What is a rug pull in crypto? Types, warning signs and examples
A rug pull in crypto is an exit scam in which the people behind a token or project suddenly take investors’ money and disappear, pulling the rug out from under everyone who bought in. They might drain the liquidity pool, sell their own huge holdings in one go, or use hidden code that stops anyone else from selling. Rug pulls happen mostly with new tokens on decentralized exchanges, in DeFi projects and NFT collections, and the money is almost never recovered.
What is a rug pull in crypto, in plain words?
A rug pull is a project built to look legitimate long enough to attract buyers, and then abandoned once the money is in. The project team, often anonymous, controls something essential, such as the token supply, the liquidity or the smart contract, and uses that control to cash out.
Unlike a hack, nobody breaks in from outside. The threat is the team itself. That is what makes a crypto rug pull so hard to spot: until the moment it happens, the website, the social media hype and the price chart can all look healthy.
How a crypto rug pull works
Most rug pull scams follow the same pattern, whatever the token is called.
- Launch. The team creates a new token, often copying a popular name or trend, and sets up a liquidity pool on a decentralized exchange by pairing the token with ETH or a stablecoin.
- Hype. Social media channels, Discord groups and paid promoters push the story: a revolutionary product, an early-bird presale, unrealistic returns.
- Buying. Investors buy, the price rises, and the rising chart attracts more buyers. The team may join in with coordinated buying to keep the momentum going.
- The pull. The team withdraws the liquidity, sells its own holdings or switches on a hidden function. The price falls to almost zero within minutes.
- Vanish. Websites go offline, accounts are deleted, and funds raised are moved through other wallets, sometimes to launder them.
A worked example in euros
Say you buy €300 worth of a new token on a decentralized exchange. The token’s liquidity pool holds the equivalent of €50,000 in ETH, supplied by the developers, plus a large pile of the token. One evening the developers withdraw all the ETH. There is now nothing in the pool to swap your tokens into. Your wallet still shows the tokens, but they are worthless tokens: you cannot sell them for anything. The developers leave with the €50,000 they put in plus all the money buyers like you added.
Types of rug pulls: hard vs soft
Rug pulls come in two broad types. The difference matters for how they work and whether they are clearly illegal.
Hard rug pulls
A hard rug is planned fraud. The project was a trap from the start, often with malicious code in the smart contract. Common versions:
- Liquidity theft. The developers remove the liquidity they provided, so buyers cannot sell. Unlocked liquidity is what makes this possible.
- Sell blocks (honeypots). Hidden functions in the contract let people buy but not sell, or charge a sell fee close to 100%.
- Unlimited minting. A backdoor lets the team mint unlimited new tokens and sell them, crushing the price.
- Presale theft. The team collects money for a token or NFT project that never launches.
Soft rug pulls
Soft rug pulls are slower and look more legal. The team holds a large share of the token supply and sells it into the market over a longer period, or simply stops working on the project after raising money. Investors are left holding a token nobody supports. A soft rug can look a lot like a pump and dump scheme run by insiders.
Real world examples
One of the best-known rug pulls is the SQUID token from late 2021, named after the Netflix series Squid Game. Its price shot up within days of launch, buyers then found they could not sell, and the price collapsed to almost nothing as the anonymous developers disappeared. NFT collections have seen the same pattern: in the US, prosecutors have charged NFT creators with wire fraud after they took the mint money and abandoned the project. The biggest rug pulls make headlines, but most are small tokens that vanish quietly with a few thousand euros each.
Rug pull warning signs
The warning signs are usually there before the pull. Thorough research takes an hour; recovering from a rug pull takes much longer.
- Anonymous teams with no credible track record and no real names behind the project.
- Liquidity that is not locked, or only locked for a short time.
- Concentrated token distribution. A handful of wallets hold most of the supply.
- No security audits, or an “audit” by an unknown firm. Even real audits are not proof of honesty; they check code, not intentions.
- Unrealistic promises: huge returns, fixed daily rewards or a “can’t lose” presale.
- Pressure and hype in social media channels and Discord groups, where critical questions get deleted.
- A failed test sale. If you cannot sell a tiny amount, stop at once.
Community engagement can give a false sense of safety. Busy chat groups and big follower counts are easy to fake, so check what the team has actually built.
Why rug pulls matter to you in the EU
Rug pulls matter because they sit almost entirely outside the protections EU investors are used to. Under MiCA, anyone offering crypto-assets to the public in the EU must publish a white paper, and licensed trading platforms must check the crypto-assets they list. A token launched anonymously on a decentralized exchange has none of that: no white paper, no regulator, no compensation.
Hard rug pulls are fraud under criminal law in EU countries, and authorities do investigate them. In practice, anonymous developers and cross-border money laundering make convictions and repayment rare.
How to avoid rug pulls
The surest way to avoid rug pulls is to stay away from new, anonymous tokens altogether. If you do buy them, limit the damage:
- Buy on a MiCA-licensed exchange where possible, and check it in ESMA’s register.
- Do your own research (DYOR): who built it, who holds the supply, is the liquidity locked, can you read the contract?
- Keep amounts small, money you could lose entirely without it hurting.
- Test before you trust. Try selling a small amount right after you buy.
- Never connect your main wallet to an unknown app. Use a separate wallet with little in it.
What to do if you have been rug pulled
If you have fallen victim to a rug pull, act quickly, even though recovery is unlikely.
- Stop sending money, including to anyone who promises to “unlock” your tokens.
- Collect evidence: transaction hashes, wallet addresses, the token contract, screenshots of the website and chats.
- Report it to the police in your country, and to the exchange you used to buy the crypto you sent. Check whether the project appears on the AFM or BaFin warning lists and tell the regulator about it.
- Beware of recovery scams. People who contact you offering to get your money back for a fee are almost always running a second scam. Read more about crypto scams.
The bottom line
A rug pull is the team behind a project stealing from its own buyers. Treat new, anonymous tokens as gambling money at best, check who controls the liquidity and supply, and remember that no regulator can return money that has vanished on-chain. For a related scheme, see pump and dump.
Related terms
Questions people ask
Is a crypto rug pull illegal?
A hard rug pull, where developers steal funds or hide code to trap buyers, is fraud in the EU and most other places. Soft rug pulls, where a team sells its own tokens and walks away, are harder to prosecute, but can still break fraud or market abuse rules.
How do you know if a coin is a rug pull?
You often cannot know for sure in advance, but the warning signs are clear: an anonymous team, liquidity that is not locked, a few wallets holding most of the supply, code nobody has checked, and promises of huge returns. If a test sale fails, stop at once.
What happens after a rug pull?
The token's price collapses, often to almost zero, and in many cases you can no longer sell it at all. The team's website and social media channels usually vanish. Getting money back is rare, so report it quickly and beware of 'recovery' offers.
What is the difference between a rug pull and a pump and dump?
In a rug pull, the project's own team takes the money and leaves. In a pump and dump, a group hypes a coin, sells at the top and lets the price crash; they do not need to control the project.