If you go to https://bscscan.com and enter your BSC address there and click the scan button,You will probably see a list of tokens that you have not bought its yet and no one has sent them to you yet.Here I will show you a list of its that there have been many reports that those are scams:
1)ABFIN.org
Contract address: 0xb8a9704d48c3e3817cc17bc6d350b00d7caaecf6
2)AirStack.net
Contract Address:
0x8Ee3E98DCCeD9f5D3Df5287272f0b2d301D97C57
3)ALPACAFIN.COM
Contract Address:
0x373233A38ae21cF0C4f9DE11570E7D5Aa6824A1E
4)BestAir.io
Contract Address:
0xbC6675DE91e3DA8eAc51293ecb87c359019621CF
5)BNBW.IO
Contract Address:
0x5558447b06867ffebd87dd63426d61c868c45904
6)BSCTOKEN.IO
Contract Address:
0x569b2cf0b745ef7fad04e8ae226251814b3395f9
7)TheEver.io
Contract Address:
0x5190b01965b6e3d786706fd4a999978626c19880
8)BonusWallet.org
Contract Address:0x4e1191fa01bb4ec0dcca114a958bf5c204c285fb
9)Zepe.io
Contract Address: 0xb0557906c617f0048a700758606f64b33d0c41a6
any trying to withdraw or move this token via your website could lead to a loss of funds.