How to Spot Rug Pulls Before You Buy a Crypto Token

To spot a rug pull, check four things before you buy any new token: whether the liquidity is locked or burned (and for how long), whether a few wallets hold most of the supply, whether the contract lets the creators mint new tokens, block selling or freeze wallets, and whether the team and community are real. One red flag is a reason for caution. Several together usually mean walk away. None of these checks can make a token safe, so only ever put in money you can afford to lose completely.

Below is what a rug pull actually is, the red flags in order of importance, and a short routine you can run in about 15 minutes.

What is a rug pull and how does it work?

A rug pull is when the people behind a crypto project take investors' money and abandon it, leaving the token worth little or nothing. They are most common with new meme coins and small tokens on decentralized exchanges, where anyone can launch a token in minutes with no checks.

Most rug pulls fall into a few patterns:

• Liquidity pull: a token trades against a liquidity pool (for example, the token paired with ETH, BNB or SOL). If the creators control the pool, they can withdraw it in one transaction. The price collapses because there is nothing left to sell into.
• Honeypot: the contract lets you buy but quietly blocks you from selling, or charges a sell tax close to 100 percent. The chart looks great because only buys go through.
• Dev dump (soft rug): insiders hold a large share of the supply, hype the token, then sell into the buying. The project slowly goes quiet.
• Hidden mint or freeze: the creators keep the power to print unlimited new tokens, or to freeze or blacklist wallets, and use it once enough money has come in.

The Squid Game token in 2021 is a widely reported example: it rode the popularity of the TV series, buyers found they could not sell, and the creators vanished with millions of dollars as the price fell to almost zero. The warning signs (anonymous team, sloppy website, a contract that restricted selling) were visible beforehand.

The biggest rug pull red flags in crypto

Ranked roughly by how much damage they can do:

1. Liquidity that is not locked. If the liquidity pool tokens are not locked in a known locker or burned, the creators can pull them at any moment. A lock that ends in a few days is barely better than none.
2. Concentrated holdings. If the top 10 wallets (excluding the liquidity pool and known exchange or locker contracts) hold a large majority of the supply, a handful of people can crash the price.
3. Dangerous contract permissions. Watch for the ability to mint new tokens, change taxes, pause trading, or blacklist and freeze wallets. On Solana, check whether the mint authority and freeze authority have been revoked.
4. You cannot sell, or selling is taxed heavily. If token scanners or other buyers report failed sells or extreme sell taxes, treat it as a honeypot.
5. An unverified contract. If the source code is not verified on the block explorer, you cannot see what it does.
6. Anonymous team with no track record. Anonymity is common in crypto and not proof of a scam, but it removes accountability.
7. Fake proof. Screenshots of a liquidity lock instead of a link you can check, audit badges with no report, or an audit from a firm you cannot find.
8. Manufactured hype. Thousands of followers with almost no real replies, chats full of bots repeating the same lines, and pressure to "buy before it moons."
9. Promises that are too good. Guaranteed returns, "can't go down" claims, or a game, app or ecosystem that is always about to launch.

How to check a token for a rug pull, step by step

You do not need to read code to do most of this. Use a block explorer for the token's chain (Etherscan for Ethereum, BscScan for BNB Chain, Solscan for Solana) and a chart site that shows liquidity and holders.

1. Confirm the contract address. Copy it from the project's official channels and compare it with what you are about to buy. Copycat tokens with the same name and logo are everywhere.
2. Run it through a free token scanner. These sites flag honeypot behavior, sell taxes, mint and freeze permissions and ownership status in seconds. They can be wrong, so treat a clean result as a starting point, not a verdict.
3. Check the liquidity. Find the liquidity pool and see whether its tokens are locked (and until when) or burned. Click through to the lock itself rather than trusting a screenshot.
4. Open the holders list. Look at the top 10 to 20 wallets. Skip the pool and locker contracts, then add up what is left. Look for many wallets funded from the same source, which often means one person split their holdings to hide it.
5. Look at contract ownership. Renounced ownership removes some risks, but check that no hidden functions remain. A multisig still means the team controls the contract, so find out who the signers are.
6. Read the recent transactions. Large transfers from the deployer to new wallets or exchanges just before or after launch are a warning.
7. Check the people and the community. Search the team's names and handles. Read the chat for real questions and real answers. Ask a direct question about liquidity and see whether you get an answer or get banned.
8. Look at the chart. A near vertical line with almost no red candles can mean sells are blocked. Long upper wicks and repeated sharp drops can mean insiders are selling into buyers.

A worked example: checking a token in 15 minutes

Alex sees a new dog-themed token trending on social media, up 900 percent in a day. Friends in a group chat are buying. Before spending $200, Alex runs the routine.

• Address: matches the one posted in the official channel. Good.
• Scanner: flags that the owner can change the sell tax, and ownership is not renounced.
• Liquidity: the project posts a screenshot saying "liquidity locked," but Alex cannot find a lock on any locker linked from the token page. Only a screenshot exists.
• Holders: after excluding the pool, the top 8 wallets hold about 70 percent of the supply, and five of them were funded from the same wallet within minutes of launch.
• Chart: almost every candle is green, and a few people in the chat complain their sells failed.

Any one of these would justify caution. Together they look like a likely rug pull or honeypot. Alex skips it. Two days later the price is down more than 95 percent and the project's channel is deleted. The check took 15 minutes and cost nothing.

Common mistakes people make with new tokens

• Trusting a clean scanner result as proof. Scanners miss things, and scams adapt. Use them alongside the manual checks.
• Believing screenshots. Locks, audits and partnerships should all be verifiable on-chain or on the auditor's own site.
• Buying the copycat. Always confirm the contract address from the official source.
• Chasing a green chart. Sharp gains attract buyers, which is exactly when insiders want to sell.
• Thinking "renounced" means safe. Renounced ownership does nothing if insiders hold most of the supply or the liquidity can still be pulled.
• Connecting your main wallet to unknown sites. Use a separate wallet with only what you are willing to risk, and never share your seed phrase with anyone.

Common questions

How do you identify a rug pull before it happens?

Look for liquidity that is not locked (or locked only briefly), a few wallets holding most of the supply, contract permissions that allow minting, freezing or blocking sells, and an unverifiable team. You cannot predict every rug pull, but these checks catch many of the obvious ones. If several flags appear together, do not buy.

Can you fix or recover money from a rug pull?

Usually not. Blockchain transactions cannot be reversed, and the creators are often anonymous. You can report it to the platforms involved and, in many countries, to police or financial regulators, and keep records of your transactions in case they are needed later. Be very wary of anyone offering to "recover" your funds for a fee, because these recovery offers are a common follow-up scam.

Is a locked liquidity pool always safe?

No. Locked liquidity stops one type of rug pull, but insiders can still dump large holdings, the contract may let them mint new tokens or change taxes, and locks can be short or fake. Check how long the lock lasts and verify it yourself.

Are all anonymous crypto projects scams?

No. Many legitimate crypto projects have anonymous or pseudonymous founders. Anonymity just means you have less recourse, so the on-chain checks (liquidity, holders, permissions) matter even more. This is general information, not financial advice, so for decisions involving real savings, talk to a qualified financial professional.