arrow left facebook twitter linkedin medium menu play circle

Digital Fraud Wiki

Your source for the latest fraud intelligence, insights, research, and commentary.

Rug Pull Scams

What is a rug pull?

A rug pull is a cryptocurrency investment scam where the creators or developers of a cryptocurrency project suddenly abandon the project or exit scam, taking all the funds invested by users with them.

The name originates from the idea of pulling the rug out from under investors’ feet, leaving them with worthless tokens or losing their investments entirely. Rug pulls typically occur in projects that lack transparency, have anonymous developers, or promise high returns with little to no substance behind them.

Being “rug pulled” or “rugged” means falling victim to a rug pull scam. This term can apply to both the victims of a rug pull scam and the actual investment scam itself.

Common types of rug pull scams

Fake coin launches

In fake coin launches or fake ICOs, fraudsters create a new cryptocurrency token and promote it through social media, forums, or websites, claiming it has a promising future or unique features. Once investors buy the token, the creators disappear with the funds, leaving investors with worthless tokens.

Exit scams

One of the most common cryptocurrency scams, exit scams are projects or exchanges that operate legitimately for a period of time before abruptly shutting down and disappearing with investors’ funds. These scams can be sophisticated and typically involve creating a false sense of security among investors before executing the exit.

Yield farming scams

Yield farming involves providing liquidity to DeFi protocols in exchange for rewards or yields. Fraudsters might create fake DeFi projects or pools, promising high returns to investors who provide liquidity. After investors deposit funds, the creators withdraw the liquidity and disappear, resulting in losses for investors.

DeFi project rug pulls

Decentralized finance projects built on smart contract platforms like Ethereum are susceptible to rug pulls, too. In these scams, the creators deploy a smart contract for a DeFi protocol, attract investors to deposit their funds or tokens, and then exploit vulnerabilities in the smart contract to drain the funds and abscond with them.

Ponzi Schemes

Ponzi schemes promise high returns to early investors using funds from later investors. Eventually, the scheme collapses when there are not enough new investors to pay returns to earlier investors. While not specific to cryptocurrency, Ponzi schemes have proliferated among cryptocurrency and DeFi projects as well.

Hard rug pulls vs soft rug pulls

A hard rug pull happens when a project’s developers or administrators completely and suddenly disappear, taking all the funds invested in the project with them. The project’s website, social media channels, and any other communication channels are taken down, leaving investors with a way to contact or locate the perpetrators. Hard rug pulls often leave investors with no chance of recovering their funds.

A soft rug pull involves a more gradual or subtle exit strategy. The project’s administrators may gradually reduce their involvement in the project, decreasing updates or communication with the community. Those perpetrators may already have been siphoning off funds from the project over time, rather than in one sudden move. This could be selling off tokens or draining liquidity pools gradually. While soft rug pulls give investors some warning signs that the project is failing or becoming unreliable, they can still result in significant losses for investors.

Can rug pulls happen with NFTs?

Yes, rug pulls can happen with NFTs (Non-Fungible Tokens), although they may materialize in slightly different ways than crypto rug pulls. Here are a few ways rug pulls can occur in the context of NFTs:

  • Fake NFT projects – Scammers create fake NFT projects claiming to offer unique digital artworks or collectibles. They use false advertising, deepfaked celebrity endorsements, or misleading information to attract buyers. Once buyers purchase the NFTs, the scammers disappear with the funds, leaving buyers with worthless tokens.
  • Pseudo-NFT platforms – Some platforms or marketplaces claiming to sell NFTs may turn out to be fraudulent. They may allow users to list and sell NFTs, but when buyers purchase these NFTs, they find that the platform doesn’t properly transfer ownership rights or that the NFTs are not as represented. In such cases, buyers may lose their funds without receiving legitimate NFTs in return.
  • NFT collections with no value – Scammers create large collections of NFTs and promote them as valuable or rare. However, upon closer inspection, these NFTs usually lack artistic or intellectual value, or they may be mass-produced with little effort. Buyers who invest in these collections hoping for future appreciation may find the market collapses, resulting in losses.
  • Exit scams on NFT marketplaces – Some NFT marketplaces facilitate transactions between buyers and sellers. In an NFT marketplace exit scam, the operators suddenly shut down the platform and disappear with funds held in escrow or with platform fees paid by users.

While NFTs offer unique digital ownership and provenance, they are not immune to fraudulent schemes. As with any investment or purchase involving digital assets, it’s essential for buyers to exercise caution, conduct thorough research, and verify the legitimacy of the projects, platforms, or marketplaces involved before making transactions with NFTs.

What is an “unruggable” project?

An “unruggable” project is a cryptocurrency or decentralized finance (DeFi) project that is either perceived as resistant to rug pulls or exit scams or promotes this directly as a benefit. The term gained popularity in response to the prevalence of rug pulls and scams in the cryptocurrency space, particularly within DeFi projects.

