How to Spot a Crypto Rug Pull: 15 Warning Signs Before You Lose Money
Learn to identify crypto rug pulls before they happen. Spot the 15 most common warning signs, check smart contracts for hidden functions, and protect your investments from scams.
What You'll Learn
- 1Check the team's identity and track record
- 2Audit the smart contract
- 3Examine liquidity and lock status
- 4Analyze the token distribution
- 5Evaluate the marketing vs. product ratio
- 6Verify the project has real utility and community
Step-by-Step Guide
1Check the team's identity and track record
Verify whether the project team is publicly identified with real names, LinkedIn profiles, and verifiable professional histories. Anonymous teams are not automatically scams, but they remove a critical layer of accountability.
Search for the founders' names on LinkedIn, YouTube, and Google. Real builders have digital footprints that predate the project. AI-generated team photos on websites are an immediate red flag.
2Audit the smart contract
Check whether the contract is verified and readable on the blockchain explorer. Look for dangerous functions like mint (unlimited token creation), blacklist (blocking sells), or owner-only withdrawal functions.
Use Token Sniffer or GoPlus Security to scan any token contract automatically. These tools flag common rug pull functions in seconds.
3Examine liquidity and lock status
Verify that liquidity is locked in a time-locked contract and not held by a wallet the team controls. Check the lock duration, the amount locked, and the platform used for locking.
Unlocked liquidity means the team can drain the trading pool at any time. Even locked liquidity with a short duration (under 6 months) is suspicious.
4Analyze the token distribution
Check the top holders on the blockchain explorer. If a small number of wallets control a large percentage of supply, the price can be manipulated easily through coordinated selling.
If the top 10 wallets (excluding known exchange and contract addresses) hold more than 50% of the supply, the token is highly concentrated and vulnerable to manipulation.
5Evaluate the marketing vs. product ratio
Compare how much effort goes into marketing versus actual development. Projects that spend heavily on influencer promotions, paid Telegram groups, and social media hype while having minimal GitHub activity are prioritizing token price over product building.
If you first heard about a project from a paid influencer promotion or an unsolicited message, treat it with maximum skepticism.
6Verify the project has real utility and community
Confirm the project has a working product, real users, and a community that discusses technology, not just price. Check for organic social engagement, developer contributions, and third-party integrations.
Ask a technical question in the project's Discord or Telegram. If the response is defensive, dismissive, or redirects to 'buy now before it moons,' the community is focused on speculation, not building.
A rug pull occurs when crypto project creators abandon the project after stealing investor funds, typically by draining liquidity from a decentralized exchange or dumping their token allocations. Over $6 billion has been lost to rug pulls since 2020. Learning to recognize the warning signs can save you from becoming a victim.
Rug pulls are one of the most common ways people lose money in crypto. Unlike market downturns where you can recover, a rug pull means your investment goes to zero permanently. Take these warning signs seriously.
What Is a Rug Pull?
A rug pull is a type of exit scam where project developers create a cryptocurrency token, build hype to attract investors, and then steal the funds. The name comes from the expression "pulling the rug out from under someone."
Types of Rug Pulls
Liquidity Pull
The team removes liquidity from the DEX trading pool, making the token unsellable. This is the most common type and can happen in seconds.
Sell Restriction
Hidden code prevents anyone except the developers from selling. Investors can buy but can never sell their tokens. The price appears to rise while victims are trapped.
Dump and Abandon
The team holds a large percentage of tokens, pumps the price through marketing, then sells their entire allocation at once, crashing the price and disappearing.
The 15 Warning Signs
Warning Signs 1-5: Team and Project Red Flags
Anonymous team with no verifiable history
While some legitimate projects have anonymous teams (Bitcoin, for example), the vast majority of rug pulls use anonymity to avoid accountability. If the team is anonymous, every other warning sign carries more weight. Check for AI-generated profile photos by reverse-searching images on Google.
No working product, only promises
The project has a flashy website and ambitious roadmap but no actual working product. The token launched before any code was deployed. Legitimate projects typically build first and launch tokens later. Scams do the opposite.
Copied or plagiarized whitepaper
The whitepaper contains sections directly copied from other projects. Run key paragraphs through a search engine. Many scam tokens copy-paste from Bitcoin, Ethereum, or Solana whitepapers with minimal changes.
Unrealistic promises of guaranteed returns
Promises of "100x guaranteed," "risk-free investment," or specific return percentages are the hallmark of scams. No legitimate project can guarantee returns. Markets are inherently unpredictable.
Aggressive urgency and FOMO tactics
"Buy now before it is too late," countdown timers, "limited allocation remaining," and similar pressure tactics are designed to prevent you from doing research. Legitimate investments do not need urgency marketing.
