What is a Rug Pull in Crypto and How to Avoid It

What is a rug pull? A crypto rug pull occurs when a project’s insiders drain value or remove liquidity, preventing investors from selling and leaving them with nearly worthless tokens.

That’s the rug-pulling moment. If you’ve asked, “What is a rug pull in crypto?” or “Rug pull meaning,” this guide explains what rug pulls look like, how they occur, and how to avoid them.

---

What is a rug pull?

A crypto rug pull is a form of exit scam. Founders or insiders create a token or NFT project, pump attention, and then remove liquidity, mint or dump extra supply, or otherwise block exits so holders can’t sell.

In plain terms, it’s market manipulation plus misrepresentation. Chainalysis estimated that rug pulls accounted for 37% of crypto scam revenue in 2021, totaling approximately $2.8 billion, which provides context for why “rug pull scam” remains a top risk in 2025.

You’ll hear two patterns. A hard rug forcibly removes liquidity from a pool, collapsing the price and trading. A soft rug happens when insiders dump large allocations into retail demand, then abandon the project. Both thrive where contracts aren’t verified, liquidity isn’t locked, or ownership remains centralized. If you’re asking “what does rugging mean in crypto,” it’s this act of stripping out value and exits.

---

The anatomy of a Rug Pull: Common scam tactics

Rug pulls reuse the same playbook. Teams seed a DEX pool, set a tempting price, and manufacture social proof. Then they yank liquidity, block selling with contract traps, or dump insider supply from pre-mines or hidden mints. Many mix methods, blurring soft vs hard rugs.

Check four items: liquidity locks and control, sell rules in code, holder concentration and vesting, and NFT deliverables that can be abandoned. Audits help, but aren’t sufficient; proxies can upgrade, and off-chain promises fail. Treat new tokens as risky until proven otherwise.

1. Liquidity Pulls

This is the classic liquidity pool scam. A team launches a token, pairs it with a reputable asset on a DEX, and attracts buyers. When enough real value sits in the pool, the deployer or controller withdraws liquidity. The price collapses to near zero, and trading stalls.

To lower this risk, confirm the pool’s lock, the lock duration, and who controls the lock contract. Prefer renounced LP ownership with time locks you can verify on-chain. Beware short locks around marketing events, and watch for single-key control of LP tokens.

Compare how DEX pools differ from order books in CEX Versus DEX: What Are the Main Differences?

2. Malicious Smart Contracts

Some contracts embed sell-blocking or fee-spiking logic that only activates under load. You’ll see buy-only “honeypots,” max-wallet traps, trading-pause switches, or owner-only transfer rights. Read the verified source on a blockchain explorer and diff it against the deployed bytecode.

Scan for owner-settable taxes, blacklist functions, or transfer hooks that can revert sells. Tools help, but manual review matters. If the contract isn’t verified, treat it as a non-auditable risk. This goes back to ensuring that you store your cryptocurrencies safely.

3. Token Supply Dumps

In a soft rug, insiders hold oversized allocations or keep a hidden mint path. As prices rise, they mint and dump, or unload, their pre-mined supply onto the market, then disappear. Vet initial distribution, cliffs, and vesting.

Look for multi-sig control of minting and immutable caps where possible. If a few wallets hold most of the supply, assume they can nuke the market. A vesting schedule you can’t verify on-chain isn’t a schedule.

4. NFT Rug Pulls

NFTs add marketing promises, roadmaps, utilities, and metaverse perks. A meme coin rug pull equivalent in NFTs is when the founders mint out, abandon Discord, and stop delivering.

And courts are catching up. The Mutant Ape Planet creator pled guilty to conspiring to commit wire fraud after defrauding buyers of more than $2.9 million, showing that “are rug pulls illegal” increasingly intersects with wire-fraud enforcement. Treat anonymous teams, thin roadmaps, and no escrow for deliverables as high risk.

5 red flags: Your checklist for spotting a rug pull

A crypto rug pull often hides in plain sight. Use this section as a step-by-step rug pull check before you buy or add liquidity.

---

1) Unverified contracts and anonymous teams

Start with the contract. If it isn’t verified, you can’t read the code so you can’t do a real rug pull check. Walk away. If it is verified, look for owner powers. Can they pause trades, blacklist wallets, change fees, or upgrade the code without a timelock? That’s danger.

