Liveconnecting
Check a coin

Safety checks

How to tell if a Solana token is a scam, step by step

A 12-step check to run before buying any Solana token: authorities, liquidity, holders, bundles, insiders, creator history, copycats and whether it sells.

Updated 22 October 20267 min readBy Before It Rugs

You can't prove a Solana token is safe, but you can check for the signs most scams share in a few minutes. Get the contract address from a source you trust, then check that mint and freeze authority are revoked, the liquidity is locked or burned, no single wallet or hidden group holds a big share, the creator has no record of failed launches, the ticker isn't a copy and the token can actually be sold. If a token fails any of these, you have learned something important before spending a penny.

Before It Rugs is not affiliated with RugCheck, DexScreener, Solscan, Bubblemaps or Jupiter. The labels below were checked in October 2026. Labels move, so check if something looks different.

The full check, in order

  1. Get the contract address from a trusted source. Copy it from the project's own account or the launchpad page, never from a reply, a DM or a search by name. Names and tickers are not unique on Solana. See wallet safety.
  2. Paste it into our rug check. You'll see its warning signs graded A to F, each with a plain English reason. Use it as a starting point, then confirm the details yourself. See what our grades mean.
  3. Check mint and freeze authority. Both should be revoked. Active mint authority means more tokens can be printed. Active freeze authority means your tokens can be locked so you can't sell. See mint and freeze authority.
  4. Check the liquidity and whether it is locked or burned. Thin liquidity means small sells move the price a lot. Unlocked liquidity can be withdrawn by whoever added it. See liquidity locks and burns and market cap, FDV and liquidity.
  5. Look at the top holders, leaving out pools. The pool, bonding curve and lock contracts aren't real holders. Once they are removed, one wallet with a large share is a seller big enough to crash the price. See how to check holders on Solscan.
  6. Look for identical bags. Several top wallets holding almost exactly the same amount usually means one team bought across many wallets at launch. See bundled launches.
  7. Check for linked wallets. On Bubblemaps, groups of connected bubbles can be one person spread across many wallets. Add their holdings together. See how to read Bubblemaps and insider wallets.
  8. Check the creator's history. RugCheck names the wallet that created the token. If it has launched coins that collapsed within a day, that pattern is worth knowing. Our serial launchers page lists creator wallets with three or more coins in our records.
  9. Make sure it isn't a copycat. Search the ticker on DexScreener. If an older coin uses the same name, make sure you have the one you meant. See copycat tokens and our copycats list.
  10. Ask who is promoting it, and whether they are paid. Boosts, paid profiles and influencer posts can be bought by anyone, including a team planning to sell. See DexScreener boosts and paid crypto influencers.
  11. Check that you can sell. Read Jupiter's warnings and RugCheck's flags for risky Token-2022 settings such as a permanent delegate, a transfer fee or a transfer hook. A token you can buy but not sell is a honeypot. See can't sell a Solana token?
  12. Decide your exit before you buy. Pick the amount you can afford to lose completely, and where you would take profit or cut the loss. See taking profits and setting a stop-loss on Jupiter.

Key point: Steps 3 to 11 take a few minutes once you know where to look. If you are short of time, steps 1, 3, 5 and 11 catch the most direct ways to lose everything.

What do scam tokens have in common?

Most scam tokens share at least one of three things: the creator kept control (an active authority, unlocked liquidity or a risky token setting), the supply sits with a few wallets or one hidden group, or the attention was bought rather than earned. The details change from month to month, but these patterns repeat.

In practice that shows up as a few familiar types, all covered in how to spot a rug pull:

  • Liquidity pull. The creator removes the pool's money and the price goes to almost nothing.
  • Insider dump. A team that bought cheaply across many wallets sells into everyone who arrived later. See pump.fun rug pulls and sniper bots.
  • Honeypot. Buying works, selling doesn't, because of a freeze or a token setting.
  • Copycat. A new coin borrows the ticker of one people are talking about.
  • Slow rug. Insiders sell a little at a time over days, so no single check trips.

How does Before It Rugs score these signs?

Our grades add warning points from public data, mostly from RugCheck's report. More points means a worse grade, and 6 or more points is an F. Here are the main signals and their points at the time of writing:

Sign Points
RugCheck marks the token as rugged 9
Mint authority still active 4
Freeze authority still active 4
Identical bags in 3 or more top wallets 3
One wallet holds 15% or more (pools and lockers left out) 3
Creator has launched tokens that rugged 3
20 or more linked insider wallets (with conditions) 3
Liquidity not locked 2
Copycat of an older coin 2
Top 10 wallets hold 50% or more 2

The full list, with the conditions and the smaller signals, is on our methodology page. These are our scoring rules, not universal limits. A coin can stay under every one of them and still be a bad buy.

Can a token pass every check and still be a scam?

Yes. A clean check means the usual warning signs were not found, not that the coin is safe. Insiders can buy through fresh wallets funded from exchanges, sell slowly over days, or promise things off-chain that no token data can see.

Our guide to coins that pass every check and still rug walks through eight ways it happens. Our scorecard also publishes how often coins with no red flags collapsed anyway, so you can see the limits for yourself.

Which free tools should I use?

Four free tools cover almost every step above: RugCheck for the safety report, DexScreener for market data, Solscan for holders and wallet history, and Bubblemaps for links between wallets. Jupiter's swap screen adds its own warnings at the point you trade. We are not affiliated with any of them.

Tool Best for
RugCheck Mint and freeze authority, top holders, insider wallets, liquidity locks, risk flags and the creator wallet. See how to read a RugCheck report
DexScreener Price, liquidity, pair age, buys and sells, paid boosts, a Holders tab and a Maps tab (an embedded Bubblemaps view). See how to read a DexScreener page
Solscan The full holder list, which wallet funded each holder, and the token's program and extensions
Bubblemaps Which top holders have sent tokens to each other
Jupiter Warnings when you go to swap, such as Has Freeze Authority and Not Verified

Jupiter's own documentation is clear that its indicators are "informational tools, not guarantees of safety" (Jupiter docs). The same is true of every tool here, ours included.

What should I do if a token fails a check?

One failed check is a reason to stop and look harder, and several together are a pattern. Most people find it easier to walk away than to argue themselves past a red flag, because there will always be another coin.

If you already hold a token that fails a check, read can't sell a Solana token? to see what the risk means for you, and taking profits for getting your stake back out. Nothing on this page is financial advice.

Not financial advice. This guide explains how things work. It is not a recommendation to buy, sell or hold anything. Memecoins are extremely high risk and most go to zero.

More in Safety checks