Warning Signs 6-10: Financial and Technical Red Flags
Unlocked or short-term locked liquidity
Liquidity is the trading pool that allows buying and selling. If liquidity is not locked in a time-locked smart contract, the team can drain it instantly. Even locks under 6 months should be treated with suspicion.
Extreme token concentration
A small number of wallets hold the majority of tokens. Check the blockchain explorer. If the top 10 wallets (excluding exchange hot wallets and known contracts) control more than 50% of supply, a coordinated dump is possible at any time.
Unverified or unaudited smart contract
The contract source code is not verified on Etherscan or the relevant blockchain explorer. This means you cannot read what the contract actually does. Unaudited contracts can contain hidden functions that steal funds.
Honeypot code (buy but cannot sell)
The contract contains functions that restrict selling. You can buy the token, but when you try to sell, the transaction fails. The token "sniffer" tools listed below can detect most honeypot contracts automatically.
No renounced ownership or admin keys
The contract owner has special privileges like minting unlimited tokens, pausing trades, or blacklisting addresses. If ownership has not been renounced or transferred to a DAO, the team retains centralized control.
Warning Signs 11-15: Community and Marketing Red Flags
Paid influencer promotions everywhere
The project is being promoted by multiple paid influencers who typically shill short-lived tokens. These influencers are paid upfront and face no consequences when the token collapses. They often use phrases like "not financial advice" while explicitly telling you to buy.
Censored community channels
Questions about the team, tokenomics, or technical details get deleted from Telegram or Discord. Users asking legitimate questions get banned. Legitimate projects welcome scrutiny. Scams silence it.
Bot-inflated social metrics
Tens of thousands of followers but almost no genuine engagement. Comments are generic ("Great project!", "To the moon!") from accounts with no history. Use social analysis tools to check for bot activity.
No GitHub or development activity
The project claims technical innovation but has no public code repository, or the repository has minimal activity, few commits, and no external contributors.
Copycat branding of legitimate projects
The project name, logo, or website closely mimics an established project to confuse investors. Examples include tokens named similar to well-known projects but with added words or slight misspellings.
How to Check a Token Before Buying
Step-by-Step Verification Process
- Get the contract address from CoinGecko (not from social media or DMs)
- Scan with Token Sniffer (tokensniffer.com) for automated rug pull detection
- Check GoPlus Security (gopluslabs.io) for honeypot and malicious function detection
- Verify the contract on Etherscan/BscScan. Click "Contract" and confirm source code is verified
- Check liquidity on DEXScreener (dexscreener.com). Look for locked liquidity indicators
- Review holder distribution on the blockchain explorer. Check top wallets
- Search for the project on RugDoc (rugdoc.io) for community reviews
- Cross-reference STRICT score on Coira for projects that are tracked
Automated Scanning Tools
| Tool | What It Checks | Cost | URL | |------|----------------|------|-----| | Token Sniffer | Contract analysis, similar tokens, audit | Free | tokensniffer.com | | GoPlus Security | Honeypot detection, owner privileges, tax | Free | gopluslabs.io | | DEXScreener | Liquidity, holders, transaction history | Free | dexscreener.com | | RugDoc | Community reviews, risk ratings | Free | rugdoc.io | | Bubblemaps | Wallet clustering, hidden connections | Free | bubblemaps.io | | Coira | STRICT scores, fundamental analysis | Free tier | coira.io |
At minimum, before buying any new token: (1) scan on Token Sniffer, (2) check holder distribution on the explorer, (3) verify liquidity is locked on DEXScreener. This takes under 5 minutes and catches the majority of obvious rug pulls.
Smart Contract Red Flags Explained
Understanding what to look for in a smart contract can protect you even if you cannot read Solidity code. Here are the most dangerous functions:
Dangerous Contract Functions
| Function | What It Does | Risk Level |
|----------|--------------|------------|
| mint() (unrestricted) | Creates unlimited new tokens, diluting holders | Critical |
| blacklist() / exclude() | Blocks specific addresses from selling | Critical |
| setMaxTxAmount() | Can restrict maximum sell amount to near-zero | High |
| setFee() (unrestricted) | Can set sell tax to 99%, making selling worthless | High |
| pause() | Can halt all trading at will | High |
| proxy / upgradeable | Contract logic can be changed after deployment | Medium-High |
| owner (not renounced) | Single address controls privileged functions | Medium |
Upgradeable proxy contracts allow the team to change the contract logic after deployment. A contract that looks safe today can be modified to include rug pull functions tomorrow. Check whether the contract uses a proxy pattern and whether the upgrade authority is controlled by a multisig or DAO.
