Special offer. See more information about Outbyte and uninstall instructions. Please review EULA and Privacy policy.

A crypto rug pull is a deceptive exit scam: people behind a token or project attract buyers or contributors, then take value, drain liquidity, dump holdings, abandon the project, or use token rules to stop ordinary selling. A sharp price drop alone does not prove a rug pull; the label depends on evidence of the conduct behind it.

What a crypto rug pull means

The phrase describes a pattern of attracting people to a crypto project and then abruptly extracting value or leaving participants with assets they cannot readily sell. The Financial Stability Oversight Council calls rug pulls a type of exit scam that may trigger a crypto-asset’s price collapse after a period of inflation (FSOC, Report on Digital Asset Financial Stability Risks and Regulation 2022). The Financial Services Agency of Japan gives a related example: a scammer creates a cryptocurrency, persuades users to invest, and liquidates holdings abruptly (FSA, Typical crypto scams – (1) Rug Pulls).

“Rug pull” is a descriptive term, not a universally applicable statutory definition established across jurisdictions. Whether particular conduct is illegal depends on the facts and the law that applies.

How a rug pull can work

The term covers several mechanisms. They can occur separately or overlap; identifying the mechanism is more useful than treating every crash as the same kind of event.

Free tools Windows power users keep installed

One-click scans. No signup required.

Special offer. See more information about Outbyte and uninstall instructions. Please review EULA and Privacy policy.

Liquidity withdrawal

A creator or project removes its contribution from a token’s trading liquidity pool after buyers have entered. With less liquidity, holders may find it difficult to sell without sharply affecting the price. A liquidity change by itself does not establish criminal intent; context and evidence matter (FSOC).

Malicious or restrictive token rules

Smart-contract behavior may block ordinary sales, allow hidden minting of additional tokens, impose extreme fees, or include a backdoor that lets an administrator remove liquidity. These features can make a token technically difficult or uneconomic to sell. Contract evidence is needed before concluding that a feature was deliberately used to defraud buyers (FSOC; FSA).

Insider dumping

Promoters or insiders may sell their holdings after promoting a token or helping drive demand. This behavior overlaps with pump-and-dump schemes, but the terms are not identical: a rug pull can also involve liquidity extraction, malicious token rules, or project abandonment (SEC Investor Alert, May 29, 2024; Lin et al., CRPWarner, 2024).

Project abandonment

A team may raise funds or attract token buyers and then disappear or stop operating the project. Abandonment can be a warning sign, but without evidence of deception or misappropriation it does not by itself prove fraud (FSOC; Lin et al.).

Special offer. See more information about Outbyte and uninstall instructions. Please review EULA and Privacy policy.

Rug pull vs. pump-and-dump

A pump-and-dump centers on inflating demand or price and then selling into it. “Rug pull” is broader in common usage: it can describe that kind of dumping, but also a liquidity withdrawal, malicious contract behavior, or an abrupt project exit. The conduct can fit both descriptions.

Question Rug pull Pump-and-dump
What is central? Deceptive extraction or abandonment after attracting participants. Inflating demand or price, then selling holdings.
Possible mechanism Liquidity withdrawal, insider selling, project abandonment, or token rules that restrict sales. Promotional activity followed by selling; other rug-pull mechanisms are not required.
What establishes the label? Evidence about the actors, actions, and any deceptive claims or contract behavior. Evidence of demand or price inflation and selling by promoters or insiders.

Why a crash alone is not proof

A falling token price establishes a loss in value, not why the loss happened. The price may collapse after liquidity is removed or insiders sell, but the same outcome does not, by itself, establish who acted, whether a contract was manipulated, or whether anyone intended to deceive buyers. Before describing a named project as a rug pull, look for evidence such as promotional claims, transaction records, contract functions, and the actions of project insiders. The FSOC’s example of the Squid Game crypto-asset scam says investors lost over $3 million and that restrictions on selling contributed to their losses; the figure is specific to that case, not a measure of rug-pull losses generally (FSOC, 2022).

Warning signs worth investigating

No single checklist can reliably prove a token is safe or identify every rug pull. General fraud warnings from the SEC and CFTC are useful reasons to investigate further, not a rug-pull detection formula (SEC and CFTC, Watch Out for Fraudulent Digital Asset and “Crypto” Trading Websites).

  • Unclear or unverifiable people behind the project: Check who is promoting it and whether relevant claims about the team or seller can be independently verified.
  • Unsolicited pitches or pressure to act quickly: Urgency can discourage careful checks. Do not make an investment decision solely because of social-media posts (SEC, May 29, 2024).
  • Promises of high returns with little or no risk: Treat such claims as a fraud warning, not evidence that an investment is sound (SEC and CFTC).
  • Unclear ability to sell: Investigate token rules and whether ordinary holders can sell; restricted selling may cause losses, but a technical risk signal alone does not establish fraudulent intent.
  • Claims that are difficult to verify: Research the people and firms involved and check available registration or disciplinary information where relevant (SEC and CFTC).

What smart-contract research can—and cannot—show

A 2024 preprint by Lin and co-authors describes CRPWarner, a method for warning about contract-related rug-pull risk. In one experiment, the authors evaluated it on 69 open-source smart contracts associated with rug-pull events and reported 91.8% precision, 85.9% recall, and an 88.7% F1-score. In a separate large-scale experiment on 13,484 Ethereum token contracts, they reported detecting 4,168 contracts with malicious functions and 84.9% precision (CRPWarner, arXiv, March 3, 2024).

Special offer. See more information about Outbyte and uninstall instructions. Please review EULA and Privacy policy.

These are results from the authors’ method and datasets, not the probability that an arbitrary token is fraudulent and not a guarantee of consumer protection. Automated analysis can flag contract behavior for scrutiny; it cannot, on its own, establish all the facts about a project or an actor’s intent. The paper’s abstract says the authors manually collected 103 real-world rug-pull events, while its displayed event table totals 93, so those event counts should not be treated as a single settled figure.

Independent reader supportYour contribution helps us test, update, and keep practical guides available for everyone.Support on Ko-Fi

If you think you have lost money

  • Do not send more money to recover the loss. The SEC warns that fraudsters may demand supposed taxes or fees to release funds or recover earlier losses (SEC Investor Alert, May 29, 2024).
  • Never share your private keys with someone claiming to be a recovery helper. That can enable another loss (SEC).
  • Keep relevant records such as transaction details, messages, and promotional claims, and report suspected fraud through appropriate official channels (SEC; SEC and CFTC).

A report is not a promise of reimbursement. Recovery depends on the circumstances and jurisdiction; there is no universal recovery process established by the sources cited here.

Product prices and availability are accurate as of the date/time indicated and are subject to change. Any price and availability information displayed on Amazon at the time of purchase will apply.