Table of Contents
1. Why Investor Skepticism Is Healthy (and Constant)
According to blockchain analytics firms, tens of thousands of new tokens launch every week across all chains. On Solana specifically, the number peaked in the hundreds of thousands during memecoin seasons. A significant portion of these tokens — estimates range from 60% to over 90% — are either outright scams or abandoned within weeks of launch.
Investors who have spent any meaningful time in crypto have been burned at least once. They've bought into projects that promised the moon and delivered nothing. They've watched liquidity disappear overnight. They've held tokens that the developer dumped on without warning. This experience doesn't make them unreasonable — it makes them thorough.
In crypto, the default assumption is that a new token is a scam until proven otherwise. Your job as a legitimate founder is to make that proof obvious, immediate, and verifiable.
The good news: most red flags are avoidable. They're not complicated to fix — they just require paying attention to the right details. Here's exactly what experienced investors look for, and what makes them close the tab immediately.
2. On-Chain Red Flags That Scare Off Investors
On-chain red flags are the most serious category because they represent verifiable, factual risks — not just bad vibes. These are things anyone can check in 30 seconds on Solscan or rugcheck.xyz, and experienced buyers check every single one before touching a new token.
Red Flag: Mint authority is still enabled
When mint authority is active, the token creator has the technical ability to create unlimited additional tokens at any time. This means your investment can be diluted to near zero by a single transaction from the developer. Tools like rugcheck.xyz flag this prominently, often as a "DANGER" warning. Unless there's a clearly communicated reason for keeping mint authority (and that reason is almost never convincing), investors who know what they're looking at will not buy. Read more about this in our guide to revoking mint authority on Solana.
Red Flag: Freeze authority is not revoked
Freeze authority gives the token creator the power to freeze any holder's wallet — making their tokens permanently untransferable. This is the kind of control that belongs in regulated financial instruments, not community tokens or memecoins. Even if the developer never uses it, the fact that they could is enough to keep informed buyers away. Our guide to revoking freeze authority shows how to remove this risk permanently.
Red Flag: No liquidity, or liquidity that isn't locked
A token with no liquidity pool can't be traded. That's an obvious problem. But what's less obvious — and equally dangerous — is unlocked liquidity. When liquidity provider (LP) tokens aren't locked, the developer can "remove liquidity" at any moment: a single transaction that drains all the funds from the trading pool, instantly collapsing the token's price. This is the most common rug pull mechanism in crypto. Any token worth buying will have its LP locked for a meaningful period, with the lock transaction publicly verifiable.
Red Flag: Token has no metadata or a generic name
Tokens without a name, symbol, description, or logo appear on Solscan and DEX Screener as nameless strings of letters and numbers. This immediately signals either an abandoned project or a quickly thrown-together scam token. Even if you're building a legitimate project, missing metadata destroys the first impression. There's no excuse for launching without proper metadata — it takes minutes to set up correctly.
Red Flag: 1–2 wallets hold 80%+ of the supply
Heavily concentrated token holdings are a serious risk signal. If a handful of wallets control the vast majority of the supply, a coordinated dump would wipe out the token's price instantly — and those large wallets have every incentive to sell at the peak of any price pump. Check the top holders on Solscan before buying any new token. A healthy distribution sees no single wallet holding more than 5–10% of supply (excluding locked liquidity pools and verified team wallets with disclosed vesting).
How investors check these things
The entire on-chain check takes about 60 seconds. Investors paste the mint address into rugcheck.xyz for an instant risk report, then open Solscan to see the authority status, top holders, and metadata. If rugcheck shows any "Danger" warnings, most experienced buyers don't go further. Run your own token through these tools before launch and fix anything that shows up as a risk.
3. Off-Chain Red Flags That Signal a Scam
Once a buyer gets past the on-chain check, they move to the off-chain signals — the social presence, website, team information, and overall communication style. These flags are subtler but just as effective at triggering skepticism.
Red Flag: No website, no socials, or everything was created within 24 hours of launch
A token with no online presence is a token nobody knows exists. But even worse is a token where all the social accounts — Twitter, Telegram, website — were created the same day the token launched. This pattern matches almost every quick-rug scam token. Legitimate projects build their presence before launch. If the Twitter account was created Tuesday and the token launched Wednesday, that's a red flag that experienced buyers will catch by checking the account creation date.
Red Flag: Team is anonymous with no history or context
Anonymity itself is not a red flag — many legitimate crypto projects are built by anonymous or pseudonymous teams, and there are valid privacy reasons for that. The red flag is anonymous founders with zero prior footprint: no previous projects, no engagement history on crypto Twitter, no reputation at all. When something goes wrong, an anonymous team with no reputation has nothing to lose. Contrast this with anonymous teams that have shipped previous projects or have a verifiable track record under their pseudonym.
Red Flag: No clear purpose or roadmap
A token that can't explain what it's for — beyond "number go up" — has no foundation for long-term value. Memecoins are an exception if they're genuinely built around a culture or community, but even then, the best memecoins have a clear identity and a plan beyond launch day. If the website or Telegram can't answer "what is this and why does it exist," informed buyers will move on.
