Recognise the common traps and verify a token before you buy
Solana is fast and cheap to use, which makes it one of the most popular networks for trading new tokens. The same qualities make it attractive to scammers. Anyone can launch a token in minutes for a few dollars, and a single successful scam can collect thousands of dollars before the creator moves on to the next one. The good news is that most token scams rely on the same small set of tricks, and nearly all of them leave traces on-chain that you can check before you buy.
The best-known scam is the rug pull. The creator builds hype, waits for buyers to add SOL to the trading pool, and then either removes the liquidity or sells a large hidden supply. The price collapses in moments and holders are left with tokens nobody will buy.
A honeypot works differently: buyers can get in, but they cannot get out. On Solana this is usually done with freeze authority, which lets the creator freeze wallets so their tokens cannot be sold, or with Token-2022 extensions such as transfer hooks or heavy transfer fees. The chart often looks unusually strong, because ordinary holders are simply unable to sell.
Fake volume is less dramatic but very widespread. Creators use bots and linked wallets to trade the token back and forth, producing impressive volume figures and pushing the token onto trending lists. The activity is real on-chain, but it is not real demand. Its purpose is to make the token look popular long enough for genuine buyers to arrive.
Scams are designed around urgency. Messages promise that a token is about to "send", that an early-buyer window is closing, or that a famous wallet just bought in. The goal is to make you act before you think. Paid promotions in Telegram groups, reply bots on X, and fake screenshots of huge gains all serve the same purpose.
Impersonation is another favourite. Scammers copy the name and logo of a popular token and launch a lookalike with a different contract address, counting on buyers who search by name instead of verifying the address. Others pose as support staff in direct messages and ask for your seed phrase or for you to "validate" your wallet on a malicious site. No legitimate project or tool will ever ask for your seed phrase.
First, confirm the contract address. Get it from the project's official channel and compare it character by character with what you paste into your wallet or DEX. Never rely on the token name or ticker, since anyone can copy them.
Second, check mint and freeze authority. If mint authority is active, the creator can create unlimited new tokens. If freeze authority is active, they can lock your tokens in your wallet. For a new meme token, both should normally be revoked.
Third, look at liquidity. Find the main trading pool and see how much is in it. Pools under about $5K are easy to drain and will move sharply even when you sell a small amount. Check whether the liquidity is locked or burned, since unlocked liquidity can be withdrawn.
Fourth, review holder concentration. Look at the largest wallets, excluding the pool itself. A single wallet above 10% or a top ten holding most of the supply means a few people can crash the price at will. Many wallets that all bought in the very first block suggest bundled supply.
Fifth, confirm that the token can be sold. Request a quote to sell the token back to SOL on an aggregator. If no route exists, or a small round trip loses a large percentage, treat it as a likely honeypot or a token with a hidden tax.
Sixth, examine trading activity. Open the recent transactions and look at who is trading. Healthy activity comes from many different wallets. If the same few addresses appear over and over, the volume is probably manufactured.
Block explorers such as Solscan let you inspect any token's mint account, holders, and transactions. DEX screeners show pools, liquidity, and price history. RugCheck provides an independent risk report. Our own Contract Analyzer at solanatokenscanner.com brings these checks together: paste an address and it reports authority status, Token-2022 extensions, holder concentration, liquidity, a live sellability test, recent activity, and RugCheck's view, combined into a single safety score with a plain-language explanation for each result. It is free and requires no account.
Blockchain transactions cannot be reversed, so recovery is unfortunately rare. Start by protecting what you still have. If you approved a malicious site or shared your seed phrase, move remaining funds to a brand-new wallet immediately and stop using the old one. Revoke any token approvals you do not recognise.
Next, record the details: the token address, your transaction signatures, and any messages or websites involved. Report the token to the platforms where it was promoted and to RugCheck or similar community databases so others are warned. In many countries you can also file a report with the police or a national fraud agency. Be very wary of anyone who contacts you offering to recover your funds for a fee — "recovery services" are one of the most common follow-up scams.
The Contract Analyzer checks authorities, liquidity, holders, sellability, and activity for any Solana token address.
Analyze a token →