How to Spot a Rug Pull in 60 Seconds: The Checklist I Use

Nearly $6 billion gone in 2025 alone.

Not to hackers. Not to exploits. To rug pulls—founders who minted tokens, pumped the price, drained the liquidity, and vanished before you could refresh your wallet.

And 2026 isn't shaping up better. The tools got smarter. The scams got slicker. The victims got more numerous.

I've watched three projects I "researched" evaporate overnight. I've seen devs I DMed personally disappear with eight-figure treasuries. I've developed a sixth sense for scams—and it's not intuition. It's a checklist.

Use this. Sixty seconds. Every single time. Before you click "buy."

It won't catch everything. But it will catch most. And "most" is the difference between portfolio growth and portfolio cremation.

The 60-Second Rug Pull Checklist

Print this. Screenshot it. Tattoo it on your brain.

Run through these before you invest. Clock it. If it takes longer than a minute, you're overthinking or the project is hiding something.

1. Team Doxxed? (10 seconds)

• Real names with LinkedIn profiles?
• Previous projects visible? (Google them)
• Photos that match video calls?

Red flag: Anonymous "devs" with anime profile pictures and "trust me bro" energy.

Exception: Satoshi was anonymous. You're not investing in Satoshi. Real teams show faces.

2. Liquidity Locked? (10 seconds)

• Go to DexScreener or Token Sniffer
• Check "Liquidity" section
• Look for "Locked" with a timer (minimum 1 year, ideally 3+)

Red flag: "Liquidity unlocked" or locked for 7 days. That's not a lock. That's a countdown to your liquidation.

Pro tip: Even "locked" liquidity can have backdoors. Read the lock contract. If you can't read code, find someone who can.

3. Contract Audited? (10 seconds)

• Check CertiK, Hacken, or OpenZeppelin reports
• Look for "Critical" or "High" severity findings
• Verify the audit matches the deployed contract (not a fake)

Red flag: "Audit pending" or "audit by unknown firm." Pending means unaudited. Unknown means paid shill.

Brutal truth: Audits don't prevent rugs. They catch obvious code traps. But unaudited contracts are guaranteed disasters.

4. Token Distribution Clean? (10 seconds)

• Check holder concentration on Etherscan/BscScan
• Top 10 wallets hold less than 20%?
• No single wallet with >5%?

Red flag: One wallet holds 40%. Dev wallet undisclosed. "Marketing wallet" with massive allocation.

Translation: You're not buying a token. You're funding someone's exit liquidity.

5. Socials Organic? (10 seconds)

• Twitter followers: Check engagement ratio (likes/comments vs followers)
• Discord: Real conversation or bot spam?
• Telegram: Admin answering questions or just posting "🚀🚀🚀"?

Red flag: 100K followers, 12 likes per post. Discord with 50K members, zero actual discussion.

Bot armies are cheap. Real community is expensive. Scammers buy the former.

6. Website Professional? (10 seconds)

• Working links? (Click them—half are dead)
• Whitepaper that explains mechanics or generic WordPress template?
• Team photos that aren't stock images? (Reverse image search)

Red flag: Website built in 2 hours. Whitepaper copied from 2017 ICOs. "About Us" section missing.

If they won't invest in presentation, they won't invest in your security.

7. Tokenomics Make Sense? (10 seconds)

• Total supply: Reasonable or quadrillion?
• Emission schedule: Sustainable or hyperinflationary?
• Utility: Does the token actually do anything?

Red flag: 1 quadrillion supply. "Reflection" mechanics that enrich early holders. No actual use case beyond "store of value" (it's not).

Math doesn't lie. Infinite supply + no utility = your money becomes their money.

The 30-Second Deep Dive (If You Pass Initial Screening)

Still interested? Go deeper. Fast.

• Check transaction history: Are dev wallets moving funds pre-launch? (Insider distribution)
• Verify contract ownership: Is ownership renounced or held by EOA (externally owned address)?
• Search "ProjectName + scam/rug": Has anyone flagged it? (Don't trust blindly, but don't ignore either)

If three or more red flags appear: Close the tab. Delete the bookmark. Forget the ticker.

There are 20,000 tokens. You need five. Be selective or be exit liquidity.

The Psychology of Rug Pulls (Why You Ignore This Checklist)

You know this stuff. You've read it before. You'll still get rugged.

Here's why:

FOMO overrides logic. "But it's pumping 300%!" Yes. That's the trap. Pumps attract liquidity. Liquidity enables rugs.

Social proof feels like due diligence. "My friend bought it." Your friend is a degen with no risk management. Don't copy degen behavior.

Complexity signals legitimacy. Fancy whitepapers. Technical jargon. "Revolutionary consensus mechanism." Scammers hire writers. Real innovation is rare and verifiable.

You want to believe. Early. Ground floor. Life-changing gains. This desire is the attack vector. Rugs don't steal money. They steal hope.

The Verification Stack (Tools I Use Daily)

Bookmark these. Use them. Every. Single. Time.

• Token Sniffer: Quick contract analysis
• DexScreener: Liquidity and holder checks
• Etherscan/BscScan: On-chain transparency
• Bubble Maps: Visual holder distribution
• RugDoc/Token Metrics: Community-sourced risk ratings

Free tools. Five minutes. Zero excuses.

When the Checklist Passes and You Still Get Rucked

Reality check: Sophisticated rugs pass all these.

• Audited contracts with hidden mint functions
• Doxxed teams that are paid actors
• Locked liquidity with proxy contract backdoors
• Long-term plays that slowly drain treasuries over months

This checklist catches amateur hour. It won't catch Ocean's Eleven.

The final protection: Position sizing.

Never more than 2% in any single alt. Never more than 10% in "experimental" plays. Never invest money that changes your life if lost.

You can survive being wrong. You can't survive being wrong and overexposed.

The 60-Second Promise

Print this. Laminate it. Keep it next to your monitor.

Before every buy, ask:

1. Team visible? ✓
2. Liquidity locked 1Y+? ✓
3. Contract audited? ✓
4. Distribution fair? ✓
5. Socials organic? ✓
6. Website legit? ✓
7. Tokenomics sane? ✓

Seven checks. Sixty seconds. Zero rugs.

The projects that matter will pass. The scams will fail by check three.

Your future self—the one who didn't lose 50% to a honeypot—will thank you.

Share this checklist. Save your friends. Starve the scammers.

The best rug pull prevention isn't regulation. It's educated investors who refuse to play.

Be unplayable.