Red Flag: Giveaway schemes or "send tokens to verify"
Any project asking followers to send tokens or SOL for "validation," "whitelisting," "giveaway entry," or any other reason is either a scam or being run by people who don't understand how crypto giveaways work. Legitimate giveaways require nothing from participants except following accounts or joining communities. The moment a project asks you to send anything to receive something, it's a scam. No exceptions.
Red Flag: Pressure tactics without substance
"Buy now or miss the 1000x" — "Last chance before price explodes" — "We launch in 1 hour, get in now." Artificial urgency without any substantive information about the project is a classic manipulation tactic. Legitimate projects don't need to create FOMO through pressure because they have actual fundamentals to point to. When you see nothing but urgency and price predictions without any project information, treat it as a warning sign.
4. Community Red Flags: The Telegram and Discord Tells
After the on-chain and social checks, experienced investors often join a project's Telegram or Discord to get a feel for the community. This is where many projects that looked passable on-chain reveal themselves. Here's what to watch for:
Red Flag: Telegram filled with bots, no organic conversation
A Telegram group with 5,000 members but only 3 people actually talking — and those 3 are posting "LFG!!!" and moon emojis — is filled with bots. Bought Telegram members are easily identifiable: they have no photos, generic names, recent join dates, and they never say anything specific. Experienced investors open a community, scroll through recent conversations, and ask themselves: "Is this group of actual humans having a real conversation about this project?" If the answer is no, they leave.
Red Flag: Admins unable to answer basic questions
A simple test that experienced investors use: ask a basic question about the project in Telegram. Something like "what is the mint authority status?" or "where is the liquidity lock?" If admins dodge the question, get defensive, redirect to buying, or simply don't know the answer — that's alarming. Any legitimate project team should be able to answer basic technical questions about their own token instantly and with specific, verifiable answers.
Red Flag: Deleting questions or banning skeptical members
This is one of the clearest signs of a project with something to hide. When community members ask legitimate security questions — "why isn't mint authority revoked?" "who holds the top 3 wallets?" — and the admin's response is to delete the message or ban the user, it signals that the team can't defend their setup. Healthy projects welcome scrutiny because scrutiny gives them the chance to demonstrate their transparency.
Red Flag: Only good news is allowed
Communities where any concern, criticism, or skepticism is immediately silenced are communities built on fragile trust. Real communities have disagreements. People ask hard questions. The founders engage with those questions. A project that only tolerates cheerleading is one where the founders know the project won't survive real scrutiny.
The 60-second community test
Join the Telegram. Scroll to see recent messages. Ask one basic question about the token's security setup. Wait 5 minutes. How the admins respond tells you almost everything about whether this project is worth your trust. Good communities give you a clear, specific, cited answer. Bad ones get defensive or ignore you.
5. How to Make Sure YOUR Token Doesn't Show These Flags
If you're reading this as a token founder — not just an investor — the good news is that avoiding every single flag on this list is achievable with the right setup and consistent behavior. Here's a practical summary:
On-chain: Get the configuration right before launch
What clean on-chain setup looks like
- Mint authority: Revoked
- Freeze authority: Revoked
- Metadata: Complete (name, symbol, description, logo, socials)
- Liquidity: Added to DEX and LP tokens locked for 6+ months
- Holder distribution: No single wallet over 10% (excluding LP pool)
- rugcheck.xyz rating: "Good" with no critical warnings
Use our complete security checklist to verify each item before your first public announcement. Don't launch until every item is checked.
Off-chain: Build presence before you need it
Create your social accounts 2–4 weeks before launch. Post regularly. Build a real community in Telegram before the token launches. Have a website live — even a simple one. All of these eliminate the "everything created today" red flag that kills trust instantly.
The full approach to this is covered in our guide to making your token look legit — which walks through both on-chain and off-chain legitimacy signals in depth.
Community: Model the behavior you want to see
Welcome tough questions. Answer them with specific, verifiable information and links. Never delete a legitimate question or ban someone for skepticism. When you engage honestly with hard questions, you're demonstrating the kind of project you're running — and your community sees it.
Pin your token's on-chain verification information in your Telegram from day one. Solscan link, rugcheck link, liquidity lock transaction. Make it impossible for anyone to claim they couldn't find this information.
Tools to verify your own setup
Before launch and regularly after, check your token with:
- rugcheck.xyz — for overall risk rating and authority status. Our rug checker guide walks through how to use it.
- Solscan — for metadata, holder distribution, and authority details
- DEX Screener — to see what warning labels (if any) appear on your token's trading page
- rug.ai — for a broader score that includes social signals and holder behavior
6. Conclusion
Experienced crypto investors have seen thousands of tokens come and go. Their pattern recognition for scams is finely tuned — not because they're cynical, but because the market has trained them to be careful. Every flag on this list exists because a project committed that exact mistake and someone lost money as a result.
When you understand what investors are looking for, you can build a token that doesn't just avoid the bad signals — it actively sends the right ones. Clean on-chain setup that anyone can verify. A social presence that existed before launch day. A community where hard questions are welcomed, not deleted. A team that communicates honestly, even when the news isn't all good.
None of this requires a massive budget or technical expertise. It requires doing things correctly from the start and maintaining that standard as your project grows. The tokens that build lasting communities are the ones where founders took these signals seriously — and made it impossible for investors to reasonably doubt them.
Start with the right setup, stay transparent, and your token's first impression will be exactly what it should be: trustworthy.