
Fake token attacks are common cryptocurrency scams where criminals create fraudulent assets that mimic legitimate cryptocurrencies, using them to steal users' money or sensitive data. These scams often use platforms such as Telegram, WhatsApp or WeChat to spread misinformation. A common tactic is running token "pre-sales," attracting victims with promises of a higher future "listing price" compared to the current "pre-sale price." In most cases, losses are irreversible. By staying vigilant, being aware of common threats and red flags, and constantly learning, you can protect yourself from these scams.
A fake token attack is a type of cryptocurrency scam where malicious actors create counterfeit or fraudulent tokens that mimic legitimate cryptocurrencies. These fake tokens are designed to deceive investors and traders into believing they are purchasing or trading a genuine asset, often leading to financial losses or other negative consequences such as identity theft.
Real tokens and fake ones mimicking them can exist on the same blockchain but with different smart contract addresses, or on different blockchains. Fake tokens can be used in a variety of fraudulent schemes:
Initial Coin Offerings (ICOs) and Token Sales: Attackers may launch fake ICOs or token sales, enticing investors with the promise of getting in early on a groundbreaking project. Once they collect funds, they disappear, leaving investors with worthless tokens.
Airdrops and Giveaways: Fake tokens are sometimes distributed through airdrops or giveaways, where users are asked to provide personal information or pay a small fee to receive the tokens. This can lead to further scams or identity theft.
Pump and Dump Schemes: Scammers may artificially inflate the price of a fake token through coordinated buying (pump) and then sell off their holdings at the peak (dump), leaving other investors with devalued assets on their hands.
Launchpool Token Scams: The schemes described above can be complicated and costly to pull off, so scammers may resort to lower-cost methods, like fake Launchpool token scams. In these scams, criminals take advantage of the publicity generated by a reputable exchange's promotion of an asset. They may, for example, falsely claim to offer these tokens at a discount via unofficial channels that are not associated with the platform conducting the original promotion.
When major exchanges announce the upcoming launch of official Launchpool tokens, scammers often try to take advantage by creating fake tokens that imitate the promoted assets. This strategy allows them to cut down on promotional costs. All they need to do is convince potential victims that the fake tokens they are selling are the same ones promoted via the official Launchpool program.
In 2024, risk intelligence teams identified an asset called BOOM as a fake token. The asset exhibited several red flags at once, which makes it an excellent example of such tokens:
Liquidity: A BOOM pool on a decentralized exchange platform had meager liquidity of approximately $3.38K, all provided by the contract deployer. The market value of this token is very low.
Suspicious Transfers: While the token's liquidity amounts to just several thousand dollars, there are over 11.18 million addresses that have received this token. This is abnormal: with legitimate tokens, liquidity should be proportional to the number of holders.
Sell Tax: A token's sell tax is a fee imposed on each sale of the token, set by the project developers. In BOOM's case, sell tax is set at 100%, which means that whenever someone tries to sell this token, the entire amount of the sale will be deducted as tax, and the seller will not receive any funds.
In this case, scammers set sell tax at 100% and airdropped the fake token to more than 11 million addresses. Had the trading of this asset taken off, the people behind the token would have pocketed 100% of each sale via a built-in smart contract. This case stands as a reminder that users should closely scrutinize the tokens they receive via unsolicited airdrops.
In recent years, major exchanges have promoted multiple new tokens via their launchpool programs. Scammers around the globe have attempted to use these opportunities to create fake tokens to defraud users. A popular scheme has been setting "pre-purchase" programs through unofficial channels such as Telegram or WeChat groups. Remember that overly attractive prices on much-anticipated tokens before they launch should be considered a red flag.
OMNI is an example of a launchpool token that was highly anticipated. Criminals were quick to launch several imposter tokens, including one which originated in Turkey. This fake "OMNI" has zeroes in its price and on-chain market cap metrics, with only a few holders and total transfers.
Verify the Contract Address: Every digital token has a contract address associated with it. Always obtain the contract address from official sources such as the project's official website, verified social media accounts, or reputable cryptocurrency listing platforms. Cross-check the contract address across multiple official sources to ensure consistency.
Use Risk Assessment Tools: Contract code analysis, swap analysis, and liquidity analysis are the most basic methods to detect token risks, but these can present technical barriers as they require a certain level of coding and blockchain-specific skills. Users who are less familiar with the technical aspects of digital assets can rely on consumer tools designed to help assess risk probabilities. Various easy-to-use and convenient tools are available that can help in risk identification.
Stay Updated with Risk News: The best way to mitigate scam-related risks in the crypto space is staying on top of the latest developments in the industry. Following specialized risk-focused blogs and security news will help you get better at identifying red flags and avoiding scammers.
Check the Token Metrics: Look for red flags in token metrics such as zero or unusually low prices, market cap, and liquidity. A legitimate token should have consistent and reasonable metrics proportional to its number of holders.
Beware of Unofficial Channels: Never purchase tokens through unofficial channels on Telegram, WhatsApp, or WeChat. Scammers often use these platforms to run fake token pre-sales with promises of higher future listing prices.
1. Stop Trading Immediately
Cease all transactions and transfers related to the fake token to prevent further losses.
2. Check Transaction Records
Review your transaction history to identify the source and details of the fake token. This will help you assess the situation and guide your next steps.
3. Report to the Trading Platform
Immediately contact the customer support team of the platform where you purchased the fake token and report the issue. Provide detailed transaction records and relevant information. Please note that recovery of losses is not guaranteed.
Fake tokens are a significant threat in the cryptocurrency space, preying on the enthusiasm of investors and their willingness to explore new opportunities in emerging tokens. By staying informed, conducting thorough research, and exercising caution, you can protect yourself from falling victim to these scams. Always remember the old adage: if something sounds too good to be true, it probably is.
Verify contract addresses from official sources only. Watch for suspiciously low prices, zero liquidity, disproportionate holder numbers, and 100% sell taxes. Avoid unofficial channels like Telegram. Check metrics on CoinMarketCap or use risk assessment tools like Token Sniffer.
Scam coins deceive investors through fake projects with exaggerated returns, then disappear with funds. Scammers create these tokens on open-source blockchains and sell them via digital platforms, misleading investors into losing substantial money.
Review the project's whitepaper, verify team credentials and background, check the code repository for transparency, examine community engagement, confirm regulatory compliance, and analyze tokenomics and transaction volume. Legitimate projects maintain clear communication and documented development progress.
Verify the platform's legitimacy and regulatory status, research the token's whitepaper and development team, check trading volume and market cap, avoid unsolicited offers or guaranteed returns, never share private keys or sensitive information, and confirm official websites through independent sources.
Report to authorities immediately for potential recovery. Provide detailed evidence and transaction records to police. Contact your bank to freeze accounts and block further transfers. Document all communications with scammers. Recovery depends on swift action and cooperation with law enforcement.
Legitimate exchanges have regulatory licenses, transparent transaction records, and secure infrastructure. Fake platforms lack proper authorization, use exaggerated marketing claims, and often have poor security. Verify official websites, check regulatory status, and research user reviews before trading.











