The Scale of the Problem
In 2025, rug pulls and exit scams accounted for over $2.8 billion in losses globally. An estimated 50–90% of tokens launched on decentralised exchanges had characteristics consistent with fraud. Learning to recognise these scams isn't optional — it's essential survival knowledge.
1. What Are Rug Pulls & Exit Scams?
Both terms describe fraudulent schemes where project creators steal investor funds, but they differ in execution and timeline.
Rug Pull
- Timeline: Hours to weeks
- Mechanism: Liquidity removal or massive token dump
- Common in: DeFi tokens, memecoins, NFT projects
- Result: Token price drops 90–100% instantly
Exit Scam
- Timeline: Months to years
- Mechanism: Operators disappear with custodied funds
- Common in: Exchanges, lending platforms, funds
- Result: Total loss of deposited funds
2. Types of Rug Pulls
Liquidity Theft
Most commonDevelopers add liquidity to a DEX, attract buyers, then withdraw all liquidity pool tokens — making the token unsellable.
Technical detail: The LP tokens aren't locked or are locked to a contract the team controls. When removed, the paired asset (ETH, BNB) is drained.
Sell Restriction (Honeypot)
Very commonThe smart contract allows buying but blocks or heavily taxes selling. Investors can buy in but can never sell.
Technical detail: Hidden functions in the contract check the sender address or apply 99% sell taxes. The contract may even show a low sell tax initially, then change it later.
Team Dump
CommonThe team holds a large allocation (30–80% of supply) and dumps it all at once after pumping the price through marketing.
Technical detail: Token distribution is heavily skewed. The team may use multiple wallets to disguise their holdings. Vesting schedules either don't exist or are controlled by the team.
Hidden Mint Function
ModerateThe contract contains a function that lets the deployer mint unlimited new tokens, inflating supply and crashing the price.
Technical detail: The mint function may be obfuscated with misleading names or hidden in inherited contracts. It's often not visible in basic contract scans.
3. Red Flags Checklist
No single red flag guarantees a scam, but multiple red flags together should make you walk away. Use this checklist before investing in any new token.
Team & Transparency
Smart Contract
Tokenomics & Liquidity
Marketing & Community
4. On-Chain Analysis: How to Verify
Before investing in any new token, use these free tools to verify its legitimacy. This takes 5–10 minutes and can save you thousands.
Token Sniffer
tokensniffer.comAutomated scam detection. Scans the contract for known rug pull patterns, honeypot code, and suspicious functions. Gives a trust score out of 100.
Key check: Score below 50 = high risk
GoPlus Security
gopluslabs.ioChecks if you can sell the token, identifies hidden owner privileges, proxy contracts, and trading restrictions.
Key check: Any 'cannot sell' flag = avoid
DEXScreener
dexscreener.comView real-time liquidity, holder distribution, and trading activity. Spot suspicious patterns like wash trading or concentrated holdings.
Key check: Low liquidity + high volume = suspicious
Etherscan / BscScan
etherscan.ioRead the verified contract source code. Check if the contract is verified, look at the deployer's transaction history, and review token holder distribution.
Key check: Unverified contract = major red flag
Bubble Maps
bubblemaps.ioVisualises token holder connections. Reveals if seemingly separate wallets are controlled by the same entity (cluster analysis).
Key check: Connected whale clusters = concentration risk
Revoke.cash
revoke.cashReview and revoke token approvals you've granted to smart contracts. Essential hygiene after interacting with any DeFi protocol.
Key check: Revoke unused approvals regularly
5. Real-World Case Studies
Squid Game Token (2021)
Capitalised on the Netflix show's popularity. The contract prevented selling — buyers could only buy, not sell. Developers drained the liquidity pool, and the token crashed from $2,861 to $0.0008 in seconds.
📌 Lesson: If you can't sell a token, it's a honeypot. Always test with a tiny amount first. Check selling restrictions before investing.
AnubisDAO (2021)
Raised 13,556 ETH (~$60M) in a token sale. Within 20 hours, all funds were transferred to a single wallet. The project had no website, no audit, and an anonymous team — but had heavy crypto-Twitter hype.