Real Examples of Rug Pulls
Learning from past rug pulls helps you recognize patterns:
Notable Cases
| Project | Year | Amount Lost | Warning Signs Present | |---------|------|-------------|----------------------| | Squid Game Token | 2021 | $3.4M | Honeypot code, could not sell, anonymous team, hype-based marketing | | AnubisDAO | 2021 | $60M | Anonymous team, unlocked liquidity, launched with no product | | Meerkat Finance | 2021 | $31M | Team drained TVL through proxy contract upgrade, project was only 1 day old | | Luna Yield | 2021 | $6.7M | Team withdrew all funds from farming contracts, new project with no track record | | Compounder Finance | 2020 | $10.8M | Hidden backdoor in smart contract despite being "audited" |
Notice the common thread: anonymous teams, brand new projects with no track record, unlocked or exploitable contract functions, and heavy reliance on hype over substance. The warning signs are consistent across years and chains.
What To Do If You Suspect a Rug Pull
If you are already invested in a project showing rug pull warning signs:
Do not panic sell into low liquidity
If liquidity is already thin, a large sell could get you a terrible price. Assess the situation calmly.
Try a small test sell first
Before attempting to sell your full position, try selling a tiny amount ($10-50) to confirm selling actually works. If the transaction fails or taxes consume most of the value, you may be in a honeypot.
Check if others can sell
Look at recent transactions on the blockchain explorer. If you see buy transactions but no sell transactions, the contract likely blocks selling.
Revoke contract approvals
Use Revoke.cash to remove any token approvals you granted. This prevents the contract from accessing other tokens in your wallet.
Report the scam
Report to the blockchain explorer (Etherscan/BscScan), Token Sniffer, and the DEX where the token is listed. This helps protect other investors.
How STRICT Scores Help Filter Scams
Coira's STRICT scoring framework provides an automated first layer of defense against low-quality projects. The framework evaluates six pillars that directly address rug pull risk factors:
Transparency Pillar
Evaluates open-source code, team identity, audit status, and communication quality. Rug pulls consistently score near zero on transparency because they hide information.
Community Pillar
Measures organic community engagement, developer ecosystem, and governance participation. Bot-inflated communities and price-only discussions result in low scores.
Projects with STRICT scores above 60 on Coira have passed basic quality checks across all six pillars. While a high score does not guarantee safety, a very low score (under 30) should trigger extra caution. Check the individual pillar breakdown to see where weaknesses lie.
Protection Checklist
- ✓Never buy tokens promoted through unsolicited messages or DMs
- ✓Always verify contract addresses on CoinGecko, not social media
- ✓Scan every new token on Token Sniffer before buying
- ✓Check that liquidity is locked for at least 12 months
- ✓Verify top holder concentration on the blockchain explorer
- ✓Confirm the contract is verified and readable on the explorer
- ✓Research the team with sources beyond the project's own website
- ✓Start with a small test purchase before committing larger amounts
- ✓Use a separate wallet for interacting with unverified projects
- ✓Revoke unnecessary token approvals regularly with Revoke.cash
Frequently Asked Questions
Frequently Asked Questions
Can rug pulls happen on major exchanges like Coinbase or Binance?
Are all anonymous team projects scams?
How quickly do rug pulls happen?
Can locked liquidity still be rug pulled?
What is the difference between a rug pull and a project failing?
Should I avoid all new crypto projects?
What should I do if I already got rug pulled?
Next Steps
Now that you know how to identify rug pulls:
- Bookmark the scanning tools listed above for quick access
- Practice scanning tokens you already hold to verify their safety
- Complete the full due diligence checklist for any new investment
- Share this knowledge with friends who are new to crypto
Ready for a more comprehensive evaluation? Use our Crypto Due Diligence Checklist for a 50-point assessment, or explore Coira's crypto rankings to find projects with verified STRICT scores.
Congratulations!
You've completed this guide. Apply what you've learned and explore more resources below.
Get more guides like this
Subscribe to receive actionable crypto guides in your inbox.
Related Cryptocurrencies
Continue Learning
Crypto Due Diligence Checklist: 50-Point Evaluation Before You Invest
A comprehensive crypto due diligence checklist covering team, technology, tokenomics, security, community, and financials. Use this step-by-step framework before investing in any cryptocurrency project.
How to Do Crypto Fundamental Analysis: A Step-by-Step Framework
Learn how to evaluate cryptocurrency projects using fundamental analysis. Master the STRICT scoring framework covering Sustainability, Transparency, Revenue, Innovation, Community, and Tokenomics.
How to Store Cryptocurrency Safely: Complete Wallet Security Guide 2026
Master crypto security with our 7-step guide to wallets, seed phrases, hardware devices, and best practices. Learn the 90/10 rule for protecting your digital assets.