A rug pull is when the people behind a crypto token drain its liquidity or dump their holdings and vanish, leaving everyone else holding a worthless coin. Here's what is a rug pull crypto in practice, and the checks that catch one before your money is in it.
You've seen the chart. A brand-new token, a few hours old, already up 400%, a Telegram group screaming about the next 100x. Then, within minutes, the price falls to zero and the developer's wallet is empty. That's a rug pull, and it is one of the oldest tricks in crypto, just dressed up in a new ticker every week.
The rug pull meaning is simple enough once you strip away the jargon. Someone creates a token, pairs it with real money like ETH or USDC in a liquidity pool on a decentralized exchange, builds hype around it, and then removes that real money from the pool, leaving buyers with a token that has no market to sell into. Chainalysis, in its 2022 crypto crime report, estimated that rug pulls accounted for $2.8 billion in losses in 2021 alone, and made up 37% of all cryptocurrency scam revenue that year. That is not a fringe problem. It is the dominant scam in the industry.
Most rug pulls run through the same mechanic: a liquidity pool scam. On a platform like Uniswap or PancakeSwap, anyone can create a trading pair for a new token without permission from anyone. The developer deposits some of the new token alongside a real asset, say $50,000 in BNB, and that pairing is what lets people buy and sell. The catch is that whoever provided that liquidity usually holds the LP tokens that represent it, and if there's no lock on those tokens, they can withdraw the real asset at any moment and leave the pool empty. Buyers are still holding the worthless token. The developer walks away with the BNB.
The Squid Game token is the case everyone in crypto still points to. In late 2021, riding the popularity of the Netflix show, SQUID launched, and its price went from under a cent to over $2,800 in about a week, according to reporting from BBC News. The website had typos, the whitepaper was thin, and there was no way to sell the token once you'd bought it, a detail almost nobody checked until it was too late. Then the developers pulled roughly $3.3 million out of the liquidity pool and disappeared. The token dropped to near zero in minutes. BBC News reported that the project's Twitter and Telegram accounts went dark the same day.
Not every rug pull is a liquidity drain. Some are slower and just as damaging. A team allocates itself a huge share of the token supply, promises a vesting schedule, and then dumps those tokens on the open market the moment trading opens, crashing the price while retail buyers are still accumulating. This is sometimes called a soft rug, and it's harder to spot because nothing about it is technically illegal or even hidden. It's disclosed in the tokenomics. Nobody reads it.
How to Spot a Rug Pull Before You Buy
You can catch most of these before you ever connect a wallet, and it takes about ten minutes.
Check whether liquidity is locked. Tools like Unicrypt or Team Finance let developers lock LP tokens for a set period, and that lock is verifiable on-chain. If a project claims to be safe but the liquidity sits in a wallet the team controls with no lock and no timer, that is the single biggest red flag in the space. No lock means the rug can happen at any second, for any reason, with no warning.
Look at token distribution. Block explorers like Etherscan or BscScan show you exactly who holds what. If the top ten wallets, excluding the liquidity pool itself, control more than 40 or 50% of supply, a handful of people can crash the price whenever they choose. You're not investing in a community token at that point. You're providing exit liquidity for insiders.
Read the contract, or have someone read it for you. Services like Token Sniffer and DeFi tools built by firms like CertiK run automated checks for common scam functions: the ability to mint unlimited new tokens, blacklist wallets, or disable selling entirely. That last one, a sell function that's been quietly disabled or taxed at 99%, is called a honeypot, and it's a rug pull's close cousin. You can buy in. You just can't get out.
Look for a real audit, and then verify it. Scammers routinely post fake audit badges or link to reports that don't match the deployed contract address. CertiK, Hacken, and PeckShield are names worth checking directly on the auditor's own site rather than trusting a screenshot in a Telegram channel.
Check who's behind it. Anonymous teams aren't automatically scams, plenty of legitimate early Bitcoin and DeFi projects launched pseudonymously. But an anonymous team combined with unlocked liquidity, concentrated supply, and a countdown-timer marketing push is a different story entirely. Frankly, if you can't find a single verifiable person attached to a project promising guaranteed returns, treat that as the project's answer to the question, not an oversight.
Crypto Scam Warning Signs Beyond the Contract
Some of the clearest warning signs never touch code at all. Aggressive countdown marketing, promises of guaranteed APY in the triple digits, paid influencer shilling with no disclosure, and a founder who won't do a live video call are all behavioral tells that show up before the technical ones do. The SEC has brought numerous enforcement actions naming exactly this pattern, undisclosed paid promotion paired with unrealistic return claims, as a hallmark of securities fraud in crypto markets.
None of this requires trusting your gut. It requires five or six specific checks you can run in the time it takes to read a project's Twitter bio. Liquidity lock, holder concentration, contract functions, audit verification, and a real name behind the wheel. Skip any one of them and you're not investing, you're gambling on the character of a stranger who has every incentive to disappear with your money.
Also read: What Is Agentic AI and How Do Autonomous AI Agents Actually Work • What Is a Prediction Market and How Do Polymarket and Kalshi Price Truth • What Is a Vesting Cliff in Crypto and Why It Decides Who Actually Gets Paid