Then check the team. Anonymous with no repo and no signed updates is high risk. Minimum bar: verified code that matches what’s deployed, limited or time-locked admin rights, public repos, and a named lead with a track record.

2) Liquidity not locked or controlled by one key

Most hard rugs drain DEX pools. If LP tokens sit in a deployer wallet or in a short-dated lock, the controller can pull value and collapse price. Check whether liquidity is locked for a meaningful period, who controls the lock, and whether ownership of the LP position is renounced or multi-sig-guarded.

Inspect the pair contract and the LP token holder on the explorer. Automated scanners can help surface risks, but always confirm manually. TokenSniffer’s liquidity and holder analyses show how tools can flag missing locks and heavy concentration. Use them as a first pass, not as a final verdict.

3) Centralized supply and hidden mint functions

Soft rugs rely on supply. If a few wallets hold outsized stakes or if the owner can mint, insiders can dump into retail demand and exit. Read the contract for mint, burn, and fee setters. Review vesting claims against on-chain timelocks.

Avoid projects where “vesting” only exists in a PDF. Security researchers have traced exit scams that minted new tokens “out of thin air” before dumping them.

That pattern won’t show up in a price chart until it’s too late. Favor immutable caps or multi-sig-gated mints with public, time-locked schedules you can verify on-chain.

4) No external audit, upgradeable proxies, or pausable trading

Audits reduce risk when combined with immutability and change-control. If a proxy can be upgraded without a timelock and community notice, the audit snapshot can go stale in minutes.

Owner-only pause switches or blacklist functions also enable “sell when you can’t” traps. Look for named auditors, report links, issue remediation status, and clear statements about upgrade paths and who controls them.

The U.S. Treasury’s DeFi risk assessment explicitly urges audits and stronger controls; lack of them raises exposure for users.

5) Hype-first marketing and synthetic social proof

Aggressive shill campaigns, paid “influencer” threads, fake partnerships, and zero shipping history form a classic fraud pattern. Treat viral “instant 100x” claims, Telegram buy walls, or stealth launches with no docs as a rug pull scam risk.

The SEC’s investor alerts describe how fraudsters lure users into crypto schemes using social engineering and fabricated credibility. Cross-check every big claim. If you see queries like “how to rug pull” or “is rug pulling on pump.fun illegal” in the comments, step back. Real teams publish docs, code, and timelines and withstand scrutiny.

If you still plan to trade memes, use the steps in How to Buy Meme Coins — 2025 Buying Guide. Also, if you’re researching small caps, sanity-check with Best Low-Cap Crypto in 2025.

---

Writer’s note: Use a “rug checker eth” scan as a starting point, then verify every claim yourself.

---

What to do if you’ve been rug pulled: A 4-step action plan

First, breathe. Then work the steps. This crypto rug pull playbook helps you preserve evidence and improve recovery odds.

1) Document Everything. Save transaction hashes, token and pair addresses, timestamps, messages, and screenshots. Export wallet logs and your explorer history. Keep originals in read-only storage. MetaMask and Etherscan explain how to locate and export your tx history.

2) Report the scam. File with the FBI’s Internet Crime Complaint Center. Add hashes, addresses, websites, and social handles. If securities marketing is involved, submit a tip to the SEC. Also, report to the FTC so consumer agencies can aggregate patterns.

3) Notify your wallet or provider. Open a support ticket so they can flag addresses, warn users, and advise on device hygiene. Use official channels only. MetaMask, Coinbase, and Ledger publish dedicated guidance and contacts.

4) Warn the community. Create a case on Chainabuse so investigators and platforms can correlate reports. Share only facts and on-chain data. Victim reporting there complements law enforcement filings.

---

Are crypto rug pulls Illegal?

Yes, when the facts show fraud or market manipulation.

A crypto rug pull often involves misrepresentations, false promises, or engineered trading traps, which can meet elements of wire fraud and money laundering. U.S. prosecutors charged the “Frosties” NFT founders with conspiracy to commit wire fraud and money laundering for an alleged rug pull that drained buyers.

