Security
kycbit
Avoiding Crypto Scams and Phishing: A Practical Checklist
Feb 10, 20266 min
Common crypto scams, phishing tactics, plus steps to protect accounts and wallets.
ReadOn-chain trading gives investors early access to token launches, direct interaction with decentralized liquidity pools, and full custody control.
It also removes centralized protections.
Unlike trading on regulated exchanges, on-chain participation requires independent due diligence. Understanding token permissions, wallet distribution, liquidity structure, and impersonation scams is essential before deploying capital.
This guide outlines how to reduce exposure to rug pulls and stealth manipulation tactics.
On Solana and similar ecosystems, token creators can deploy contracts with freeze authority enabled, allowing them to freeze token accounts.
Technical reference (Solana Token Program):
https://docs.solana.com/developing/programming-model/accounts
If freeze authority remains active, creators can:
In speculative token launches, freeze authority is rarely justified.
| Feature | Risk Level | Why It Matters |
|---|---|---|
| Freeze authority active | High | Creator can block selling |
| Freeze authority revoked | Lower | Token cannot be frozen later |
| Unknown authority status | Elevated | Requires deeper inspection |
For tokens launched on Raydium, the liquidity pool should hold a significant allocation. Raydium documentation: https://docs.raydium.io
If Raydium’s allocation appears unusually low at launch, further investigation is warranted.
⸻
Mutability refers to whether token attributes can be changed post-launch.
This includes: • Mint authority • Freeze authority • Metadata changes
While mutability alone is not inherently malicious, it becomes concerning when combined with: • Concentrated supply • Active freeze authority • Unverified contract source
Solana token program documentation: https://spl.solana.com/token
If mint authority is not revoked, new tokens can potentially be created.
⸻
No single tool guarantees safety. Use multiple verification layers.
Rugcheck.xyz
https://rugcheck.xyz • Freeze authority detection • Mint authority status • Risk flags
Birdeye
https://birdeye.so • Wallet distribution analysis • Liquidity pool insights • Trade flow visualization
Dexscreener
https://dexscreener.com • Liquidity pool depth • Volume trends • Transaction patterns
CryptoQuant (advanced analysis)
https://cryptoquant.com • Exchange flow data • On-chain movement tracking
⸻
Not all scams remove liquidity instantly.
Slow rugging involves gradual sell-offs by developer-linked wallets.
Standard Slow Rugging Indicators • Gradual reductions in top wallet balances • Repeated sell pressure after minor rallies • Lack of meaningful organic buy activity
Sneaky Slow Rugging Indicators • Repetitive sell patterns from wallets that repeatedly return to zero • Tokens routed through intermediate wallets before selling • Multiple wallets funded from a single parent wallet
You can trace wallet origins using: • Solscan • Birdeye • Solana Explorer: https://explorer.solana.com
⸻
Telegram displays sponsored ads at the top of chats and channels. These ads are placed by Telegram, not by trading platforms.
Telegram official information: https://telegram.org/blog/sponsored-messages
Scam ads frequently impersonate legitimate trading bots such as BullX, Photon, Maestro, or Axiom.
Common Scam Patterns
Fake ads may promote: • Early access or waitlist bypass bots • “Backup” or “v2” versions • Fake airdrops • Claims that the original bot is down
These tactics create urgency.
Crypto phishing is a scam that tricks users into revealing seed phrases, passwords, or approving malicious transactions.
No. Any request for a seed phrase or private key is a scam.
Verify announcements on official channels and avoid links from direct messages.
Yes. Hardware wallets keep keys offline which reduces phishing and malware risks.
Move assets to a new wallet, revoke approvals, then contact platform support quickly.