Five minutes of homework before you buy a new token

Quick answer: Before you buy any new token, find out three things. Can you actually sell it? Can the creator pull the money out of the pool? Can the creator print more? If you can't answer all three, you're not investing. You're donating.

Nobody gets rugged by surprise

A rugpull isn't bad luck. It's a business model. Somebody launches a token, builds hype in a chat group, collects buyers' money into a liquidity pool, then drains it or dumps a giant stack of coins they quietly kept for themselves. The price goes to nearly zero in minutes.

The part nobody likes to admit is that the trapdoor is usually visible beforehand. It's written into the contract and the wallet records, and anyone can read both for free. The scammers count on you reading the Telegram channel instead.

There's no bank to call afterward and no chargeback. Self-reliance is the whole game here, so do the homework yourself.

Check one: can you sell it?

Some tokens are built so you can buy but not sell. They're called honeypots. In late 2021 a token riding the Squid Game hype worked this way, and buyers watched the price climb while their sell orders failed.

Run the contract address through a free scanner such as honeypot.is or Token Sniffer, and look at the sell tax. A 5 percent tax is annoying. A 90 percent tax is a wall with a door painted on it.

Then do the old-fashioned thing. If you still want in, buy a tiny amount, an amount you'd happily lose, and try selling it right away. If the sale fails, you just bought a lesson for twenty dollars instead of two thousand.

Scanners miss things. A clean report means "no obvious trap found," not "safe."

Check two: who holds the supply?

Open the token's page on a block explorer. Etherscan covers Ethereum and its cousins, Solscan covers Solana. Click the holders tab.

Ignore the liquidity pool and any burn address. Now look at what's left. If ten wallets hold most of the supply, the price is one angry sell order away from collapse. Whoever owns those wallets can crash it whenever they like.

The sneakier version splits the stack across dozens of wallets so the chart looks healthy. A tool like Bubblemaps draws the connections. If a cluster of "separate" holders all got funded from the same source minutes before launch, they're one person wearing many hats.

Also look at the deployer's wallet. A brand-new wallet, funded once, that has launched six tokens this month is a factory, not a founder.

Check three: who controls the liquidity?

This one catches the classic rug. When a token launches, the creator seeds a pool with real money and receives LP tokens, a claim on that pool. Anyone holding those LP tokens can withdraw the pool. Your buy orders are what filled it.

You want the LP tokens burned, meaning sent to a dead address, or locked in a lock service for a long, verifiable stretch. Check the lock yourself on the explorer or the lock provider's own site. Don't take a screenshot from the project's chat as proof.

Read the unlock date. A thirty-day lock isn't safety. It's a countdown, and the creator knows exactly when it ends.

Check four: what can the owner do?

On the explorer's contract tab, a verified contract lets you read the code. You don't need to be a programmer. You need to look for a short list of powers:

• Mint: the owner can create new tokens, which dilutes yours.
• Blacklist: the owner can freeze specific wallets, including yours.
• Set tax: the owner can raise the sell fee after you've bought.
• Pause trading: the owner can switch the whole thing off.

If the contract isn't verified, so the code is hidden, that's your answer. Walk away.

"Renounced ownership" is a good sign, because it means those owner powers are gone. But check whether the contract is a proxy. A proxy can be swapped for different code by an admin wallet, and renouncing the visible owner doesn't touch that. A renounced label on a proxy contract is a costume.

Check five: the people and the pitch

An anonymous team isn't automatically a scam. Plenty of honest projects start that way, and Bitcoin's own creator was never identified. But an anonymous team plus a promise of returns is a different animal.

Watch for these:

• A countdown timer and "last chance before it moons" language.
• Anyone using the word "guaranteed."
• A chat where questions about the contract get you banned.
• An "audit" badge you can't find on the auditor's own website. Fake audit logos are cheap.
• An influencer, or a friend of a friend, pushing it in your direct messages.

That last one is where careful people get hurt, because the pitch comes from someone they trust, who may have been fooled first. If a buddy pitches you a token, hold the line. Say you'll look at it tomorrow. A real opportunity will still be there, and a scam hates waiting. And don't pass it along to your brother-in-law until you've done the checks yourself.

Sizing it like an adult

Even a token that passes everything is a gamble. Most new ones fade without any villain, simply because nobody wants them.

So set the rules before the excitement starts. Only use money you could burn without it touching the mortgage, the kids' accounts or the emergency fund. Wait a week after launch before you decide. The hype ages quickly, and so do the scammers' wallets, which is when you can see what they did.

If you're building a real position, the slower road is the better one. Our piece on bitcoin for somebody who skipped the last decade covers what a boring, durable holding looks like. And the crypto scams that catch careful people too covers the cons that don't involve a contract at all.

This is general education, not personal financial advice. For decisions about your own money, talk to a licensed professional.

If you've already been burned

Don't chase it. The worst follow-up is the "recovery service" that finds you after a loss and asks for a fee up front. That's the same crowd working a second angle. Save the transaction records, report it to the FBI's Internet Crime Complaint Center at ic3.gov, and tell your wife or someone you trust. Shame is the scammer's best friend, because it keeps people quiet and easy to hit again.

Then take the lesson, which is cheap compared to the next one. The five minutes you spend reading a contract will never feel exciting. They'll feel like nothing at all, right up until the day they save you everything.