announced on Rabby’s official X account on October 22, 2026, with a five-word post: “Long press to delete scam tokens.”
What Rabby actually shipped
Rabby is a self-custodial wallet built for EVM networks. That means it works with Ethereum and the many blockchains that run on the same underlying technology.
The wallet is developed by OPCODE LABS PTE. LTD. Its new mobile feature lets users long-press a token in their portfolio to remove it or hide it from view.
The change also appears in the wallet’s recent iOS App Store update. The version history for that release lists the line “Supports removing scam tokens.”
No specific tokens were named alongside the rollout. No partnerships were announced either.
Why scam tokens are a problem in the first place
On public blockchains, anyone can send tokens to any address. You do not have to accept them. They simply appear.
Scammers use this openness as a delivery system. A malicious airdrop drops a worthless or booby-trapped token into thousands of wallets. The goal is to get someone curious enough to interact with it.
Address poisoning is a related trick. An attacker sends a transaction from an address that looks a lot like one you have used before. The hope is that you copy the wrong address from your history the next time you send funds.
Building on existing anti-scam tools
This is not Rabby’s first move against unwanted tokens. The wallet has automatically flagged suspicious, unsolicited transaction entries with a “Scam Tx” label since at least 2023.
Desktop users could already hide unwanted tokens through Rabby’s browser extension before this update. Until now, mobile users did not have the same easy control over what showed up in their portfolio.
The wider Rabby security suite includes several other protections:
- Real-time simulation, which previews what a transaction will do before you sign it
- Risk scanning, which checks for warning signs in addresses and contracts
- One-click approval revocation, which lets users cancel permissions previously granted to smart contracts
Approval revocation deserves a brief explanation. When you use many decentralized apps, you grant them permission to move certain tokens on your behalf. If one of those apps is compromised or malicious, that permission becomes a liability. Revoking it closes the door.
What this means for wallet users and the wider market
Removing a token from view does not remove it from the blockchain. The token still sits at your address on-chain. What changes is what you see in the wallet interface.
Self-custody puts full responsibility on the user. There is no customer service desk that can reverse a bad signature. That makes design choices like warnings, previews, and easy cleanup tools a meaningful part of a wallet’s security, not just its polish.
Users may also want to see whether hiding scam tokens eventually becomes automatic rather than manual. For now, Rabby flags suspicious activity and lets users decide what to clear.
Disclosure: This article was edited by Kaye Quema. For more information on how we create and review content, see our Editorial Policy.