A rug pull is one of the most devastating scams in cryptocurrency. The name comes from the idiom "pulling the rug out from under someone" -- one moment you think you are standing on solid ground, and the next, everything collapses. In the crypto world, this means developers create a token, attract investors, then drain the funds and disappear, often in a matter of hours.

If you have been affected by a rug pull, or you suspect a project might be one, know that you are not alone. Hundreds of thousands of people have fallen victim to these schemes. Understanding how they work is the first step toward protecting yourself and others.

How Crypto Rug Pulls Work

Rug pulls follow a pattern. While the details vary, most share the same basic playbook.

1. Create a Token and Build Hype

Scammers create a new cryptocurrency token, often on low-cost blockchains like Binance Smart Chain (BSC) where listing fees are minimal and vetting is less stringent. They build a professional-looking website, create social media accounts, and pay influencers to promote the project. The token often rides on a trend -- a popular meme, a celebrity endorsement, or a current event.

2. Attract Investors and Inflate the Price

As people buy the token, the price rises. Early investors see gains and share their excitement, drawing in more buyers. The developers may also artificially inflate the price by trading among wallets they control, creating the illusion of organic demand.

3. Pull the Rug

Once enough money is invested, the scammers strike. They might drain the liquidity pool (the funds that allow trading), sell off a massive supply of tokens they secretly held, or activate a hidden function in the smart contract that blocks everyone else from selling. The token price collapses to near zero, and the developers vanish with the funds.

Real Examples of Crypto Rug Pulls

The $LIBRA Token Scandal (February 2025)

In one of the most high-profile rug pulls in recent history, Argentine President Javier Milei promoted a cryptocurrency called $LIBRA on social media. The token's market cap surged past $4.4 billion within hours. It then collapsed in what analysts described as a coordinated rug pull, with approximately 74,000 traders collectively losing $286 million. An investigation uncovered a suspected $5 million payment agreement for Milei's promotion of the project.

SafeMoon (2023)

SafeMoon attracted millions of investors with promises to take the token price "safely to the moon." In reality, the SEC charged that founders withdrew over $200 million from the liquidity pool -- funds they told investors were safely locked. The money went to luxury homes, McLaren sports cars, and extravagant travel. SafeMoon's former CTO admitted under oath that the project was a rug pull, and criminal charges for wire fraud, securities fraud, and money laundering followed.

Squid Game Token (2021)

Riding the popularity of the Netflix series, the SQUID token launched at $0.01 and skyrocketed to $2,861 in less than a week. When investors tried to cash out, they discovered they could not sell -- a classic honeypot mechanism. The developers dumped their holdings, crashing the price by 99%, and walked away with over $3.3 million.

Thodex ($2 Billion, 2021)

Turkish crypto exchange Thodex halted trading overnight, locking hundreds of thousands of users out of their accounts. CEO Faruk Fatih Ozer fled the country with approximately $2 billion. He was eventually arrested in Albania in 2022 following an international warrant.

The Scale of the Problem

The numbers are staggering. According to the FBI's Internet Crime Report, cryptocurrency fraud losses continue to climb year over year. In 2024, crypto investors lost over $500 million to memecoin rug pulls and scams alone. Across the broader DeFi ecosystem, rug pulls accounted for 65% of all DeFi-related scam losses. According to DappRadar, rug pulls in 2025 are becoming less frequent but far more devastating when they occur -- the average rug pull now unfolds in just 12 days, down from 21 days in 2023. The CFTC and SEC have both issued specific advisories about DeFi-related fraud.

Roughly 76% of rug pulls involve tokens launched on Binance Smart Chain, largely because of its lower costs and less rigorous project vetting.

Red Flags: How to Spot a Rug Pull Before It Happens

No single warning sign guarantees a project is a scam, but the more red flags you see, the higher the risk.

Anonymous or Unverifiable Team

The single strongest predictor of a rug pull is an anonymous team with no verifiable history. Legitimate projects have founders with public identities who stake their reputations on the project's success.

Unaudited Smart Contracts

If a project has not had its smart contract independently audited by a reputable firm, the developers may have hidden functions that allow them to drain funds, mint unlimited tokens, or block you from selling.

Unlocked or Short-Duration Liquidity

Liquidity should be locked in a time-lock contract for a meaningful period (typically one year or more). If liquidity is unlocked, or locked for only a few weeks, the developers can drain the pool at any time. Be aware that a known unlock date simply means the rug pull is scheduled.

Concentrated Token Holdings

Use a blockchain explorer to check the token's distribution. If a small number of wallets control the majority of the supply, a coordinated dump can crash the price in seconds.

Hype Over Substance

Heavy spending on influencer promotion, flashy social media campaigns, and promises of guaranteed returns -- while the actual product or technology is vague or nonexistent -- is a classic pattern. If the project's budget goes to marketing instead of development, ask why.

Unrealistic Return Promises

Tokens promising triple-digit annual yields or guaranteed price increases are almost certainly too good to be true. Legitimate investments carry risk, and anyone who tells you otherwise is likely trying to take your money.

How to Protect Yourself

• Research the team. Verify the identities of the founders. Look for LinkedIn profiles, past projects, and conference appearances. If the team is completely anonymous, proceed with extreme caution.
• Check the smart contract. Look for independent audits from established firms. Tools like Token Sniffer and RugDoc can flag common contract vulnerabilities.
• Verify liquidity locks. Use platforms like Unicrypt or Team.Finance to confirm that liquidity is actually locked and for how long.
• Analyze token distribution. Check the top holders on a blockchain explorer. Heavy concentration in a few wallets is a major risk.
• Wait before investing. Rug pulls almost always happen within the first few weeks of launch. If you cannot afford to wait 30 days to see if a project survives, you probably cannot afford to lose that investment.
• Never invest more than you can afford to lose. This is especially true for new, unproven tokens.

What to Do If You Have Been Rug Pulled

If you believe you have been the victim of a rug pull, take these steps:

1. Document everything. Save transaction records, wallet addresses, screenshots of the project's website and social media, and any communications with the team.
2. Report the scam. File a report with the FBI's Internet Crime Complaint Center (IC3), the FTC, the CFTC, and your local law enforcement. See our full guide to reporting crypto scams for step-by-step instructions.
3. Warn others. Share your experience on community forums and social media to prevent others from falling victim.
4. Be wary of "recovery" services. Scammers often target rug pull victims a second time by posing as crypto recovery specialists who claim they can retrieve your funds for a fee. These are almost always scams themselves.

Check a suspicious site now -- our free tool analyzes websites for scam indicators in seconds.