Is it safe?

Closing empty token accounts is one of the safest operations on Solana. But “the operation is safe” and “this tool is safe” are different questions, and conflating them is how people lose wallets.

What does closing an account actually do?

It calls one instruction, CloseAccount, in the SPL Token program. That instruction transfers the account's lamports to a destination and deletes the account.

What it does not do: it does not touch your other accounts, it does not move your tokens, and it does not alter your transaction history. Your on-chain record is permanent — closing an account removes the account, not the evidence that it existed.

The instruction has one hard precondition: the token balance must be zero. If tokens remain, the instruction fails. That is enforced by the token program itself, not by whatever tool is calling it, which means no tool can close an account out from under a balance. Accounts that fail that test, and the handful that are exceptions for other reasons, are covered in what you can't reclaim.

What can a non-custodial tool not do?

It cannot do anything you have not signed.

This is worth being precise about, because “non-custodial” gets used loosely. It means the tool never holds your private key. It constructs a transaction and hands it to your wallet; your wallet shows you what is in it; you sign or you don't. Without your signature the transaction does not exist.

So a genuinely non-custodial tool cannot move your SOL, cannot transfer your tokens, and cannot act later without you. The security question is therefore not “can this tool be trusted with my funds” — it never has them. The question is narrower and more answerable: is the transaction it is asking me to sign the one I think it is?

How do I read the transaction before I sign?

Your wallet simulates the transaction and shows you the expected result before you approve. Read that screen. It is the single highest-value habit in this entire subject.

What you want to see for a cleanup:

• CloseAccount, repeated once per account you selected
• A balance change that is positive — SOL arriving, not leaving
• The destination being your own address

What should stop you cold:

• SetAuthority on your token accounts. This hands control of an account to someone else. It has legitimate uses; a wallet cleaner asking for it does not.
• Approve or a delegate being set on accounts holding real value. This grants someone permission to move tokens later, without another signature from you.
• Transfer instructions moving tokens you did not intend to move.
• A simulated result showing your balance going down.
• Anything you cannot see at all, because the wallet could not simulate it.

If a tool's transaction contains instructions beyond closing accounts and paying the disclosed fee, that is a question worth having answered before signing, not after.

Where are the real risks?

Three, in descending order of how often they actually bite people.

Phishing sites. By far the biggest. Cleaner tools attract clones precisely because their users arrive already intending to sign something. A cloned site looks identical, and the transaction it builds drains rather than closes. Typing the URL or using a bookmark defeats this entirely, which is why it is worth the two seconds.

Signing without reading. Wallets show you the transaction. Clicking through it out of habit is what turns a phishing site from an annoyance into a loss.

Burning something valuable. Cleanup flows sometimes offer to burn dust so the account can be closed. Burning is irreversible. Spam tokens frequently impersonate real ones, and the reverse mistake — burning something real because it looked like spam — costs more than the rent was ever worth. Verify the mint address on a block explorer before burning anything you are not certain about. The mistakes that cost people SOL covers this case in detail.

What about approvals I granted in the past?

Worth knowing: a delegate approval granted at some point in the past stays active until it is revoked. If you have used a lot of protocols, you may have standing approvals you have forgotten about, and those are independent of anything a cleaner does.

Reviewing and revoking old approvals is a separate piece of wallet hygiene from reclaiming rent, but it belongs in the same afternoon. Block explorers and several wallet interfaces will show you what is currently delegated.

What is the one rule that covers most of it?

Verify the URL, then read the transaction.

Almost every real loss in this category traces back to failing one of those two. Everything else — which tool, what fee, which wallet — is a preference. Those two are the actual safety layer, and they are entirely under your control.

Frequently asked questions

Can a wallet cleaner steal my tokens?

Not without a signature from you. What it can do is ask you to sign something other than what you expect, which is why reading the transaction matters more than trusting the brand.

Is it safer to use the CLI?

Differently risky. There is no third-party site involved, but your private key sits in a file on your machine rather than in a wallet's secure storage. Neither is strictly safer; the three ways to close token accounts compares them.

Does closing an account affect my transaction history?

No. On-chain history is permanent and public. Closing removes the account, not the record.

Can I check my wallet without connecting it?

Yes. Balances are public data. Any tool requiring a connection merely to display a number is asking for more access than the task requires.