How to Check if a Crypto Project Is a Scam: A Pre-Investment Checklist
Key Takeaways:
- Before investing in any crypto project, always verify the identity and track record of the team. Anonymous teams are a red flag.
- The smart contract must be verified on the blockchain and have passed an independent audit. Without this, the risk of fraud is extremely high.
- Liquidity locked for at least 12 months in a reliable protocol (e.g., Unicrypt) reduces the possibility of rug pull scams.
- Tokenomics with unclear distribution, an excessively large team share, or an inflationary mechanism often signals a potential scam.
- Use tools like Etherscan, DexScreener, and CoinGecko to independently verify data before investing a single cent.
In the world of cryptocurrencies, quick profits often come with high risk. Unfortunately, many projects that promise gold and brands end up as crypto project scams. How can you tell a legitimate project from a scam before you invest your money? In this guide, we walk through a due diligence checklist that anyone can apply, regardless of experience. We do not provide financial advice, but practical tools for verification.
1. Check the Team Behind the Project
The first and most important step: who are the people behind the project? Legitimate teams have public profiles on LinkedIn, GitHub, or personal websites. Anonymity or pseudonyms without a proven track record are major warning signs. Look for:
- LinkedIn profiles – Do team members have relevant experience in blockchain or finance?
- GitHub activity – Do they regularly publish code and documentation?
- Previous projects – Were they successful or abandoned?
If you cannot find anything about the team, that is a clear sign that it is a crypto project scam.
2. Examine the Smart Contract and Audit
The smart contract is the heart of any crypto project. Without verification and an audit, the project is risky. Here is what to check:
- Contract verification – On Etherscan (or BSCScan), check if the contract is verified. A green checkmark next to the address is a good sign.
- Independent audit – Look for an audit from reputable firms such as CertiK, Hacken, or SlowMist. An audit is not a guarantee, but it reduces risk.
- Ownership positions – Does the team have the ability to change the contract (e.g., minting new tokens)? If so, that is a red flag.
On the website BlockchainSecurity, we regularly publish guidelines for checking contracts. We recommend you consult them.
3. Check Liquidity and Trading
Liquidity is crucial for token stability. If liquidity is low or not locked, the project can easily pull the rug. Check:
- Liquidity lock – Use tools like DexScreener or Unicrypt to see if funds are locked for at least 12 months.
- Trading volume – Is it natural or artificially inflated? Tools like CoinGecko show real data.
- Token distribution – Do a few addresses hold a huge share? If 10 addresses control more than 50% of the supply, that is a risk.
If liquidity is not locked, that is one of the biggest signs of a crypto project scam.
4. Analyze Tokenomics
Tokenomics determines how the token is distributed, used, and valued. Pay attention to:
- Total supply – Is it fixed or inflationary? Excessive inflation reduces value.
- Distribution – How much goes to the team, investors, and community? A team share greater than 20% without locking is suspicious.
- Vesting period – Do the team and early investors have a lock-up period (e.g., 6-12 months)? Without it, they can sell immediately.
Use websites like Tokenomics Hub for comparison. If the tokenomics look unclear or unfair, it is likely a scam.
5. Check Social Media and Community
Legitimate projects have an active and transparent community. Here is what to look for:
- Telegram/Discord – Is the group full of bots or real people? Ask questions; if they ignore you or delete messages, run away.
- Twitter/X – Do the posts make sense or are they just hype? Check if the followers look real (no fake profiles).
- GitHub activity – Is the code regularly updated? A dead GitHub means a dead project.
If the community seems artificial or does not exist, that is a clear sign of a crypto project scam.
6. Use Tools for Independent Verification
Do not rely only on what the project claims. There are several free tools that help you verify:
- Etherscan/BSCScan – For viewing transactions and contracts.
- DexScreener – For analyzing liquidity and trading.
- CoinGecko/CoinMarketCap – For basic token data.
- RugDoc – Specialized in detecting potential scams.
Combine these tools before investing. On BlockchainSecurity.rs, you can find additional guides and guidelines for safe investing.
See Also
Frequently Asked Questions
What is the most common sign of a crypto project scam?
The most common sign is an anonymous team and a lack of a verified smart contract. If you cannot find who is behind the project, that is a big red flag.
Does an audit guarantee that a project is not a scam?
No, an audit reduces risk but does not guarantee safety. Always check that the audit was done by a reputable firm and that all critical vulnerabilities have been fixed.
How do I check if liquidity is locked?
Use tools like DexScreener or Unicrypt. Look for data on liquidity locking and the lock-up period. At least 12 months is preferable.
What should I do if a project has a large token share held by the team?
If the team holds more than 20% of tokens without a lock-up period, that is a risk. Check the vesting schedule. Ideally, the team should have tokens locked for 6-12 months.
Where can I find reliable information about crypto projects?
Use official sources such as CoinGecko, Etherscan, and audit websites. Also, follow BlockchainSecurity.rs for regular analyses and guidelines.