Scams, rug pulls, and how they work

In short

You have probably seen a headline about someone losing their savings to a crypto scam. It stings to read. It would sting far worse to live it. This page explains how these traps are built, how they are sprung, and what questions to ask before you send a single dollar anywhere. Read it once slowly. Then read it again.

The whole of it

What it is

A friend of mine back in Illinois used to say that a fool and his money are soon parted, but I always thought that was too hard on the fool. Most people who lose money to crypto scams are not foolish. They are trusting. There is a difference. A scam is any scheme where someone lies to you to take your money. In crypto, the lies are easier to dress up because the technology is genuinely hard to understand, and that confusion is the scammer's best tool. A rug pull is one specific kind of scam. It happens when a team creates a crypto token, talks people into buying it, and then pulls all the money out and disappears. The name comes from the image of someone yanking a rug right out from under your feet. Gone before you hit the floor.

How it works

I once watched a con man at a county fair sell a bottle of colored water as a cure for sore knees. He had a crowd, a story, and a sense of urgency. Crypto scammers work the same way, just with better graphics. They build a project that looks real. They write a white paper, which is a document explaining what the project claims to do. They make a website. They hire or impersonate famous people to endorse it. Then they create a token and sell it to the public. Early buyers see the price rise fast. That rise is often manufactured, meaning the team is buying their own token to push the number up. New buyers pile in because they see the price climbing. This is called a pump. Then the team sells everything at once. The price crashes to nearly zero. That crash is called the dump. Pump and dump. Gone.

Rug pulls work a little differently but follow the same spirit. The team locks your money into a smart contract, which is a self running piece of code on a blockchain. They write that contract so they can drain it whenever they choose. When enough money has poured in, they pull the plug. You try to sell your token and find you cannot, or you find it is worth nothing. The smart contract had a back door the whole time. Back doors are not visible to the average buyer without a code audit, which is a formal review of the contract by an independent expert.

Romance scams have found a home in crypto too. Someone meets you online, builds trust over weeks or months, and then tells you about an amazing crypto opportunity. The affection was a tool. Pig butchering is the name used for this specific method. It refers to fattening a pig before slaughter. Grim. But knowing the name helps you search for warnings about it.

The numbers, and where to find yours

You have probably wondered how big this problem actually is. I will not throw numbers at you as if I pulled them from thin air. The Federal Trade Commission publishes reports on fraud losses, and their consumer information pages are updated regularly. Search for the FTC and crypto fraud and you will find their official data. The FBI's Internet Crime Complaint Center, called the IC3, also publishes an annual report on internet crime losses. Go to ic3.gov and read what they have posted most recently. Both are free. Both are primary sources. The figures change each year and tend to rise, which is reason enough to stay current. Do not rely on a blog post or a news article that cites a number without naming its source.

A worked example

A woman named Clara is thirty four years old and works as a nurse. She is on a social media platform and sees posts from a group called SolarMoon Finance. The posts promise thirty percent returns in thirty days. She looks at their website. It has a countdown timer, a list of celebrity endorsers, and a white paper full of technical language. She feels a small pull of excitement and a small pull of doubt. She decides to invest 500 dollars. She buys their token at one dollar per token, so she receives 500 tokens. Over the next two weeks the price climbs to four dollars per token. Her 500 dollars looks like 2,000 dollars on the screen. She tells a coworker. The coworker invests 300 dollars. Then one morning Clara opens the app and the token is listed at zero dollars and one cent. The website is gone. The social media accounts are deleted. Her 500 dollars is gone. Her coworker's 300 dollars is gone. No refund exists. No company address was ever real. The celebrity endorsements were fabricated images. The white paper was copied from a legitimate project with names swapped out. The smart contract had a drain function written into it from day one. Total loss for Clara and her coworker combined is 800 dollars. Neither made a mistake born of greed alone. They made a mistake born of incomplete information. That is what this page tries to fix.

Where it goes wrong

If you are holding a little hope that the good ones are easy to spot, I understand that feeling. I genuinely do. But the hard truth is that warning signs are easy to overlook in the moment, and no single sign alone is proof of a scam. It is the combination that should make you pause and slow down.

Start with the promise itself. Any project that guarantees a specific return is making a claim no honest investment can make. Not one. When you feel that promise pulling at you, that is exactly the moment to stop and ask how it could possibly be kept.

Urgency is the next thing to watch. Scammers want you to act before you think, so they build countdown timers and tell you the opportunity closes tonight. Legitimate opportunities do not evaporate if you take a week to investigate.

The people behind a project matter too. Honest teams have named, verifiable founders whose histories you can trace before the project launched. If you search a founder and find nothing older than the project itself, that silence deserves your attention.

Smart contracts carry their own risks. Ask whether an independent firm reviewed the code and published its findings publicly. No published audit from a named firm means you have no way to know what the contract actually does, including whether it has a back door built in from the start.

You have probably also heard stories about someone met online who nudged a person toward a specific platform. That pattern is serious. If the person pushing the opportunity refuses to appear on a live unscripted video call, trust that refusal as information.

Recovery scams pile on top of the original scam. Someone reaches out claiming they can recover your lost funds for a fee paid upfront. That is another scam. There is no magic recovery service. Report losses to the FTC at reportfraud.ftc.gov and to the IC3 at ic3.gov. Those are the right doors to knock on.

Questions to answer before you leave this page

You have read all of this, and I am grateful for your patience and your care for yourself. Before you go, sit with these questions for a moment, as if we were talking on a porch at the end of a long day. Ask yourself whether anyone promised you a specific return and whether you stopped to ask how that promise could possibly be kept, and ask yourself whether you felt rushed and whether that rush came from the opportunity itself or from someone pushing you toward it, and ask yourself whether the people behind a project are named and searchable and verifiable from before the project existed, and ask yourself whether the smart contract behind any token you are considering has been audited by a named independent firm whose report you can actually read, and ask yourself whether someone who expressed affection or friendship online pointed you toward this investment and if so whether that person has ever appeared on a live unscripted video call with you, and ask yourself whether you know exactly how you would get your money back out and whether you tested that process with a small amount first. These are not trick questions. They are the questions a careful friend would ask you, and I mean to be exactly that.