A rug pull happens when the creators of a crypto project suddenly remove all the liquidity or dump their holdings, leaving buyers with a token that is suddenly worthless. It is one of the most common scams in crypto, and it works because new tokens can be created in minutes and promoted to thousands of eager buyers within hours. The victims are almost always beginners who bought on hype without checking a single fact about the project.

The good news is that most rug pulls leave clear warning signs before the collapse. None of these checks requires technical skill, and together they take about five minutes. Make them a habit before every new token purchase, and you will avoid the vast majority of scams in the market.

Red Flag 1: Liquidity Is Not Locked or Is Very Low

Liquidity is the pool of funds that lets you buy and sell a token on a decentralised exchange. In a rug pull, the developers hold the liquidity pool tokens, and when they remove them, trading collapses instantly. Before buying, check whether the liquidity is locked, and for how long, using a tool like Unicrypt, Team Finance, or the lock information shown on Dexscreener.

A lock of less than a few months is a warning sign, and no lock at all is a reason to walk away unless you fully understand the risk. Also check the size of the liquidity pool. A token with only a few thousand dollars of liquidity can be moved violently by a single trade, and its price can be manipulated easily by the team.

Red Flag 2: The Team Is Anonymous and the Contract Is Unverified

Anonymous teams are normal in crypto, but anonymity combined with other red flags is dangerous. If nobody will put their name, face, or reputation behind a project, ask yourself why. Check whether the team has a public history, a LinkedIn profile, or previous work, and be suspicious of social media accounts created days before the launch.

The smart contract itself should be verified on a block explorer such as Etherscan or BscScan. An unverified contract hides its code from the public, which means you cannot check what it actually does. Verified code is not a guarantee of safety, but unverified code on a brand-new token is one of the strongest rug pull signals there is.

Red Flag 3: One Wallet Holds Most of the Supply

Look at the token holders list on the block explorer. If the top wallet, excluding the liquidity pool and any burn address, holds 20 percent or more of the supply, that wallet can crash the price at any moment. The same applies to the top five or ten wallets combined: heavy concentration means a small group controls the market.

Be especially careful when the deployer wallet still holds a large share, or when many large wallets were funded from the same source, which suggests one person controls them all. Healthy projects usually distribute tokens widely through a fair launch, a presale with caps, or a vesting schedule that releases team tokens slowly over months or years.

Red Flag 4: Dangerous Contract Functions

Some tokens contain functions that let the owner change the rules after launch. A mint function lets the team create unlimited new tokens and dilute your holdings to zero. A blacklist or trading-pause function lets them block selling while they dump their own tokens. A honeypot is a token you can buy but never sell, because the contract only allows the owner to sell.

You can check for these functions with free scanners such as Token Sniffer, GoPlus Security, or the safety scores on Dexscreener and DEXTools. These tools flag minting, pausing, blacklisting, and honeypot behaviour automatically. If a scanner shows high risk on any of these points, do not buy, no matter how convincing the marketing looks.

Your Five-Minute Pre-Buy Checklist

Before buying any new token, run through this short checklist. First, confirm liquidity is locked for at least six months. Second, check the contract is verified and scan it with Token Sniffer or GoPlus. Third, look at the top holders and confirm no single wallet dominates the supply. Fourth, read the project website and whitepaper for a real use case, and check whether the social channels have genuine engagement rather than bought followers and bot comments.

Finally, never invest more than you can afford to lose in a new token, and never let fear of missing out rush the checks. The token that doubles tomorrow will still be there after five minutes of research, but the money you lose to a rug pull will not come back. Patience is the cheapest protection in crypto, and it costs nothing to use.