Crypto pump and dumps, rug pulls and paid promotions: how they work and the red flags

A crypto pump and dump is a scheme in which a group buys or already holds a thinly traded token, promotes it heavily so that others pile in and push the price up, and then sells into that buying. The price collapses once the promoters are out, and the people who bought during the hype take the loss. A rug pull is a close relative in which the token's creators drain the trading liquidity or use hidden powers in the token's code, leaving holders with something they cannot sell.

Pump and dumps get a short entry in our overview of crypto scams and regulation. This guide goes into the mechanics: why small tokens are so easy to move, the arithmetic of a liquidity pool, the different kinds of rug pull, how paid promotions and influencers fit in, and the specific checks that expose most schemes before you put money in.

Risk warning: small crypto tokens are among the riskiest assets that exist. Many fall close to zero and some cannot be sold at all. Crypto assets are highly volatile and largely unregulated outside the scope of the EU's MiCA regulation. You can lose all of the money you put in.

Why small tokens are easy to pump

The price of any asset is set by the last trade, and how far a trade moves the price depends on how much is available to trade against. Bitcoin and ether have deep order books with large amounts waiting to buy and sell at every price. A newly launched token might have only a few thousand dollars of liquidity in total.

Two features make small tokens ideal for manipulation:

• Thin liquidity. A purchase that would not move a large coin at all can double or triple the price of a small one. Our guide to crypto order books and liquidity explains depth and slippage in more detail.
• Concentrated supply. If the creators and a few early wallets hold most of the tokens, they control what can be sold, and when. A low circulating supply against a much larger total supply is a version of the same problem; see tokenomics and token supply.

Add a burst of publicity and you have the ingredients: a market that moves sharply on small amounts of money, held mostly by people who intend to sell.

The anatomy of a pump and dump

Schemes vary, but the stages are familiar.

1. Accumulation. Organisers create a token or quietly buy a small existing one. If they create it, they often keep a large share of the supply, sometimes spread across many wallets so it is not obvious.
2. The narrative. The token gets a story: a celebrity tie-in, a meme, a partnership, an "AI" angle, a claim of an imminent exchange listing. Detail is unnecessary; momentum is the point.
3. The promotion. Paid posts from influencers, coordinated messages in chat groups, bots that flood social media, countdowns to a "launch" or "listing". The message is always that early buyers will do best and time is short.
4. The pump. New buyers arrive and the price rises sharply. Rising prices become their own advertisement: screenshots of gains spread and attract further buyers.
5. The dump. Organisers sell into the buying. Because liquidity is thin, their selling drives the price down quickly. Late buyers rush to sell too, and the price can fall most of the way back to where it started, or further.
6. The quiet. Social channels go silent or are deleted, the project's website disappears, and the organisers move on to the next token.

Some groups run organised "pump" channels where members are told a coin and a time, all buy at once, and are told to hold. The organisers buy before the announcement and sell into the members' orders, so most members lose even when they act exactly as instructed.

Worked example: a small liquidity pool

Many new tokens trade on decentralised exchanges that use automated market makers. A simple and common design keeps the product of the two balances in the pool constant. The numbers below are illustrative, and ignore trading fees.

A new token launches with a pool holding 50 ETH and 1,000,000 tokens. The price is 50 divided by 1,000,000, or 0.00005 ETH per token. The pool's constant is 50 times 1,000,000, which is 50,000,000.

Step 1: the hype buying. Buyers put a total of 50 ETH into the pool. The pool now holds 100 ETH, so to keep the constant at 50,000,000 it can hold only 500,000 tokens. Buyers have received 500,000 tokens between them. The price is now 100 divided by 500,000, or 0.0002 ETH: four times the launch price, from just 50 ETH of buying.

Step 2: the insider sells. An insider who held 400,000 tokens from the start sells them all into the pool. The pool now holds 900,000 tokens, so its ETH falls to 50,000,000 divided by 900,000, about 55.56 ETH. The insider receives about 44.44 ETH. The price drops to about 0.0000617 ETH, only about 23% above the launch price.

Step 3: the buyers try to leave. If the buyers now sell all 500,000 of their tokens, the pool rises to 1,400,000 tokens and its ETH falls to about 35.71 ETH. The buyers receive about 19.84 ETH between them, for 50 ETH paid in. Each buyer's loss depends on when they bought and sold, but as a group they have lost about 60% of their money, and most of it has gone to the insider.

Notice how little money it took. Fifty ETH of buying quadrupled the price, and one holder's sale undid most of it. On a large coin, the same amounts would barely register.

Rug pulls: when there is nothing to sell into

In a rug pull, the people behind a token remove the ability of others to exit, rather than simply outselling them. The main versions:

Liquidity removal

Whoever adds the initial liquidity to a pool receives tokens representing their share of it, and can withdraw it. If the creators added all the liquidity and have not locked it, they can take all the ETH or stablecoins out of the pool in one transaction. Holders are left with tokens and nothing to swap them for. In the example above, if the creators withdrew the pool after step 1, they would take the 100 ETH and the buyers would get nothing.

Hidden contract powers

A token is a smart contract, and its code decides what holders can do. Malicious contracts include:

• Unlimited minting, so the owner can create vast new supply and sell it.
• Honeypot code that lets anyone buy but blocks selling for everyone except the owner, or applies a near-100% "tax" on sells.
• Blacklists that let the owner freeze particular wallets.
• Adjustable fees that start low and are raised once buyers are in.

