How to Spot a Rug Pull Crypto Scam: 7 Red Flags to Check Before You Buy
Rug pulls drain crypto investors in minutes. Learn how to spot a rug pull with 7 red flags, from unlocked liquidity to anonymous teams, before you buy.
Table Of Content
A rug pull is a crypto scam where a project’s creators suddenly drain its value and leave buyers holding tokens worth little or nothing. Most can be spotted before you invest, if you know what to look for.
Understanding how crypto rug pulls happen and spotting early red flags can help you protect your assets before you buy a new token. New tokens can launch, spike in value, and collapse within hours. A few minutes of checking can be the difference between a bad pick and a total loss.
What Is a Rug Pull and How Does It Work?
A rug pull happens when a token’s creators, or others with special control over it, drain the project’s value by pulling out the funds backing the token, dumping their own holdings, or using code that stops others from selling. This leaves holders with worthless tokens. The term comes from the effect’s resemblance to having the rug pulled out from under you.
At its core, a rug pull exploits the decentralised, permissionless nature of Web3. When developers launch a token on a Decentralised Exchange (DEX), they typically create a liquidity pool by pairing their new token with an established asset like Ethereum (ETH) or Tether (USDT). Investors swap their ETH or USDT for the new token, depositing real value into the pool.
In a typical rug pull, scammers list a token in a liquidity pool, a shared pot of crypto that lets people trade it, to make it look legitimate. Social media hype and FOMO push people to buy before checking. Once enough money is in, the insiders cash out.
Three Common Versions of Rug Pulls
- Liquidity Stealing (Hard Rug Pull): This is the most common type. The creators withdraw the funds from the trading pool in a single transaction. Token holders are immediately left unable to swap back.
- Honeypot Smart Contracts: The code is maliciously programmed so that only specific creator wallets can sell. Regular buyers can purchase the token, but their sell orders continuously fail.
- Soft Rug Pulls (Slow Draining): Instead of an abrupt steal, developers slowly sell off large token reserves or quietly drain liquidity over time while making empty promises about roadmaps and partnerships.
Crypto Rug Pull Red Flags: 7 Warning Signs
Before committing funds to an early-stage token or memecoin, check for these critical warning signs:
- Anonymous or unverifiable team: If team members use pseudonyms, AI-generated profile pictures, or have untraceable track records, exercise extreme caution. While anonymity is common in Web3, most successful rug pulls come from developers who use completely unverified identities.
- Promises of huge, fast returns: Be sceptical of projects offering astronomical returns, guaranteed yields, or massive fixed APYs. Sustainable crypto yields are generated through market activity, not mathematical promises from new tokens.
- No security audit: Third-party audits help find smart contract vulnerabilities, and projects that skip them or hide the reports raise concerns. Without an independent security audit, the code could contain hidden backdoors. Be wary of fake or paid self-audits. Legitimate audits come from reputable Web3 security firms (like Hacken or CertiK) and can be verified directly on the auditor’s platform.
- Unlocked liquidity: Unlocked liquidity lets developers withdraw funds at a moment’s notice. Locked liquidity is not a guarantee, but its absence is a warning. Unlocked liquidity is the single biggest mechanical risk on a DEX.
- Concentrated Token Distribution: Check the token distribution on a block explorer. If the top 5-10 non-exchange wallets hold more than 20%–30% of the total supply, that’s a red flag. When a small number of wallets control a large share, the token is exposed to manipulation or sudden sell-offs.
- Suspicious on-chain activity: Dangerous smart contract functions include hidden minting capabilities (allowing creators to print an infinite supply), variable sell taxes (which can be secretly raised to 99%), or wallet-whitelisting functions that block selling.
- Hype that looks organised: If the token marketing relies heavily on paid social media shill accounts, Telegram spam, and deepfake celebrity endorsements rather than functional technology or real utility, the project is likely a short-term trap.
No single flag proves a scam, but several together are reasons to walk away.
How to Check a Token in Five Minutes
- Paste the contract address into a block explorer like Etherscan, Solscan, or BscScan to confirm the contract source code is verified and publicly viewable.
- Check the liquidity lock. Use lock-verification platforms like DexScreener, DappRadar, and Unicrypt to confirm liquidity is locked for at least 6–12 months.
- Before investing significant capital in a token, buy a tiny amount (e.g., $1) and immediately try to sell it back to confirm the smart contract allows selling. If a token’s first buyers can’t sell, you’ll find out cheaply.
- Use tools like TokenSniffer, Honeypot, or GoPlus Security to scan for hidden fees, blocklist functions, and disabled transfers.
- Look for a smart contract audit and verify the auditor’s name and website.
Are Rug Pulls Getting Worse? What the Data Shows
The answer depends on who counts. Researchers argue no reliable global total exists because they count different behaviours and thresholds.
DappRadar reported a 66% year-on-year drop in rug pulls in early 2025, with each incident getting larger. So, while the total number of individual rug pull attempts has declined, the financial impact per incident has grown larger.
A separate Solana study flagged 76,469 candidate rug-pull tokens out of 100,063 issued on three decentralised exchanges in early 2025, with at least $151 million in traceable losses.
As automated tools make hard rug pulls easier to detect, soft rug pulls have risen, accounting for a growing share of overall scam volume.
What to Do If You Have Been Rugged
If you fall victim to a rug pull, recovering funds is difficult. Here’s what you can do:
- Revoke Wallet Permissions: Immediately use tools like Revoke.cash to cancel all smart contract allowances associated with the token to prevent secondary wallet drains.
- Document Everything: Save transaction hashes, contract addresses, website screenshots, and Telegram/Discord chats.
- Report the Incident: File reports with local authorities (e.g., the FBI IC3 in the US) and submit details to chain analytics platforms to flag the attacker’s wallet addresses across major central exchanges.
A normal market crash happens organically when sellers outnumber buyers in a legitimate market, pushing the price down. A rug pull is an intentional crime in which creators drain the underlying liquidity pool, exploit smart contract permissions, or dump pre-mined tokens to steal investor funds.
Not necessarily. Many successful crypto projects launch with anonymous (anon) founders to protect their privacy. However, anonymous teams carry a much higher baseline risk because they lack legal recourse or real-world identity accountability if things go wrong.
You can use token scanners like TokenSniffer or GoPlus Security to scan smart contract code for hidden fees or mint functions. Additionally, platforms like DexScreener and DEXTools allow you to inspect transaction history, while blockchain explorers let you verify whether liquidity tokens are actually locked.
In most cases, recovering funds from a rug pull is extremely difficult. Because decentralised exchanges operate via self-executing smart contracts and transactions are pseudonymous, they usually lack a central customer support desk or chargeback mechanism.
