Some links on this page are affiliate links: if you buy through them we may earn a commission, at no extra cost to you.
A honeypot crypto scam is a token that lets you buy but blocks, limits, or makes selling practically impossible. Before buying a newly launched token, verify its exact contract address and blockchain, run a buy-and-sell simulation, inspect taxes and permissions, and review its liquidity, holders, and trading history. If you cannot independently establish that your intended wallet can exit under realistic conditions, do not buy.
What is a honeypot crypto scam?
A honeypot token is designed to attract buyers while preventing ordinary holders from selling. You may spend ETH, BNB, SOL, USDC, or another asset through a decentralized-exchange pool and receive the suspicious token. When you try to sell, the contract or pool may reject the transfer, block your wallet, permit only approved addresses, impose an extreme tax, or limit the amount you can sell.
The result is a token with a visible balance and possibly a rising chart, but no practical way for most buyers to recover their money. Some honeypots allow the creator or selected wallets to sell normally while blocking everyone else. TokenSniffer describes patterns including direct honeypots, liquidity-pool blocking, blacklists and allowlists, and privileged creator wallets (TokenSniffer’s exploit typologies).
Do these 3 things before closing this tab:
1Fix the driver behind crashes, sound loss and screen glitches2Repair Windows errors before they cause bigger problems3Scan for outdated or missing drivers - takes under a minuteA rising price, numerous buys, or a large displayed market capitalization does not prove that ordinary holders can exit. The decisive question is whether selling works for the wallet and trading path you plan to use.
#1 Best Overall
- Effortlessly build your crypto portfolio via the all in one Ledger Wallet app: buy, sell, send, receive, swap, stake and more across popular blockchains. 15,000+ coins & tokens in a single dashboard. Keep a close eye on the market. Compare service providers. Track performance. Get timely alerts. Build your portfolio with confidence.
- Effortlessly build your crypto portfolio via the all in one Ledger Wallet app: buy, sell, send, receive, swap, stake and more across popular blockchains. 15,000+ coins & tokens in a single dashboard. Keep a close eye on the market. Compare service providers. Track performance. Get timely alerts. Build your portfolio with confidence.
- Enjoy Bluetooth connectivity, iOS access, and hours of battery use with this mobile-first, secure backup signer. Freedom you can depend on.
- Genuine Check: confirm your signer is authentic during setup with the Ledger Wallet app.
- Protect your signer: keep it in mint condition at all times with a bespoke Pod or Case to avoid scratches and everyday wear and tear.
Honeypots versus other crypto scams
| Scam or risk | Main trap | Can the victim usually sell? |
|---|---|---|
| Honeypot | The contract or pool blocks or cripples selling. | Usually not, or only under unusable conditions. |
| Rug pull | Developers remove liquidity, dump tokens, or abuse privileged control. | Sometimes at first; later liquidity or price collapses. |
| High-tax token | An excessive percentage is taken from each sale. | Technically possible, but economically impractical. |
| Blacklist scam | Specific wallets are blocked after buying. | Some wallets may sell while targeted holders cannot. |
| Fake token | The name, ticker, or logo imitates a legitimate asset. | It may trade, but it is not the real asset. |
| Wallet drainer or phishing scam | A malicious approval or transaction exposes wallet assets. | The token itself may be legitimate; the wallet is compromised. |
| Pump and dump | Promoters create hype, then insiders sell into demand. | Usually at first, until liquidity or price collapses. |
The distinctions matter because the response differs. A honeypot can leave the purchased token trapped. A wallet drainer can threaten unrelated assets. A rug pull may involve a token that was sellable before liquidity was removed. The CFTC warns that thinly traded tokens promoted through social media and sudden price spikes are common pump-and-dump environments, while the FTC discusses broader crypto scams such as fake coins, impersonation, and unsolicited links.
The five-minute pre-purchase test
1. Verify the exact contract address
Token names and tickers are not identifiers. Anyone can copy a popular coin’s symbol, logo, and branding.
- Get the address from the project’s verified website, documentation, or a recognized exchange listing.
- Confirm the blockchain: Ethereum, BNB Chain, Base, Solana, Arbitrum, Polygon, or another network.
- Compare the address across more than one official project channel.
- Paste the address—not the token name—into a security checker.
- Confirm that the checker is analyzing the same chain, decentralized exchange, and liquidity pair you intend to use.
An address without a chain identifier can be ambiguous. Tools may select a chain based on available liquidity if you do not specify one, so select the network explicitly whenever the tool allows it. Honeypot.is documents an address check with an optional chainID parameter (API documentation).
Free tools Windows power users keep installed
One-click scans. No signup required.