An unruggable project typically possesses certain characteristics that make it less susceptible to rug pulls. These characteristics may include:

  1. Transparency: The project’s developers or founders are known and publicly identifiable. They provide transparent information about the project’s goals, development roadmap, and team members, reducing the likelihood of anonymous exit scams.
  2. Locked Liquidity: The project’s liquidity, usually stored in liquidity pools on decentralized exchanges (DEXs), is locked through smart contracts for a specified period. Locked liquidity prevents developers from withdrawing or manipulating funds stored in the liquidity pools.
  3. Renounced Ownership: The project’s developers renounce ownership of the project’s smart contracts, meaning they relinquish control over the codebase and cannot make changes to the contracts once deployed. Renounced ownership reduces the risk of developers altering the project’s functionalities or accessing users’ funds.
  4. Community Governance: The project is governed by a decentralized community of token holders who participate in decision-making processes such as protocol upgrades, fund allocations, and governance proposals. Community governance fosters decentralization and reduces the influence of centralized entities, making it harder for malicious actors to manipulate the project.
  5. Audited Contracts: The project’s smart contracts undergo thorough security audits by reputable auditing firms to identify and mitigate potential vulnerabilities or exploits. Audited contracts provide users with assurance regarding the security and reliability of the project’s codebase.

While no project can be completely immune to risks, projects that exhibit these characteristics are often considered more trustworthy and less likely to engage in rug pulls or exit scams.

Are rug pull scams illegal?

Rug pull scams can be charged as illegal activities, but it depends where and how they happen. Cryptocurrency regulation and DeFi industry governance in general is lacking, and there is no federal or international set of laws for the industry. The legal status of rug pull scams depends on the specific circumstances, the laws of the jurisdiction where the scam occurs, and cryptocurrency and decentralized finance (DeFi) regulated in that jurisdiction.

Rug pull scams may violate:

  • Securities laws if the rug pull involves the sale of securities, such as tokens or investment contracts.
  • Anti-Money Laundering (AML) and Know Your Customer (KYC) regulations if the exchanges or platforms involved can be proven to have been laundering illegal funds.
  • Consumer protection laws, including laws related to unfair or deceptive trade practices and consumer fraud.

How to detect and avoid rug pulls

Conduct thorough research

Before investing in any cryptocurrency project or DeFi platform, conduct thorough research on the project’s website, whitepaper, team members, and community forums. Look for red flags such as anonymous developers, lack of transparency, and unrealistic promises of high returns.

Verify the team

Ensure that the project’s developers and team members are real and have a credible track record. Look for information about their experience, previous projects, and involvement in the cryptocurrency community. Be wary of projects with anonymous or undisclosed team members.

Check community engagement

Evaluate the level of community engagement and activity surrounding the project. Active and supportive communities with transparent communication channels, such as Discord or Telegram, are generally more trustworthy. Engage with the community to ask questions and gather feedback from other investors.

Review the tokenomics

Examine the tokenomics of the project, including the token distribution, token supply, and any vesting schedules for team tokens. Be cautious of projects with uneven token distribution or excessive token allocations to the development team.

Audit smart contracts

Look for projects that have undergone security audits by reputable third-party firms. Audited smart contracts are less likely to contain vulnerabilities or be susceptible to exploits that could lead to rug pulls or other security breaches.

Watch for red flags

Be vigilant for common red flags associated with rug pulls, such as anonymous teams, promises of guaranteed returns, lack of a clear roadmap, and pressure to invest quickly. Exercise caution if the project exhibits any of these warning signs.

Avoid unverified projects

Be wary of investing in newly launched or unverified projects that lack a proven track record or credibility. Stick to projects with established reputations, a history of successful development, and positive reviews from reputable sources.

Stay informed

Stay informed about the latest developments, news, and trends in the cryptocurrency and DeFi space. Follow reliable sources of information, such as reputable news outlets, industry experts, and official project announcements, to stay updated on potential risks and opportunities.

Trust your instincts

Trust your instincts and exercise caution if something feels too good to be true or if you feel uncertain about a particular project or investment opportunity. It’s better to err on the side of caution than to risk falling victim to a rug pull scam.

AI’s role in fighting rug pull scams

Artificial Intelligence (AI) can play a significant role in fighting rug pull scams in the cryptocurrency and decentralized finance (DeFi) space by providing tools and technologies to enhance detection, analysis, and prevention efforts.

Through pattern recognition, unsupervised machine learning models can analyze vast amounts of data to identify anomalies associated with rug pull scams. By monitoring transactional data, social media activity, and other relevant information, AI systems can detect suspicious behavior or irregularities that may indicate fraudulent activities.

Natural language processing techniques enable AI systems to analyze and understand textual data from sources such as social media, forums, news articles, and project announcements. AI-powered sentiment analysis can help identify discussions or mentions of potential rug pulls, enabling faster detection and response.

Overall, AI can outperform traditional methods of fraud detection and prevention by increasing detection efficiency, identifying emerging threats before attacks happen, and enhancing decision-making processes. To see how DataVisor does this with market-leading and award winning speed, flexibility, and accuracy, set up a personalized demo with our team.