Crypto red flags before you buy a new token: tradable isn’t the same as valuable

Someone in a group chat drops a contract address and says the token lists on a big exchange next week. Before you pay, what are the red flags? Four of them, checked in this order: who started the conversation (plus a quick search of the project name and website); how much of the supply sits in a handful of wallets; whether the liquidity is locked, and for how long; and whether anyone is promising high returns with no risk, or a higher tier if you bring in friends. The fourth is enough on its own to stop. Of the first three, if two come up, our advice is simple: don’t send the money. A polished whitepaper can’t answer any of these for you.

Who spoke first matters more than how legit it looks

Almost every specimen in this index turns on the same question: did you go looking, or did it come looking for you? Researching a project yourself and deciding to buy is one starting point. Having a coin pushed in front of you by a stranger in a chat is a very different one, and it comes with an extra question attached. Why is this person telling me?

The U.S. Commodity Futures Trading Commission has a customer advisory on exactly this, and it doesn’t hedge: “Customers should not purchase virtual currencies, digital coins, or tokens based on social media tips or sudden price spikes.” It describes the organisers too: “they organize anonymously and hype the currencies and tokens using social media.” Some add a fake story to the mix — “typically about a famous high-tech business leader or investor who plans to pour millions of dollars into a small, lesser known virtual currency or coin.”

The part worth reading twice is about timing. “Once the pump begins, it can be over in a matter of minutes,” the advisory says, and “Commonly, it is the people pulling the strings who get out first.”

Four checks before you pay, in this order

None of these needs a wallet connection, and none of them needs you to “buy a little to test it”. The order is deliberate. The first is the quickest. The second and third are where the “sellable but dumpable” structure shows up. The fourth works differently: the first three need two hits before you stop, the fourth needs only one.

1. Ask who pitched it, then search the project name and its website. Answer the question from the section above first: who sent this, and are they holding the same coin? Then search. Binance’s scam-awareness page (“Safety First: How to Spot and Avoid Crypto Scams?”, published 2024-03-15) starts its own list there: “Start by conducting a simple Google search on the project or website name.” It points to who.is as one way in, since it “allows you to determine the founding date and activity duration of a website.” What you are looking for is a mismatch, say a domain registered last month for a team that claims years of work. If the address merely looks like a well-known project’s, run it through the domain comparer character by character.
2. Open a block explorer and look at the holders. The Binance Academy glossary entry on rug pulls lists “concentrated token holdings” among its warning signs. The logic is plain enough. If most of the supply sits in a few addresses, the price belongs to those addresses, and the day they decide to sell, you are the buyer they were waiting for.
3. Check whether liquidity is locked, and for how long. The same entry says “legitimate projects typically lock liquidity for six months or more.” Treat that as a rule of thumb from the Academy glossary (checked October 2026), not a guarantee. It says “typically”, and what happens once a lock expires is a separate question.
4. Listen to how they talk about returns. Binance’s page has two lines you can hold any pitch up against. “Be cautious of projects promising exceptionally high annual returns without any risk of capital loss. Such promises often signal a scam.” And: “tiered invitation systems that promise high returns and require deposits to upgrade VIP tiers are generally considered high-risk and often indicative of a scam.” The FTC gets it into one line: “Only scammers will guarantee profits or big returns.” If you are hearing “guaranteed”, “can’t lose” or “bring two friends and you level up”, you can stop, however clean the first three checks looked.

What about an anonymous team — is that a fifth flag? The Academy glossary does list anonymous teams among the warning signs, then adds: “An anonymous team isn’t automatically a scam, but it raises the stakes for due diligence.” We follow that line. Anonymity on its own doesn’t settle anything; it means you run the four checks harder, especially the holder one.

How a token you can sell still goes to zero

A lot of people carry one rule into these trades: if I can sell, I’m fine. That rule stops a honeypot. It does nothing here.

The Academy glossary calls this a soft rug pull. “Soft rug pulls involve no malicious code. Instead, the team simply sells off a large portion of their token allocation rapidly, which tanks the price and drives away investors.” Every contract check passes. The sell button works. The trouble is timing: by the time you want out, the team’s own sell orders have already pushed the price down, so you can sell, just not for anything close to what you paid.

Put that next to the CFTC line about the people pulling the strings getting out first, and the shape is clear. Whoever pushed the price up also gets to decide when it comes down.

Being able to sell means the button works. Being worth something means someone will take it off you at the price you paid. The gap between the two is whenever the big holders decide to sell.

Three situations that belong somewhere else

The index is sorted by where you are standing right now. These three look similar but need different handling, so go straight to the right entry:

• The sell transaction keeps failing, whatever interface or slippage you try. The contract has switched selling off, and the four checks above won’t help. See honeypot tokens.
• You aren’t sure the contract address you have is the project’s real one. Copycat tokens with identical names are everywhere. Where to copy an address from is covered in how to verify a token contract address.
• They want you to install an app or log in to a site you’ve never heard of, then move funds into an account they give you. That isn’t a worthless token. There may be no token at all, only numbers on a fake platform. It belongs with pig-butchering and trading mentor scams.

If you already paid, or got pulled into a signals group

People who push coins rarely stop at one message. The usual next step is an invite to a group where someone posts profit screenshots every day and a “mentor” calls entries. At that point you are dealing with a different scam, and the trading mentor entry is about recognising that script.

If the money has gone and the price has already collapsed, don’t top up to “average down”. In the CFTC’s own description a pump can be over in minutes; whatever you add is most likely buying someone else’s exit. What to save and where to report it is laid out step by step in what to do first after a crypto scam.