Skip to content
Back to Learn
Security5 min read
Aug 21, 2026

How to Spot and Avoid Crypto Swap Scams: Honeypots, Rug Pulls, and Fake Tokens

Learn to identify honeypot tokens, rug pulls, fake liquidity, and malicious contracts before you swap. Protect your assets with these red flags and verification steps.

crypto scamhoneypot tokenrug pullfake tokenswap scamDeFi safety

Honeypot Tokens

A honeypot token is a malicious smart contract that allows you to buy but not sell. The contract has hidden logic that blocks sell transactions or charges astronomical fees (99%+) on sells. By the time you realize you cannot sell, the liquidity has been drained.

Red flags: (1) Token has very new contract deployment (hours or days old). (2) Extremely high buy tax or no sell function visible in the contract. (3) Liquidity is not locked or is held in a single wallet. (4) Contract is not verified on the block explorer. (5) Token name/symbol mimics a popular project (e.g., "UniswapV2" or "AaveToken").

Rug Pulls and Exit Scams

A rug pull occurs when token developers create a token, attract liquidity, then remove all liquidity and abandon the project. Variants include: (1) Liquidity removal — developers withdraw all LP tokens. (2) Mint function — hidden function allows unlimited token minting. (3) Private key compromise — dev keys are leaked or insider trades.

Protection: check if LP tokens are locked (via services like Unicrypt, Team.Finance). Verify the contract on Etherscan/BSCScan for verified source code. Check if the contract has been audited by a reputable firm. Look for renounced ownership (reduces rug risk). Be skeptical of tokens with anonymous teams and no audit.

Fake Tokens and Impersonation

Scammers create tokens with names and symbols identical to legitimate projects. On DEXs, anyone can create a trading pair with any token. The fake token has no value but uses the same name/symbol to trick users.

How to verify: (1) Always check the token contract address, not just the name/symbol. (2) Compare the contract address against official sources (project website, CoinGecko, CoinMarketCap). (3) Check the number of holders — legitimate tokens have thousands of holders. (4) Verify the token is listed on reputable aggregators. AEXI shows contract addresses for all tokens — always cross-reference before swapping.

Safe Swapping Checklist

Before every swap: (1) Verify the token contract address on the block explorer. (2) Check that the contract source code is verified. (3) Look for an audit badge or third-party audit report. (4) Check the number of holders and total supply. (5) Verify liquidity is locked or held by a reputable protocol.

(6) Start with a small test swap before committing a large amount. (7) Use established aggregators (AEXI, 1inch, Jupiter) rather than unknown swap sites. (8) Never click links from unsolicited messages or social media. (9) Bookmark official sites rather than searching on Google (ads can lead to phishing sites).

Ready to start?

Put what you learned into practice. Swap tokens, bridge assets, and explore 80+ networks.