Rug pulls remain one of the most damaging forms of fraud in crypto. The source article says that about 2 million people across 117,000 projects lost funds to these schemes in 2022 alone. The pattern is familiar: a team builds hype with technical language, polished branding, and aggressive promotion, then abandons the project or unloads its holdings once enough users have bought in.
Two common forms sit at the center of most rug pulls
The source describes rug pull as a broad term covering several scams carried out by malicious founders. Two of the most common are exit scams and pump-and-dump schemes. In an exit scam, founders and close insiders create a project that appears legitimate, attract a community, and disappear after users commit capital. In a pump and dump, the team controls a large share of the token supply, drives up demand through hype, and sells those holdings into new buyers at elevated prices.
The mechanics differ, but the intent is the same. Buzz comes first, token value is pushed higher, and the community is left holding assets that quickly lose credibility or price support.
Vague answers can be an early sign of trouble
Poor communication is one of the first signals worth tracking. A team that cannot explain how its product works, what problem it solves, or where its value comes from may not be building much at all. The article notes that weak communication is not automatically proof of fraud, but it can point to a deeper issue, including the possibility that the project exists mainly to lure users into buying tokens with little long-term value.
When founders or team members avoid direct responses to fair questions, risk should be reassessed. There may be harmless reasons for delays, but skepticism is often a practical defense.
Promises without delivery deserve close scrutiny
Another warning sign is a steady stream of promised utility, features, or milestones that never arrive. A team that repeatedly misses execution targets or keeps postponing its goals may be exposing a lack of conviction or capability. The source highlights the 2020 to 2022 DeFi boom, when inflated yield claims became a common hook in fast-money schemes that left many users with losses.
No product in crypto should be treated as risk-free. Even activities often described as safer, such as providing liquidity or staking, can still expose users to asset erosion or diluted APY. If a project talks constantly about outsized returns while offering little detail on tradeoffs, the risk profile deserves a harder look.
Fake engagement can distort how real a project looks
Artificial likes, follows, and bot-driven interaction can also signal trouble. Projects with real utility tend to build communities in a more organic way. If engagement has to be purchased, it may be masking weak demand or a lack of purpose.
The article gives a simple example: a project with 30,000 Twitter followers but only a few hundred views per post may have acquired its audience inorganically. Follower counts alone do not prove legitimacy. The quality and consistency of interaction matter more.
Token allocation can reveal the team’s incentives
Even when a team is active and community growth looks genuine, supply distribution can provide a more subtle clue. The key question is whether founders and insiders control an oversized share of the token supply. According to the source, developer holdings of 25% or more should raise concern.
Projects that aim to create durable value usually try to keep allocation as fair as possible and reduce concentrated control over time. Scammers tend to move in the opposite direction, keeping enough supply to dump into the market or manipulate liquidity later.
No audit is bad enough; fake audits are worse
Audits are not flawless, but they serve a clear purpose: checking for vulnerabilities, identifying dangerous backdoors, and testing whether creators retain harmful control over user assets. A project that refuses an audit may be avoiding outside review of those protections.
A fake audit goes further. It shows an active attempt to mislead potential participants. The source advises users to verify suspicious documentation through trusted third-party sites, and names OpenZeppelin and PeckShield as examples.
No single indicator can confirm a rug pull on its own. Communication quality, delivery history, social metrics, token concentration, and audit credibility need to be examined together. The louder the promotion, the more useful basic verification becomes before committing funds.