2. Run a buy-and-sell simulation
A pre-purchase simulator is more useful than relying on a chart, audit badge, or liquidity label. Check whether it reports:
- a successful simulated buy;
- a successful simulated sell;
- buy, sell, and transfer taxes;
- gas required for each direction;
- maximum buy, sell, or wallet limits;
- the exact pair or route tested; and
- whether the simulation itself completed successfully.
Honeypot.is exposes simulation status, buy and sell results, tax estimates, gas estimates, and detected limits. Its API documentation also distinguishes a completed result from an unavailable or failed check.
Rank #2
- Proven security at scale: Over 9 years and millions of cards issued with no known remote hacks, while military‑grade EAL6+ security keeps your private keys locked inside the chip. Your cryptocurrencies stay strongly protected from online attackers.
- Tap once to manage your entire crypto wallet across 90 blockchains - no USB cables or Bluetooth, no batteries, no setup. Access 14,100+ coins & tokens, DeFi, NFTs, and staking instantly from your phone
- Smart backup: Use your second Tangem Wallet as your Backup keys with end‑to‑end encryption; no more papers, pictures. If one card is lost, the remaining can still restore full access, with an optional seed phrase available for advanced users.
- Engineered to last up to 25 years: Waterproof (IP69K), shockproof and tested for extreme temperatures from −25°C to 50°C. A durable cold wallet with long‑term protection and independently audited security.
- Trusted by 6 million users worldwide - buy, sell, swap, stake, and spend cryptocurrency directly. The secure offline storage wallet designed for how people actually use crypto wallets
Technical users can request a check using the documented endpoint:
curl -G "https://api.honeypot.is/v2/IsHoneypot"
-d "address=TOKEN_CONTRACT_ADDRESS"
-d "chainID=CHAIN_ID"API authentication, quotas, supported chains, and pricing can change; consult the current documentation rather than treating any access arrangement as permanent.
Quick wins for a faster PC:
Scan for outdated or missing drivers - takes under a minuteDriver Scan →Clear out junk files and repair common Windows errorsFree Scan →3. Interpret the result conservatively
A positive honeypot result or failed sell simulation is a stop sign. An apparently clean result means only that the tested path did not reveal a known restriction at that time. It does not establish that the project is legitimate, liquidity is secure, holders are fairly distributed, or the contract cannot change later.
A failed simulation is not a clean result. It may reflect a honeypot, but it can also result from insufficient liquidity, an incorrect pair or router, excessive slippage, paused trading, gas problems, or an unsupported chain. Treat an unexplained failure as “do not buy,” not as evidence of safety.
Simulation can miss wallet-specific blacklists, block- or time-triggered restrictions, small maximum sells, owner-controlled tax changes, proxy upgrades, external calls, newly deployed code, and behavior that differs between pools. A token can also produce false positives because of temporary anti-bot protections, anti-whale limits, launch taxes, presale restrictions, proxy architecture, or an unavailable pool. Do not override a warning merely because the project says the restriction is intentional. Wait until it is removed, documented, and verifiable on-chain.
Rank #3
- Dual-chip architecture for maximum protection: The next-gen, fully auditable TROPIC01 chip works alongside a certified EAL6+ Secure Element—completely NDA-free—to deliver radically transparent, industry-leading defense against physical attacks.
- Quantum-ready security: Get protection against future threats with the first-ever hardware wallet designed with quantum-ready architecture.
- See every detail with confidence: Our largest high-resolution color touchscreen makes it easy to navigate your assets, review transactions and manage your coins with clarity.
- Wireless freedom with encrypted Bluetooth control: Manage, buy, swap and stake securely using Trezor Suite on desktop or mobile. Qi2-compatible wireless charging keeps your Trezor powered up. No cables required—security meets convenience.
- Works seamlessly with Android, iOS and desktop: Connect wirelessly or via USB-C to your phone or computer. Manage your crypto anywhere with our companion Trezor Suite app.
Use more than one security checker
These tools are screening systems, not guarantees. Use them as independent evidence:
Crashes, No Sound, or Screen Glitches?
Random freezes, missing sound and display glitches usually trace back to one bad driver. Find and replace yours safely.Free scan · under a minuteWindows Errors? Fix Them Before They Spread
Repair common Windows errors and clear accumulated junk for a smoother, more stable PC - no reinstall needed.Free scan · no reinstall- Honeypot.is: focuses on buy-and-sell simulation, taxes, gas, limits, pair data, holders, and contract information. Start at Honeypot.is and review its summary flags.
- GoPlus Token Security: adds signals for honeypots, pausable transfers, blacklists, fake tokens, malicious addresses, approvals, and related risks. Its token-security fields are documented at GoPlus documentation.
