Why Scams Thrive in Crypto
Crypto is permissionless, fast, and irreversible — which is exactly what scammers exploit. A rug pull is when a project's creators abandon it and run off with investors' money, typically by draining liquidity or dumping their tokens. Combined with honeypots, fake teams, and pump-and-dumps, scams cost investors billions. The good news: most follow recognizable patterns you can learn to spot.
The Main Types of Rug Pulls and Scams
Liquidity Pull
Developers remove the liquidity backing a token, making it impossible to sell and crashing the price to zero. This is the classic "rug."
Honeypot
The token's contract is coded so that you can buy but never sell. The chart looks like it only goes up — because no one can exit.
Pump-and-Dump
Insiders accumulate cheaply, hype the token to attract buyers, then dump on the crowd. Common with anonymous "influencer" coins.
Fake Projects & Impersonation
Cloned websites, fake token contracts, and impersonated teams designed to look like a legitimate project. Learn the mechanics in our phishing guide.
Red Flags in the Team and Project
- Anonymous team with no verifiable track record.
- Guaranteed or "risk-free" returns — a hallmark of a scam.
- Copy-paste whitepaper, vague roadmap, or no real product.
- Aggressive hype and urgency ("last chance," "1000x guaranteed").
- Bought engagement — huge follower counts with fake, low-quality comments.
Red Flags in the Tokenomics
- Team holds a large share of supply with no lock-up or vesting.
- Unlocked liquidity that developers can withdraw at any time.
- Tiny number of holders, with a few wallets owning most of the supply.
- Mint function that lets the team create unlimited new tokens.
Red Flags in the Smart Contract
- No audit from a reputable firm (and beware fake audit claims).
- High or changeable transaction taxes, or code that blocks selling (honeypot).
- Owner privileges to pause trading, blacklist wallets, or change fees.
- Unverified contract source code.
Tip: Use a token-scanner/honeypot-checker before buying any new token, and verify liquidity is locked and holdings are distributed.
A Due-Diligence Checklist (DYOR)
- Team: Are they public and credible? Any prior projects?
- Product: Does something real exist, or just promises?
- Contract: Verified and audited? Any owner backdoors?
- Liquidity: Locked, and for how long?
- Holders: Is supply well-distributed, or whale-dominated?
- Community: Genuine discussion, or bots and price-only hype?
- Can you sell? Test with a tiny buy and immediate sell where possible.
Habits That Keep You Safe
- Never invest because of FOMO or a stranger's DM.
- Use a separate burner wallet for risky new tokens.
- Revoke token approvals you no longer use.
- Assume anything promising guaranteed high returns is a scam until proven otherwise.
- Verify prices and legitimacy on the markets dashboard and reputable data sources.
If You've Been Scammed
On-chain transactions are irreversible, so recovery is rare. Immediately move any remaining funds to a fresh wallet, revoke approvals granted to the malicious contract, and be extremely wary of "recovery services" — most are secondary scams targeting victims.
Final Thoughts
The single best defense against rug pulls is patience and process. Legitimate projects welcome scrutiny; scams rely on urgency and hype to stop you from doing your homework. Run every new token through the checklist above, keep risky bets in a burner wallet, and remember: if it sounds too good to be true, it is.