The way they usually work is they give you some string and you sign it to prove you own the address.
Could a malicious air drop make a transaction sending all your BTC to them, and then you sign it, and then they broadcast it to the network?
Or is signing a message different than signing a transaction?
be careful of frauds that often occur in crypto ... many ways they do to cheat crypto users ... don't let us give something that can be self-destructive just because of a big offer and in the end we don't get anything from it even we lose because it has become their victims ... and in my knowledge while participating in various airdrops, just asking for KYC and following their social media accounts ... that's all I do if I follow airdrop .