What Are Airdrops and Points Programs? Eligibility, Sybils, and Taxes

An airdrop is a distribution of cryptocurrency tokens to wallet addresses, typically used by blockchain projects to bootstrap liquidity, decentralize governance, or reward early users. Recently, these distributions have evolved into points programs, where users earn off-chain tallies that may later convert into tradable tokens. Both mechanisms serve as user acquisition tools, but they carry distinct technical risks and tax obligations.

The Evolution from Airdrops to Points

Early cryptocurrency distributions were often surprise events. Projects would take a historical record of blockchain activity and distribute tokens to users who had interacted with their smart contracts. The goal was to instantly decentralize the governance of the protocol by placing voting power in the hands of active users.

This model shifted as the industry matured. Users began anticipating airdrops, leading to mercenary capital—funds moved into a protocol solely to qualify for a token distribution, only to be withdrawn immediately afterward.

To counter this, developers introduced points programs. Instead of a surprise retroactive distribution, projects now explicitly track user activity through off-chain points. Users earn points by depositing capital, generating trading volume, or interacting with specific protocol features.

Points programs offer developers flexibility. Because points are typically recorded off-chain on centralized servers, developers can adjust the earning formulas in real-time to incentivize specific behaviors. Furthermore, points do not inherently represent a financial asset, which provides projects with a buffer while they finalize tokenomics and navigate regulatory frameworks.

How Eligibility Works

Eligibility for an airdrop is determined by a snapshot. A snapshot is a record of the blockchain's state at a specific block height. If a user's wallet meets the protocol's criteria at the exact moment the snapshot is taken, they qualify for the distribution.

Criteria vary widely depending on the project's goals. Decentralized exchanges often reward users based on cumulative trading volume or the amount of liquidity provided to trading pairs. Lending protocols might calculate eligibility based on the duration and size of capital deposits.

In many cases, users must move assets across different blockchain networks to interact with a new protocol. This process involves using Cross-Chain Bridges: How They Work and Why They Get Hacked. Projects often reward users who bridge capital early, as it demonstrates a willingness to test new infrastructure.

Once eligibility is finalized, users typically claim their tokens through a web interface. The underlying smart contract uses a cryptographic structure called a Merkle tree to verify claims. The contract contains a root hash representing all eligible wallets and their respective allocations. When a user connects their wallet and initiates a claim, the interface generates a cryptographic proof. The smart contract verifies this proof against the root hash before releasing the tokens.

Sybil Resistance: Filtering Out the Bots

As airdrops became lucrative, users began attempting to game the system through a Sybil attack. In a blockchain context, a Sybil attack occurs when a single entity creates hundreds or thousands of pseudonymous wallets to simulate widespread user adoption and capture a larger share of a token distribution.

To ensure tokens reach genuine users, projects employ complex Sybil resistance mechanisms. These filters analyze on-chain data to identify and exclude automated or clustered behavior.

One common filtering method is funding source analysis. If a user funds 100 different wallets from a single exchange address or a single centralized wallet, analysts can cluster these addresses together and flag them as a likely Sybil attacker.

Behavioral clustering is another technique. If dozens of wallets execute the exact same sequence of transactions—such as bridging funds, making a single swap, and depositing into a specific liquidity pool—within a narrow time frame, they are often disqualified.

Projects also look at wallet age and broader on-chain history. A wallet that has existed for years, holds various non-fungible tokens, and regularly pays gas fees on the Ethereum ($ETH) network is considered high-quality. Conversely, a wallet created 24 hours before a snapshot with exactly one transaction is highly likely to be filtered out.

Tax Implications for Recipients

Receiving an airdrop creates immediate tax obligations in most jurisdictions. Tax authorities generally treat airdropped tokens as ordinary income at the time the recipient gains control of the assets.

In the United States, the Internal Revenue Service (IRS) addressed this in Revenue Ruling 2019-24. The IRS states that a taxpayer has gross income from an airdrop when they acquire dominion and control over the cryptocurrency. Dominion and control mean the user has the ability to transfer, sell, exchange, or otherwise dispose of the tokens.

Similarly, His Majesty's Revenue and Customs (HMRC) in the United Kingdom outlines that the tax treatment depends on whether the recipient provided a service to obtain the tokens. If the airdrop is received in exchange for a service, it is subject to Income Tax. If it is received without doing anything in return, it may not be subject to Income Tax upon receipt, but will be subject to Capital Gains Tax upon disposal. Tax rules change frequently, and specific liabilities depend on individual circumstances.

Consider a worked numeric example for a US tax resident. Assume a user receives 1,000 tokens from a protocol. At the exact time the tokens become liquid and the user gains dominion and control, the market price is $1.50 per token. The user recognizes $1,500 in ordinary income for that tax year.

If the user holds the tokens and later sells them for $2.00 each, the $500 difference is treated as capital gains. Conversely, if the price falls to $1.00 and the user sells, they claim a $500 capital loss. This calculation assumes the tokens have immediate liquidity and the user has full control over the asset.

Risks and Attack Vectors

Participating in airdrops and points programs exposes users to significant security and financial risks.

The most prominent risk is phishing. Scammers routinely create fake websites that mimic legitimate protocol claim pages. They promote these malicious links through compromised social media accounts or deceptive search engine advertisements. When a user connects their wallet to a fake claim page and signs a transaction, they are actually authorizing a malicious smart contract to drain their existing assets.

Smart contract risk is also a factor. The contracts designed to distribute tokens can contain vulnerabilities. If a contract is poorly audited, attackers may exploit it to steal the allocated tokens before legitimate users can claim them.

Financially, users face opportunity costs. Earning points often requires locking capital in unproven protocols for months. This capital is exposed to the protocol's inherent smart contract risks and cannot be deployed elsewhere to generate yield.

Finally, recipients face price volatility. Airdrop events are highly anticipated, and the moment a token becomes tradable, a significant portion of recipients will sell their allocations to lock in profits. This creates immediate downward pressure on the token's price. To mitigate this, some projects implement vesting schedules, where tokens are unlocked gradually over months or years, rather than all at once.

Common Misconceptions

Points guarantee a token airdrop. Points are off-chain metrics controlled entirely by the protocol's developers. There is no legal or technical guarantee that points will ever be converted into a tradable cryptocurrency. Developers can change the conversion ratio, dilute the points pool, or cancel the program entirely.

Airdrops are free money. Qualifying for an airdrop requires capital, time, and the payment of network transaction fees (gas). Furthermore, the receipt of tokens triggers tax liabilities. If a token's price crashes after the user claims it, the user may owe more in income tax than the tokens are currently worth.

Using more wallets guarantees more tokens. While this was true in the early days of decentralized finance, modern Sybil resistance mechanisms are highly sophisticated. Splitting capital across multiple wallets often results in all associated wallets being disqualified, leaving the user with zero allocation and wasted transaction fees.

How This Connects to the Market

Airdrops and points programs are fundamental drivers of short-term liquidity in the cryptocurrency market. When a high-profile project announces a points program, capital rapidly flows into its ecosystem. This can artificially inflate the total value locked (TVL) in a protocol, making it appear more successful than its organic user base would suggest.

Once the token is distributed, this mercenary capital often exits. The protocol's TVL drops, and the token price must find an equilibrium based on actual utility rather than speculative farming. For institutional investors and market analysts, distinguishing between organic growth and airdrop-driven metric inflation is a critical component of evaluating a protocol's long-term viability.