I also very often see tokens going into the wallet by themselves without following anything and not knowing it at all, and that is a sign that the token is a scam, because entering for free unexpectedly is something to be suspicious of even if it should be ignored in the end.
Very often, the name of such coins consists of the domain name. Scammers specifically act in such a way that after you failed to exchange such a coin for DEX, you will go to the domain of the same name and connect your wallet there. After that, coins will be withdrawn from your wallet.