📌 Lesson: Hype is not due diligence. No website + no audit + anonymous team + massive raise = maximum risk.
Thodex Exchange (2021)
A Turkish crypto exchange. The CEO fled the country with an estimated $2B in user funds, citing a 'partnership' as the reason for halting trading. He was later arrested in Albania.
📌 Lesson: Even established exchanges can exit scam. Use regulated, insured exchanges. Don't keep more on an exchange than you're actively trading.
SafeMoon Controversy (2021–2023)
The SEC charged SafeMoon executives with fraud, alleging they misappropriated millions from the liquidity pool for personal use — including real estate and luxury cars — while promoting the token as a safe investment.
📌 Lesson: Celebrity endorsements and massive communities don't guarantee legitimacy. Follow the money on-chain, not the marketing.
6. The Token Verification Framework
Before investing in any new token, run through this 5-step verification process. It takes 10 minutes and can save you from catastrophic losses.
Check the contract
Is it verified on the block explorer? Scan with Token Sniffer and GoPlus. Look for hidden mint functions, sell restrictions, and owner privileges. If the contract isn't verified, stop here.
Verify the team
Are founders publicly identified with verifiable backgrounds? Reverse-image-search their photos. Check LinkedIn and GitHub histories. Anonymous teams aren't automatically scams, but they're higher risk.
Analyse liquidity & holders
Is liquidity locked? For how long? Who locked it — a third-party service or the team's own contract? Use Bubble Maps to check holder concentration. Top 10 wallets holding >50% = high risk.
Read the audit
Does a reputable firm's audit exist? Read the findings — especially any 'high' or 'critical' issues. Were they resolved? An audit isn't a guarantee, but no audit is a red flag.
Test with a tiny amount
Buy and immediately sell a small amount ($5–10). If you can't sell, it's a honeypot. Check the actual sell tax vs. what's advertised. If there's a discrepancy, walk away.
The 5-minute rule: If you can't find basic information (team, audit, liquidity lock) within 5 minutes of searching, the project likely doesn't want you to find it. That alone is a red flag.
7. Where Rug Pulls Happen Most
| Platform Type | Risk Level | Why |
|---|---|---|
| Pump.fun & memecoin launchers | Extreme | Anyone can create a token in seconds. No audit, no vetting. The majority of tokens launched here go to zero. |
| Uniswap / PancakeSwap (new pairs) | Very High | Permissionless listing. No requirements for audits, team identity, or liquidity locks. |
| Small/unregulated exchanges | High | Less vetting of listed tokens. Some small exchanges have exit-scammed themselves. |
| Major regulated exchanges | Low | Extensive listing requirements, team vetting, and regulatory oversight. Not immune, but significantly safer. |
Frequently Asked Questions
What is a rug pull in crypto?+
How is an exit scam different from a rug pull?+
Can rug pulls happen on major exchanges like Binance?+
Are all new tokens scams?+
Can I get my money back after a rug pull?+
How do I report a rug pull?+
Trade Vetted Tokens on Binance
Binance lists tokens only after extensive due diligence including team verification, contract audits, and regulatory compliance checks. Trade with confidence on a MiCA-compliant exchange.
Open Binance AccountAd · Digital asset prices are subject to high market risk and price volatility. Don't invest unless you're prepared to lose all the money you invest. Terms & risk disclosure
This page contains affiliate links. We may earn a commission at no extra cost to you.
Related Guides
Crypto Scams to Avoid
Phishing, Ponzi, impersonation & more.
Never Share Private Keys
Why your keys must stay secret.
How to Secure Your Crypto
2FA, seed phrases & wallets.
Risk Management Guide
Never invest more than you can lose.
Risk Management Guide
Position sizing & stop-losses.
How to Buy Bitcoin
Step-by-step for beginners.
Disclaimer
This guide is for educational purposes only and does not constitute financial, legal, or investment advice. Mentioning specific projects as case studies does not imply legal conclusions — some cases are subject to ongoing litigation. Always conduct your own research and consult qualified professionals before investing.
Educational content only · Last updated March 2026