10 Crypto Scam Red Flags That Separate Good Projects from Rugs
By Menno — 13 years in crypto, 3 bear markets survived, zero paid promotions
Last updated: March 2026
The most reliable crypto scam signals are: anonymous or unverifiable team, no liquidity lock, unrealistically high yield promises, concentrated wallet holdings, code that has not been audited, and high-pressure 'limited time' marketing. Seeing two or three of these together should end your consideration of any project immediately.
Key Takeaways
- •An anonymous team with no verifiable history is the single highest-risk indicator for a rug pull or fraud.
- •No liquidity lock means developers can drain the trading pool at any time — a clear rug pull mechanism.
- •Guaranteed returns or APY above 20-30% with no clear revenue source is almost always funded by token inflation or a Ponzi.
- •Concentration of supply in 5-10 wallets means coordinated dumps can collapse price at any moment.
- •Urgency-based marketing ('buy now before it's too late') is a manipulation tactic borrowed directly from traditional financial fraud.
Red Flags 1-3: The Team and Project Structure
Red Flag 1 — Anonymous team with no verifiable track record. The single strongest predictor of a crypto scam is an anonymous founding team. Legitimate projects — including many that care about privacy — still have publicly verifiable team members who are accountable for their work. Anonymous teams have every incentive to take funds and disappear, and hundreds have done exactly that. If you cannot identify who built the project and what they built before, the risk is unacceptable.
Red Flag 2 — No liquidity lock. In any decentralized token launch, liquidity is the pool of funds that allows buyers and sellers to transact. If the developer controls the liquidity without a time-lock, they can drain it at any moment — selling all their liquidity and leaving buyers with worthless tokens they cannot sell. Legitimate projects lock liquidity for 6-12+ months via Unicrypt, Team Finance, or similar. Check any launch for a verifiable liquidity lock before buying anything.
Red Flag 3 — Developer wallet holds large percentage of supply. If one or a few wallets control 10-30%+ of total token supply, those wallets can flood the market whenever they choose. Checking the top holder distribution on Etherscan, Bubblemaps, or similar token analysis tools takes 2 minutes and can save you from a catastrophic loss. Alpha Factory's Scam Checker automates this check.
Red Flags 4-6: The Financial Structure
Red Flag 4 — Guaranteed returns or unrealistically high APY. 'Guaranteed 20% monthly returns' or '500% APY staking' are the financial equivalent of 'this bridge is perfectly safe, trust me.' No legitimate investment can guarantee returns — risk and return are inseparable. High APY claims that are not backed by clear protocol revenue are almost always funded by token inflation (diluting value as fast as it is earned) or are outright Ponzis where new investor deposits pay old investor returns.
Red Flag 5 — No smart contract audit. For any DeFi protocol or token that holds user funds, an unaudited codebase is a ticking clock. Even a basic audit from a recognized firm (Certik, Trail of Bits, OpenZeppelin) demonstrates a minimum level of seriousness. No audit means no external verification that the code does what it claims — and potentially that it contains hidden functions that allow developers to steal funds.
Red Flag 6 — Short or no vesting for insiders. If project founders and early investors can sell their tokens immediately with no lockup, their incentive is to dump on launch buyers. Standard practice for legitimate projects is 12-24 months of vesting for team tokens and 6-12 months for early investors. Any project where insiders can sell within 30-90 days of launch should raise immediate concern.
Red Flags 7-8: The Marketing and Community
Red Flag 7 — Urgency and artificial scarcity. 'Only 24 hours left to buy at this price,' 'limited whitelist spots,' 'buy before the big announcement' — these are manipulation tactics borrowed from pyramid schemes and fraudulent investment marketing. Legitimate projects do not need to pressure investors with artificial deadlines. The urgency is designed to bypass your critical thinking before you do proper due diligence.
Red Flag 8 — Paid celebrity endorsements presented as genuine recommendations. Multiple major crypto projects have paid celebrities for promotional posts without disclosure — and those projects subsequently collapsed. In many cases, the celebrity had no involvement in the project and received tokens they immediately sold. Kim Kardashian was fined $1.26 million by the SEC in 2022 for undisclosed promotion of EthereumMax, which lost 97% of its value after the promotion. Any project whose marketing centers on celebrity association rather than technology and fundamentals is a yellow flag.
