The short version: Before buying any token, check its contract on DexScreener or Birdeye, verify liquidity is locked, look at holder distribution, and use tools like RugCheck. If anything looks suspicious, don't trade it.
Even tokens that pass all checks can still fail. No method is 100% foolproof. Only invest what you can afford to lose, and always do your own research.
Step 1: Find the Contract Address
Every token on Solana has a unique contract address (also called mint address or CA). This is the only reliable way to identify a token - names and symbols can be copied.
Where to find it:
- DexScreener - Search for the token, click it, copy the address
- Birdeye - Same process, address shown on token page
- Jupiter - Click the token in the swap interface
- Official sources - Project's website or verified social media
Scammers create fake tokens with names like "BONK2" or "Official PEPE" to trick people. Always verify the contract address matches official sources.
Step 2: Check on DexScreener
DexScreener (dexscreener.com) is a free tool that shows detailed token information. Here's what to look for:
What to Check
- Liquidity: Is there at least $50K-$100K in liquidity? Low liquidity = high slippage and easy manipulation
- Age: When was the token created? Brand new tokens are riskier
- Volume: Is there real trading activity? Compare 24h volume to liquidity
- Price chart: Does it look organic or manipulated?
- Number of transactions: Healthy tokens have many small trades, not just a few big ones
Red Flags on DexScreener
- Liquidity under $10K
- Token created in the last few hours with huge gains
- Only a handful of transactions
- Massive single wallets holding most supply
- Price chart showing only straight up or down
Step 3: Check Liquidity Lock
When developers create a token, they add liquidity (tokens + SOL) to enable trading. If this liquidity isn't locked, they can remove it at any time - taking everyone's money with them (a "rug pull").
How to Check
- Go to the token on DexScreener or Birdeye
- Look for "LP Locked" or "Liquidity Lock" indicator
- Click to see lock details: How much is locked? For how long?
What you want to see
- 80-100% of liquidity locked
- Lock duration of at least 6-12 months
- Locked on a reputable service (Raydium, Meteora, or similar)
Even with locked liquidity, developers can still dump their own token holdings, or the contract might have malicious code. It's one piece of the puzzle, not a guarantee.
Step 4: Analyze Holder Distribution
Check how the token supply is distributed among wallets. A healthy token has many holders with no single wallet holding too much.
Where to Check
- Birdeye - Shows top holders on the token page
- Solscan - Search the contract, click "Holders" tab
What to Look For
- Top 10 wallets holding less than 30-40% combined (excluding liquidity pools and burn addresses)
- No single wallet holding more than 5-10% (unless it's a known entity)
- Hundreds or thousands of unique holders
Red Flags
- One wallet holds 50%+ of supply
- Top 5 wallets control most of the tokens
- Very few total holders (under 100)
- "Dev wallet" with huge allocation and no lock
Step 5: Use RugCheck or Similar Tools
Automated tools can scan token contracts for common scam patterns:
- RugCheck (rugcheck.xyz) - Scans Solana tokens for risks
- Birdeye Security Tab - Shows audit status and risk factors
What These Tools Check
- Mint authority: Can more tokens be created? (Should be disabled)
- Freeze authority: Can your tokens be frozen? (Should be disabled)
- Honeypot detection: Can you actually sell the token?
- Tax percentage: Are there hidden buy/sell taxes?
Good signs on RugCheck
- Mint authority: Disabled
- Freeze authority: Disabled
- No hidden transfer fees
- Liquidity burned or locked
Step 6: Research the Project
Beyond technical checks, look into the project itself:
- Website: Does it look professional? Is there clear information about the project?
- Social media: Active Twitter/Discord community? Real engagement or bot-like?
- Team: Are team members known and verifiable? (Anonymous isn't always bad, but adds risk)
- Roadmap: Does the project have actual plans or just hype?
Fake projects often have: copied websites, fake team photos (reverse image search them), artificially inflated social metrics, promises of guaranteed returns, and pressure to buy immediately.
Quick Checklist Before Buying
Safety Checklist
- Contract address verified from official source
- Liquidity at least $50K+
- Liquidity locked (80%+ for 6+ months)
- Top 10 holders own less than 40%
- Mint/Freeze authority disabled
- Token is at least a few days old
- Real trading volume and organic chart
- Project has verifiable presence (website, social media)
What We Check for Our Signals
Our signal engine automatically filters tokens based on multiple criteria:
- Minimum market cap ($10M+)
- Minimum liquidity ($500K+)
- Established trading history
- Technical indicator confirmation
This doesn't guarantee safety, but it significantly reduces exposure to obvious scams and low-quality tokens.
Final Thoughts
No amount of research can make crypto trading risk-free. Even "safe" tokens can crash, and sophisticated scams can pass basic checks. For more on common scam patterns, read our guide on crypto scams to avoid. The goal is to reduce risk, not eliminate it.
Key principles:
- Never invest more than you can afford to lose
- If something seems too good to be true, it probably is
- Take time to research - FOMO leads to losses
- Diversify - don't put everything in one token