How to Identify Scam Tokens: Complete Detection Guide
Learn the red flags and verification steps to protect yourself from honeypots, rug pulls, and malicious tokens.
The Stakes Are High:
In 2024, retail investors lost over $2.3 billion to crypto scams. Most losses occurred from honeypots and rug pulls that could have been detected with proper verification.
The Top 5 Scam Types
1. Honeypot Tokens
A honeypot token allows you to buy but prevents you from selling. The smart contract has hidden functions that block sell transactions while allowing buys.
π¨ Red Flags:
- β’ Cannot simulate a sell transaction successfully
- β’ Zero or very few sell transactions in trading history
- β’ Only the contract creator can sell
- β’ Abnormally high buy-to-sell ratio (100:1 or higher)
- β’ "Transfer failed" errors when attempting to sell
2. Rug Pulls
Developers drain the liquidity pool, leaving investors unable to sell their tokens for any meaningful value.
π¨ Red Flags:
- β’ Liquidity is not locked or locked for less than 6 months
- β’ Developer wallet holds majority of tokens (>20%)
- β’ Contract has mint function allowing unlimited token creation
- β’ Ownership is not renounced
- β’ Team is anonymous with no track record
3. Hidden Minting Functions
Smart contracts with undisclosed mint functions allow developers to create unlimited new tokens, diluting your investment.
π¨ Red Flags:
- β’ Contract has mint(), _mint(), or similar functions
- β’ Mint function is not permanently disabled
- β’ Total supply can change after deployment
- β’ No maximum supply cap defined
4. Trading Restrictions
Malicious contracts implement restrictions that only affect regular investors, not the developer.
π¨ Red Flags:
- β’ Cooldown periods between trades
- β’ Maximum transaction amounts (but not for all wallets)
- β’ Blacklist functions that can ban wallets
- β’ Whitelist-only trading periods
- β’ Pause functionality controlled by developer
5. Excessive Fees & Taxes
Some tokens have buy/sell taxes above 50%, making it nearly impossible to profit.
π¨ Red Flags:
- β’ Combined buy/sell tax exceeds 20%
- β’ Developer can change tax rates at will
- β’ Tax breakdown is not transparent
- β’ Taxes go directly to developer wallet
Step-by-Step Verification Process
Step 1: Run a GuardScan Analysis
Start by scanning the token address with GuardScan. This will automatically check for:
- β Honeypot simulation (can you sell?)
- β Ownership status (renounced or not?)
- β Mint functions (can supply increase?)
- β Liquidity lock verification
- β Token distribution analysis
- β Community reports and warnings
π‘οΈ Pro Tip:
Run the manual contract, liquidity and ownership checks before investing. The exit route matters before the entry.
Step 2: Verify the Smart Contract
Check if the contract is verified on block explorers (Etherscan, BSCScan, PolygonScan):
- β Look for green checkmark indicating verified source code
- β Review the contract code for suspicious functions
- β Check if it's a copy of a known scam contract
- β Verify contract creation date (avoid brand new contracts)
Step 3: Check Liquidity
Analyze the liquidity pool and lock status:
- β Meaningful liquidity for the size of the project and trading volume
- β Liquidity locked for at least 6 months
- β Use services like Unicrypt or Team Finance to verify lock
- β Check if liquidity provider (LP) tokens are burned
Step 4: Analyze Token Distribution
Review how tokens are distributed across wallets:
- β Top 10 holders should own less than 40% combined
- β No single wallet should hold more than 10%
- β Check if dev wallet has already sold tokens
- β Look for distribution to multiple wallets (sybil attack)
Step 5: Research the Project
Investigate the team and community:
- β Verified team members with LinkedIn profiles
- β Active community on Discord/Telegram (not just bot activity)
- β Professional website and documentation
- β Audit from reputable firm (CertiK, PeckShield, etc.)
- β Real use case and working product (if applicable)
Quick Decision Framework
Use this simple framework to make quick go/no-go decisions:
π IMMEDIATE RED FLAGS - Do Not Invest:
- β’ Cannot simulate successful sell transaction
- β’ Liquidity not locked or locked less than 1 month
- β’ Contract not verified on block explorer
- β’ Developer holds more than 20% of supply
- β’ Multiple community scam reports
β οΈ PROCEED WITH EXTREME CAUTION:
- β’ Ownership not renounced
- β’ Mint function exists (even if currently disabled)
- β’ Buy/sell tax exceeds 10%
- β’ Less than 100 holders
- β’ Anonymous team with no track record
- β’ Contract less than 7 days old
β SAFER INVESTMENTS (Still Do Your Research!):
- β’ Honeypot test passed
- β’ Liquidity locked 6+ months
- β’ Ownership renounced
- β’ Verified smart contract
- β’ Professional audit completed
- β’ Doxxed team with track record
- β’ Reasonable tokenomics (max 10% tax)
Common Psychological Tactics
Scammers use psychological manipulation to rush your decision:
1. FOMO (Fear of Missing Out)
"Price is mooning! Last chance to buy before 100x!" - Don't let FOMO override your security checks.
2. Artificial Urgency
"Presale ending in 1 hour!" - Legitimate projects don't need artificial urgency.
3. Social Proof Manipulation
Fake Telegram members, bot comments, paid influencers - verify all claims independently.
4. Celebrity Association
Using celebrity names or deepfake endorsements - always verify through official channels.
Recovery: What If You Already Bought?
If you suspect you've invested in a scam token:
- Try to sell immediately (even at a loss)
- If you can't sell, check if it's a honeypot
- Report the token to GuardScan and other platforms
- Warn others in community forums
- Document everything for potential legal action
- Learn from the experience to avoid future scams
Secure Your Crypto
Store your verified tokens safely with a hardware wallet - the gold standard for crypto security.
Master DYOR (Do Your Own Research)
Now that you can identify scam tokens, learn our complete DYOR framework to research projects thoroughly.