Civil regulators can also act. If token sales or NFTs are marketed as investments, agencies such as the SEC can pursue violations of the federal securities laws. The agency encourages tips via its TCR portal. Facts matter. Anonymous teams, undisclosed control over liquidity, and sell-blocking contracts increase legal exposure.

Jurisdiction drives outcomes. Some rug pulls may also violate commodities, consumer-protection, or advertising rules.

---

How to report a rug pull on your tax return

You may claim a loss, but treatment depends on what happened and where you file. In the United States, digital assets are property. Losses are generally recognized on disposal or abandonment.

If you sell a rug-pulled token for near zero, you can realize a capital loss and report it on Form 8949 and Schedule D, per IRS property rules. IRS pages on digital assets and Publication 544 explain dispositions such as sales and abandonment.

Theft-scam treatment is narrower. Recent IRS and TAS guidance discuss when a theft loss under §165 may apply, but it is fact-specific and often limited to personal losses. Keep thorough records and talk to a tax professional before claiming theft loss treatment.

Outside the U.S., rules differ. In the U.K., HMRC lets individuals claim a negligible value election when tokens become worthless, which crystallizes a capital loss. In Australia, the ATO allows a capital loss for lost or stolen crypto if you can evidence ownership and the loss. File with your local forms and keep explorer evidence.

For planning angles, read How to Avoid Crypto Taxes Legally in 2025.

Disclaimer: This is tax education, not legal advice. Consult a qualified tax adviser in your jurisdiction.

---

4 notorious crypto rug pulls (2021–2025)

AnubisDAO (2021). A dog-themed Olympus fork raised roughly $60 million in ETH, then liquidity vanished within a day. Value fell to zero. Chainalysis and subsequent reporting cite it as a canonical DeFi rug pull.

Squid Game Token (2021). Price rocketed, but holders could not sell due to contract restrictions. Developers cashed out and the token crashed to near zero, a textbook “rug pull scam.” BBC and WIRED covered the collapse and selling lock.

SnowdogDAO (2021). A planned buyback ended with a 90 percent crash. Only a small slice of wallets exited profitably, and users alleged a rug. CryptoBriefing documented the mechanics.

Chibi Finance (2023): Platform rugged Arbitrum users for about 555 ETH in 2023 via a malicious contract, then funneled funds through Tornado Cash, per CoinDesk. Magnate Finance on Base saw over $6 million drained in August 2023, resulting in a TVL drop to zero. These cases show rug-pulling tactics persist across chains and cycles.

---

More recent, well-documented rug-pull cases include:

ZKasino (2024). Dutch financial crime investigators arrested a suspect and seized over €11 million while probing ZKasino, which took in more than $30 million. Authorities say users’ bridged ETH was converted into a platform token without consent and withdrawals were blocked. (FIOD)

Largest DOJ NFT rug-pull indictment (2024). U.S. prosecutors in Los Angeles charged two California men with running a series of NFT “rug pulls,” alleging over $22 million was defrauded, described by the DOJ as the largest NFT scheme it has prosecuted to date.

$LIBRA (2025): After Argentina’s president briefly promoted the token, $LIBRA surged, then collapsed within hours. Regulators opened a probe, and local fintech groups called it a likely rug pull. Treat politically hyped meme coins as extreme risk.

Celebrity-death scam tokens on Solana (2025): Following Ozzy Osbourne’s passing, scammers rushed out tribute coins that rugged early buyers. Event-driven meme coins are prime exit-scam fuel.

UndeadApes/Undead Lady Apes verdict (2025): A U.S. jury found an NFT developer guilty in a rug-pull case; authorities detailed how funds moved across chains. Enforcement can lag the scam by years, but it does land.

Conclusion

Rug pulls are one of the harshest reminders that in crypto, the promise of quick gains often masks real risks. From liquidity heists to stealth contract exploits, these scams keep evolving—but so do the defenses.

We’ve covered how rug pulls operate, the most notorious examples, how to identify red flags, and what steps to take if you’ve already fallen victim. While some rug pulls fall into legal gray areas, most exploit trust and momentum, not just code.

Protecting yourself means staying sharp, doing your homework, and using tech tools that catch what your eyes can’t. The best way to navigate the space? Assume no project is safe—until you’ve made sure it is.

---

FAQs