How to Spot Crypto Scams and Rug Pulls: A Practical Survival Guide

In crypto there’s no customer-service hotline that refunds you. When a scam works, the loss is final. The good news: most scams follow recognizable patterns, and learning to see them costs nothing.

What a rug pull is

A rug pull happens when the creators of a token or protocol yank all the liquidity and vanish with investors’ money. The price collapses to zero in minutes and there’s nobody left to complain to.

They come in two flavors:

• Hard rugs: the smart contract has a back door that lets the creator drain liquidity or block sells outright.
• Soft rugs: the team quietly dumps its own supply while promising impossible returns, until the project simply dies of exhaustion.

Token red flags

1. Unlocked liquidity. If the liquidity pool isn’t locked or burned, the creator can pull it any time they like.
2. Holder concentration. If the top 10 addresses own 60% of the supply, any one of them can torch the price.
3. Absurd buy/sell taxes. A 20% tax — or a honeypot function that lets you buy but never sell.
4. Anonymous team, no audit. Anonymity isn’t a crime, but without an independent code audit your risk multiplies.
5. Guaranteed returns. No serious protocol guarantees high fixed yields. If it does, you’re looking at a Ponzi.
6. Hype without a product. A copy-pasted white paper, bot-driven social media, and an official account that only talks about price.

Other scams to recognize

Pig butchering. A stranger — usually via social media or a dating app — builds a friendship over weeks, then eases you into “investing” on a fake platform showing inflated gains. When you try to withdraw, they ask for more money in “fees.” You never get any of it back.

Phishing and fake airdrops. Emails, Discord messages, or ads that imitate your favorite exchange. They get you to connect your wallet and sign a transaction that actually drains your funds or grants an unlimited token approval.

Fake support agents. Someone posing as customer service who asks for your seed phrase. No legitimate company will ever ask for it.

Approval farming. Tokens that, when you interact with them, grant a contract permission to move all your NFTs or ERC-20s. The theft comes later, in silence.

Free verification tools

• Liquidity and contract scanners like RugCheck, Token Sniffer, or GoPlus: they check for honeypots, ownership renouncement, and holder concentration before you buy.
• Revoke.cash: review and revoke contract approvals you’ve signed in the past. Do it every few months.
• Etherscan and equivalents: inspect holder distribution and the contract creator’s history.
• Official allowlisted domains: type the URL yourself — never enter through a third-party link.

Habits that keep you safe

• Distrust anyone who contacts you first. Essentially every DM from a “successful investor” is spam or a scam.
• Never share your seed phrase. Not with support, not for “wallet verification,” not for an airdrop.
• Test with small amounts before connecting a serious wallet to a new protocol.
• Sign deliberately: read what your hardware wallet is actually approving — don’t blind-confirm.
• The golden rule: if the opportunity is so good you can’t understand why it’s being offered to you, ask who’s making money with you inside the trade.

Bottom line

Crypto scams don’t require hacking the blockchain — they hack people. A rug pull can be avoided with five minutes of checking liquidity and holders; a pig butchering, by ignoring the stranger who messages you. Crypto security is boring and systematic — which is exactly what makes it work.

Disclaimer: this content is for educational purposes only and does not constitute financial advice. Cryptocurrencies are volatile assets; only invest money you can afford to lose.