Red Flags 9-10: The Technical Warning Signs
Red Flag 9 — Contract with hidden functions or upgrade rights. The token smart contract should be simple and transparent. Contracts that include 'mint' functions (allowing developers to create unlimited new tokens), 'pause' functions (allowing developers to freeze trading), or unrestricted upgrade rights are backdoors. Any contract where the developer can arbitrarily change rules or mint supply after launch is not safe to hold.
Red Flag 10 — Copied or plagiarized whitepaper and website. In the 2017-2018 ICO boom, dozens of projects literally copied the Ethereum whitepaper with minor modifications. This practice continues today in less obvious forms — descriptions, technology claims, and team bios lifted from legitimate projects. Search 1-2 paragraphs from the project's whitepaper in Google to check for plagiarism. If the content appears word-for-word in another project, the team has no original work to show — a clear indicator of a fabricated project.
Alpha Factory's Scam Checker evaluates tokens against multiple of these criteria automatically. Running any project through it before investing is one of the fastest ways to avoid the most common and costly crypto frauds.
Related Tools on Alpha Factory
Frequently Asked Questions
How do I check if a crypto project is a scam?
Run the project through Alpha Factory's Scam Checker for an automated assessment. Manually check: Is the team publicly identifiable? Is liquidity locked and for how long? What percentage of supply do top 10 wallets hold? Has the contract been audited? What is the vesting schedule for insiders? Legitimate projects pass all of these checks easily.
Can audited crypto projects still be scams?
Yes. An audit verifies that the code does what it claims — it does not validate the business model, tokenomics, or team intentions. Audited projects have rug pulled before. Treat an audit as a necessary but not sufficient condition. All other due diligence still applies.
What is a rug pull in crypto?
A rug pull is when project developers drain the liquidity pool, selling all their tokens and disappearing with the funds. Investors are left holding tokens they cannot sell because the liquidity to execute trades has been removed. Rug pulls can happen in seconds and are often the planned endpoint for fraudulent launches. Locked liquidity is the primary protection.
How much crypto is lost to scams annually?
Chainalysis and other blockchain analytics firms estimate that crypto scams and fraud account for $1-3 billion in losses annually in recent years. In 2022, a record year, the figure exceeded $3.8 billion. Rug pulls, phishing, romance scams ('pig butchering'), and Ponzi schemes are the most common categories by volume.
Related Guides
How to Avoid Crypto Scams: 12 Red Flags to Watch For
The most reliable way to avoid crypto scams is to remember that no legitimate investment offers guaranteed returns, any project with an anonymous team carries unacceptable accountability risk, and urgency is always a manipulation tactic. Verify everything independently, take time before committing money, and treat any investment that sounds too good to be true as a guaranteed scam.
Meme Coin Risk: How Much Should You Allocate (If Any)?
Meme coins are pure speculation — they have no fundamental value floor and can go to zero at any time. If you choose to participate, cap your allocation at 1-2% of your total portfolio per meme coin, never invest money you cannot afford to lose entirely, and treat them as lottery tickets, not investments.
Crypto Risk Scoring: How to Grade Any Coin Before Investing
Crypto risk scoring means evaluating a project across multiple dimensions — team credibility, tokenomics, developer activity, liquidity, and competitive position — before committing capital. Alpha Factory's Altcoin Rules framework grades projects on 8 indicators to produce a risk score that tells you whether a position is defensible.
How to Protect Your Crypto Investments in 2026
Protecting crypto investments requires three layers: market risk management (position sizing, diversification, and systematic exits), counterparty risk management (self-custody for large holdings, exchange diversification), and operational security (hardware wallets, strong authentication, phishing awareness). Most investors focus only on market risk and ignore the other two.
DeFi Risk Management: How to Invest in DeFi Without Getting Wrecked
DeFi investing requires managing three distinct risk layers beyond standard market risk: smart contract risk (code exploits), liquidity risk (inability to exit), and protocol risk (governance attacks, oracle manipulation). Most DeFi losses come from these non-price risks, not from market moves.
Ready to put this into practice?
Alpha Factory gives you the tools to apply every strategy in this guide — DCA Planner, Altcoin Rules, portfolio tracking, and AI-powered analysis.
Explore More
Not financial advice. Crypto investing involves significant risk. Past performance does not guarantee future results. Always do your own research.