Rabby Wallet has introduced a mobile feature that lets users remove scam tokens from their portfolio by long-pressing on them. The update was announced on Rabby's official X account on October 22, 2026, with the post: “Long press to delete scam tokens.”
What the feature does
Rabby is a self-custodial wallet for EVM networks, developed by OPCODE LABS PTE. LTD. The new mobile feature allows users to long-press a token in their portfolio to remove it or hide it from view. The change is also reflected in the wallet's recent iOS App Store update, where the version history lists “Supports removing scam tokens.” No specific tokens or partnerships were announced with the rollout.
Why scam tokens are a problem
On public blockchains, anyone can send tokens to any address without the recipient's consent. Scammers exploit this by airdropping worthless or malicious tokens into thousands of wallets, hoping recipients will interact with them. A related tactic, address poisoning, involves sending a transaction from an address that resembles one the user has previously used, aiming to trick them into copying the wrong address from their history when sending funds later.
Building on existing anti-scam tools
Rabby has automatically flagged suspicious, unsolicited transaction entries with a “Scam Tx” label since at least 2023. Desktop users could already hide unwanted tokens through Rabby's browser extension, but mobile users previously lacked the same easy control over their portfolio display.
The wallet's broader security suite includes real-time simulation, which previews a transaction's effects before signing; risk scanning, which checks addresses and contracts for warning signs; and one-click approval revocation, which lets users cancel permissions previously granted to smart contracts. Approval revocation is particularly important because many decentralized apps request permission to move certain tokens on a user's behalf, and if such an app is compromised or malicious, that permission becomes a liability.
What it means for users
Removing a token from view does not remove it from the blockchain; the token remains at the user's address on-chain. What changes is the wallet interface. In a self-custody setup, users bear full responsibility, and there is no customer service desk to reverse a bad signature. Design choices like warnings, previews, and easy cleanup tools therefore form a meaningful part of a wallet's security. It remains to be seen whether hiding scam tokens will eventually become automatic rather than manual; for now, Rabby flags suspicious activity and lets users decide what to clear.
