How to identify honeypots, fake volume, insider wallet patterns, and other common scams before you trade on pump.fun.
Pump.fun's permissionless design means anyone can create a token in seconds for less than $5. This low barrier to entry has made it the most popular memecoin launchpad on Solana, but it also means that a significant percentage of tokens are created with malicious intent. Thousands of tokens launch on pump.fun every day, and the vast majority are either scams, low-effort copies, or abandoned projects.
The good news is that most scams follow recognizable patterns. Learning to identify these patterns before you trade can save you from devastating losses. This guide covers the most common scam types on pump.fun and the tools you can use to verify token safety before committing your SOL.
This is the most prevalent and sophisticated scam on pump.fun. In a bundled launch, the token creator uses a service or script that buys a large percentage of the token supply across multiple wallets in the same transaction (or same block) as the token creation. From the outside, it looks like many different people bought early. In reality, one person controls all of those wallets.
How to spot it: Check the token's first few transactions on Solscan. If you see multiple buys from different wallets in the exact same transaction or the very first block, it is almost certainly a bundle. Tools like BirdEye and pump.fun's own interface sometimes flag bundled tokens. Also check if the early buyer wallets were all funded from the same source wallet.
Why it is dangerous: The bundler controls a huge percentage of the supply from the start. They wait for organic buyers to push the price up, then sell their entire position, crashing the price. Because their buys are spread across multiple wallets, the holder distribution looks healthy when it is actually controlled by one entity.
A rug pull happens when the token creator or early insider accumulates a large position, hypes the token through social media and paid promotion to attract buyers, and then sells their entire holding in a massive dump that crashes the price to near zero. The name comes from "pulling the rug out from under" the other holders.
How to spot it: Check the top holder wallets and their history. If a few wallets hold 10%+ of the supply and have a history of dumping other tokens, that is a major red flag. Also be suspicious of tokens with extremely aggressive marketing (paid Twitter raids, bot comments in Telegram) but no substance behind the project. If the developer wallet bought a significant amount at launch and the token is being hyped hard, a dump may be imminent.
Why it is dangerous: Once the dev dumps, the chart crashes and remaining holders are left with tokens worth a fraction of what they paid. The dev takes the SOL and moves on to launch another scam token the next day.
Fake volume involves one person (or bot) repeatedly buying and selling a token from the same wallet or a small group of connected wallets to inflate the trading volume. This makes the token appear popular on scanners and trending feeds, attracting real buyers who are deceived by the apparent activity.
How to spot it: Look at the transaction history on Solscan or BirdEye. If you see the same wallet making rapid-fire buy-sell cycles, or if a very small number of wallets account for the vast majority of trading volume, the volume is likely fake. Also check the maker count on DEX Screener: a token with high volume but very few unique makers is suspicious. Legitimate volume comes from many different wallets trading at varying sizes and intervals.
Why it is dangerous: Fake volume creates a false impression of demand. Traders who buy based on the apparent activity discover that there are no real buyers to sell to. Once the volume bot stops, trading dies and the price collapses.
A honeypot is a token that you can buy but cannot sell. On pump.fun's bonding curve, true honeypots are rare because the bonding curve contract handles buys and sells identically — there is no custom token logic that can block sells. However, honeypot-like behavior can still occur in specific scenarios, particularly after a token graduates to a DEX pool where custom program logic might interfere with sell transactions.
How to spot it: Before buying a significant amount, try a very small test buy (0.001 SOL) and immediately attempt to sell. If the sell transaction fails or returns significantly less than expected, the token may have honeypot characteristics. Use RugCheck to analyze the token contract for suspicious permissions or logic. On pump.fun's bonding curve, this is less of a risk than on custom contract tokens, but always verify before large purchases.
Why it is dangerous: You can watch your investment appear to grow on paper, but you can never realize those gains because sells are blocked. Your SOL is effectively stolen the moment you buy.
Scammers create tokens that copy the name, ticker, and image of popular or trending tokens. When a legitimate token goes viral, dozens of copycat versions appear within minutes, hoping to trick buyers who search for the token name and accidentally buy the wrong one. The scammer takes the initial buy SOL and disappears.
How to spot it: Always verify the contract address, not just the token name. The official contract address is usually shared by the real project on their verified Twitter account or Telegram. If you find a token by searching pump.fun by name and see multiple results, check creation times and verify which one is official through the project's social channels. Copy-paste the contract address rather than trusting search results.
Why it is dangerous: You think you are buying a popular token but you actually buy a worthless copy that the scammer will dump immediately.
Before buying any pump.fun token, run through this checklist. Multiple red flags on the same token is a strong signal to walk away.
Before trading any pump.fun token, use these free tools to evaluate its safety. Spending 2–3 minutes on verification can save you from losing your entire investment.
Paste a token's contract address to get an instant safety assessment. RugCheck analyzes the token for known scam patterns including mint authority status, freeze authority, top holder concentration, and LP lock status. It gives a risk score from "Good" to "Danger." This should be your first stop before buying any token.
BirdEye provides detailed token analytics including price charts, holder distribution, trading volume breakdown by wallet, and top trader activity. Use it to check whether volume is coming from many unique wallets (healthy) or a few repetitive wallets (suspicious). The holder distribution tab shows you exactly how concentrated the supply is.
Solana's primary block explorer. Paste the token mint address to see every transaction, every holder, and the complete history from creation. Check the first few transactions to see if the launch was bundled. Click on the creator wallet to see their history of token launches — serial deployers who launch and dump are easy to identify this way.
DEX Screener shows real-time charts and trading data. Check the "Makers" count: this shows how many unique wallets have traded the token. A token with $50,000 in volume but only 15 makers is suspicious. Also check the "Txns" tab for the buy/sell ratio and average trade size. Unusual patterns (all buys, no sells; or all the same size) suggest manipulation.
Pump.fun itself provides some safety signals. Check the holder distribution pie chart on the token page. Look at the "Dev" badge on transactions to see which buys and sells came from the creator wallet. Check whether the token's social links lead to real, active accounts. Pump.fun also sometimes flags tokens with detected bundles.
Not all generated volume is a scam. Understanding the difference between legitimate volume generation and malicious fake volume is important for both traders evaluating tokens and creators running volume strategies.
Beyond checking individual tokens, adopt these habits to minimize your overall risk exposure on pump.fun:
Vol Bot uses multi-wallet micro-trade strategies that create natural, diverse trading patterns — the right way to support your token's visibility.
Start Using Vol Bot →