- TokenSniffer: provides a second opinion on known contract exploit patterns. See TokenSniffer and its documentation.
Do not combine different tools’ scores into a false numerical certainty. A “not honeypot” result generally means that a particular analysis did not detect a known selling restriction. It is not a safety certification.
Contract red flags to investigate
When verified source code is available, use automated analysis first. Nontechnical readers should not attempt to audit Solidity line by line. Instead, look for the following functions or warnings in a recognized explorer or checker:
- Blacklist or whitelist controls: the owner can block selected wallets or allow only approved addresses.
- Pause controls: the owner can suspend transfers or trading.
- Tax controls: buy, sell, or transfer fees can be raised after buyers enter. A high tax is not always technically a honeypot, but an extreme or owner-controlled tax is an economic stop sign.
- Transaction and wallet limits: maximum-sell, maximum-buy, or maximum-wallet rules can make an apparent sale impossible.
- Minting: the creator can create more tokens and dilute holders or sell into liquidity.
- Fee and router changes: the owner can redirect fees, replace the trading pair, or alter the router or trading configuration.
- Proxy upgrades: an upgradeable contract can change its implementation after deployment.
- External calls during transfers: unfamiliar delegated or external logic can affect whether transfers succeed.
GoPlus specifically identifies pausable-transfer and blacklist risks, including the possibility that an owner can suspend trading or block selected addresses (GoPlus response details). An open-source or verified contract is easier to inspect, but “verified” only means the published source corresponds to the deployed code. It is not an independent audit. An audit may have limited scope, predate later changes, or omit economic and governance risks.
Ownership renounced may reduce certain owner controls, but it does not remove malicious logic already deployed, guarantee safe liquidity, or prevent every form of manipulation. A proxy’s administrator and implementation must also be understood; otherwise, “renounced ownership” may provide a misleading sense of security.
Recommended Free Tools
Rank #4
- All your digital assets in one place. You can manage thousands of crypto including Bitcoin, Ethereum, Solana, Tether and more.
- Defend your identity against hackers: secure your online accounts with passwordless, hardware backed, 2FA logins for all your favorite apps and websites.
- Connectivity: USB-C cable connection only. No Bluetooth.Compatible with the Ledger Wallet crypto app, both desktop (Windows, macOS, Linux) and mobile (Android only). Not compatible with iOS.
- Protect your digital assets with the industry's best security: keep your private keys offline in your private signer, battle-tested by the Donjon's white hat hackers, CC EAL 6+ certified Secure Element, constantly updated Ledger OS.
- Effortlessly build your crypto portfolio via the all in one Ledger Wallet app: buy, sell, send, receive, swap, stake and more across popular blockchains. 15,000+ coins & tokens in a single dashboard. Keep a close eye on the market. Compare service providers. Track performance. Get timely alerts. Build your portfolio with confidence.
Inspect the real pool, liquidity, holders, and trading history
Liquidity is not the same as liquidity safety
Confirm how much liquidity exists in the specific pool you plan to use and compare it with the claimed market capitalization. Very small liquidity can allow insiders to manipulate price and make a normal exit expensive or impossible.
Then ask:
- Who controls the liquidity-provider position?
- Is the liquidity locked, burned, or simply held by a wallet?
- When does the lock expire, and can it be withdrawn early?
- Are there multiple pools with different behavior?
- Could the displayed liquidity be temporary, borrowed, or controlled by insiders?
A lock can reduce the risk of immediate liquidity removal, but it does not prevent malicious transfer rules, extreme taxes, minting, price manipulation, or a future contract upgrade. Honeypot.is provides pair, reserve, liquidity, and router information in its pair documentation.
Examine holder concentration
Review top holders rather than relying on the total holder count. Identify whether the largest addresses are burn addresses, exchanges, contracts, liquidity pools, team wallets, or ordinary wallets. A few wallets controlling most of the supply can dump on buyers or coordinate the market. A low holder count can simply mean the project is new, but it also makes manipulation easier. Honeypot.is documents top-holder information at its top-holders reference.
Look for successful sells
Inspect the blockchain explorer or trading analytics for successful sells, not just buys, volume, and a rising chart. Warning patterns include:
- sells coming only from the deployer or a handful of known wallets;
- repeated tiny sells that create the appearance of an open market;
- many failed sell transactions;
- sudden tax changes;
- new liquidity pools appearing after promotion; and
- large transfers from insider wallets.
A small successful sale by a developer-controlled wallet is weak evidence. A contract may allow privileged wallets to sell while blocking ordinary buyers.
Best Value
- UNPARALLELED SECURITY: Protect your assets with Trezor Safe 5's NDA-free EAL 6+ Secure Element, offering robust defense and complete transparency.
- EFFORTLESS NAVIGATION: Experience seamless crypto management with the vibrant color touchscreen, designed for intuitive and user-friendly interactions.
- ENHANCED USER EXPERIENCE: Enjoy tactile confirmation with Trezor Touch Haptic Engine, making each interaction precise and engaging.
- SUPPORTS 1000s OF COINS & TOKENS: Securely handle thousands of assets, including Bitcoin, Ethereum, and more, all in one wallet.
- EASY ASSET MANAGEMENT: Monitor and transact seamlessly with Trezor Suite, our user-friendly desktop and mobile app
Evaluate the website and promotion
Technical checks cannot tell you whether the people promoting a token are honest. Walk away from unsolicited investment messages on Telegram, Discord, X, dating apps, or text; guaranteed or “risk-free” returns; “100x” promises; countdown pressure; celebrity impersonation; fake exchange listings; and airdrop links that require an unfamiliar wallet connection.
Also check for copied branding, misspelled domains, inconsistent contract addresses, anonymous teams combined with aggressive financial promises, or requests to send funds to activate, unlock, or verify a withdrawal. The CFTC’s digital-asset fraud guidance advises skepticism toward guaranteed returns and social-media opportunities. Its guidance also covers scam-website warning signs (CFTC advisory).
Search the project, token, and contract address together with terms such as “review,” “scam,” and “complaint,” as the FTC recommends. This cannot prove a token is safe, but it can reveal copied projects, impersonation, and reports of failed sells.
What’s actually slowing this PC down?
Pick the symptom - the matching free tool is one click away.
Stop rules: when not to buy
Walk away if any of these apply:
- a tool identifies the token as a honeypot;
- the sell simulation fails;
- the simulation cannot complete and there is no clear, independently verifiable reason;
- the sell tax is extreme, variable, or owner-controlled;
- the contract can blacklist, pause, or selectively exempt wallets;
- the contract is closed-source and the token is new or aggressively promoted;
- the project cannot provide one consistent contract address;
- liquidity is tiny compared with the claimed market cap;
- a few wallets control most of the supply;
- promotion relies on guarantees, urgency, or unsolicited contact; or
- you are being asked to connect a wallet to claim, unlock, verify, or recover funds.
None of these statements is sufficient proof of safety: “liquidity locked,” “ownership renounced,” “contract verified,” “audited,” “trending,” “many holders,” “large market cap,” “the chart is rising,” or “a famous influencer promoted it.” Treat them as individual facts requiring context, not as guarantees.
What to do if you already bought a suspected honeypot
- Stop retrying the sale. Repeatedly increasing slippage or submitting failed transactions can consume more gas without overcoming a contract-level restriction.
- Do not use a recovery service. Never share your seed phrase or private key, and never send more crypto to unlock a refund.
- Review approvals carefully. Revoke unnecessary token approvals through a reputable approval-management tool. Revoking an approval does not recover funds already stolen and may not help if the token contract itself blocks selling.
- Isolate unaffected assets. If you connected to a malicious website or signed a suspicious approval, move unaffected assets to a fresh wallet. Do not keep using a wallet you believe may be compromised.
- Preserve evidence. Save transaction hashes, contract addresses, website URLs, screenshots, wallet addresses, and messages.
- Report the incident. Notify the relevant exchange, wallet or platform, blockchain service, and appropriate consumer-protection or law-enforcement authority in your jurisdiction.
Recovery offers are often a second scam. Chainalysis warns that criminals impersonate legitimate crypto firms in recovery schemes and notes that it does not provide investigation assistance to individual victims (Chainalysis scam warning).
Printable checklist
Before buying a new token
- ☐ Verify the exact contract address.
- ☐ Verify the blockchain and trading pair.
- ☐ Run a honeypot simulation.
- ☐ Confirm the simulation itself succeeded.
- ☐ Confirm selling works in the simulation.
- ☐ Review buy, sell, and transfer taxes.
- ☐ Check maximum-sell and maximum-wallet restrictions.
- ☐ Check blacklist, pause, mint, tax-change, and upgrade permissions.
- ☐ Check whether the source code and relevant external contracts are verified.
- ☐ Inspect liquidity ownership, lock terms, and expiry.
- ☐ Inspect top holders and insider concentration.
- ☐ Review successful sells, not just buys or price movement.
- ☐ Search the project and contract address with “review,” “scam,” and “complaint.”
- ☐ Use more than one checker and never rely on one influencer.
Hard rule: If you cannot establish a credible exit path for your wallet, do not buy.
Quick Recap
Product prices and availability are accurate as of the date/time indicated and are subject to change. Any price and availability information displayed on Amazon at the time of purchase will apply.