A widely reported example came in November 2021, when a token named after a hit television series rose rapidly while buyers found they could not sell it; its creators then cashed out and the price fell close to zero.

Slow rugs

Not every exit is sudden. Some teams keep the project alive while steadily selling their own allocation, or quietly abandon development after raising money. The effect on holders is the same, only slower.

Paid promotions and influencers

Promotion is the engine of a pump, and much of it is paid. The problem is not that promotion exists but that it is often undisclosed, so followers mistake an advert for a genuine opinion.

A well-documented case: on 3 October 2022, the US Securities and Exchange Commission announced that Kim Kardashian had agreed to pay 1.26 million dollars to settle charges that she promoted a crypto token called EthereumMax on Instagram without disclosing that she had been paid 250,000 dollars for the post. She neither admitted nor denied the findings. The case is useful less for the person involved than for the principle: a promoter's enthusiasm may simply be a fee.

In the EU, MiCA prohibits market manipulation in crypto assets within its scope, which includes spreading false or misleading information to move prices, and requires marketing communications to be fair, clear, not misleading and identifiable as marketing. In the UK, crypto promotions to consumers have had to follow the FCA's financial promotion rules since 8 October 2023. These rules matter, but many promoters operate across borders, anonymously or simply in breach of them. Enforcement after the event does not return lost money.

Signs that a post may be a paid promotion:

• The same token is suddenly mentioned by many accounts at once, often with similar wording.
• The post contains a contract address and urgency, but little explanation.
• The account has promoted many similar tokens, most of which are now worth little.
• There is a small "ad" or "sponsored" label, or a disclosure buried in a reply.
• Gains are shown as screenshots rather than explained.

The red flags, and how to check them

Most pump and dumps and rug pulls show several of these before the collapse. Many can be checked on a blockchain explorer, which shows a token's contract and holders.

• Holder concentration. Look at the top holders. If a handful of wallets, other than the liquidity pool and known exchange addresses, hold most of the supply, they can sink the price at will.
• Unlocked liquidity. Check whether the pool's liquidity tokens are locked in a time-locked contract or burned. If the creator can withdraw them, a rug is a single transaction away. Locks can also expire, so check when.
• Owner powers in the contract. Is the contract verified, so the code is public? Can the owner mint, pause trading, blacklist wallets or change fees? Has ownership been renounced? Renouncing removes some powers but not all risks.
• Very new contract, very fast rise. A token that launched days ago and is up several hundred per cent is the profile of a pump.
• Anonymous team with no track record. Not proof of fraud, since many legitimate projects are pseudonymous, but it removes accountability.
• Promised listings and partnerships. Claims of an imminent major exchange listing or a famous partner that cannot be confirmed from the exchange or partner directly.
• Pressure. Countdowns, "last chance", "don't miss out", and members being told not to sell.
• Selling restrictions. Reports in the community that people cannot sell, or that sells fail or incur huge fees, are a strong honeypot signal. Do not test it with a large amount.
• Copycat names. Tokens that borrow the name or ticker of a famous project or brand to catch people searching for the real one.

None of these checks makes a token safe. They can tell you that a token is dangerous; they cannot tell you it is not.

Common mistakes

• Buying because the price is already rising. In a pump, the rise is the bait.
• Trusting a promoter because they are famous or seem knowledgeable. They may be paid, or may be the organiser.
• Assuming you can sell when you choose. In a thin or honeypot market you may not be able to sell at any reasonable price, or at all.
• Ignoring how the pool maths works. Small pools move violently in both directions, and your own selling moves the price against you.
• Copying a contract address from a reply or a chat. Fake tokens with the same name are common; get the address from the project's official source and check it on an explorer.
• Joining a pump group expecting to be early. The organisers are earlier.
• Doubling down after a crash. Tokens abandoned by their creators rarely come back.
• Not keeping records. If you are defrauded, transaction hashes, screenshots and messages are what authorities need.

How this differs from trading crypto CFDs with a regulated broker

Crypto CFDs offered by regulated brokers in the EU are generally limited to larger, more liquid coins, and the broker is authorised under MiFID II with retail leverage capped at 2:1. That removes the specific risks of honeypot contracts and liquidity pulls, because you are not holding the token. It does not remove market risk: large coins can also fall sharply, spreads widen in stress, and leverage magnifies losses. Most retail CFD accounts lose money. See crypto CFDs vs buying crypto, and use the crypto position size calculator to keep any single position small.

Before dealing with any firm, check its authorisation through our regulator registers page. Unregulated "trading platforms" that promote hot new tokens are themselves a common scam, as our forex scam red flags guide explains.

If you think you have been caught in one

1. Stop adding money. Do not buy more to "average down".
2. Record everything: the token's contract address, your transaction hashes, the promotions you saw, and the accounts and groups involved.
3. Report it to the police, and in the EU to your national financial regulator, especially if a firm or a named promoter was involved. In the UK, report to the FCA and Action Fraud.
4. Warn others through the platform where the promotion appeared, if you can do so safely.
5. Ignore recovery offers. People who promise to recover money lost in a pump or rug pull for an upfront fee are running a second scam.

Frequently asked questions

What is a crypto pump and dump?

It is a scheme where organisers acquire a cheap, thinly traded token, promote it to attract buyers and drive up the price, then sell their holdings into that demand. The price collapses after they exit, and late buyers absorb the losses. It is a form of market manipulation and is prohibited in many jurisdictions, including under MiCA in the EU for crypto assets within its scope.

What is the difference between a pump and dump and a rug pull?

In a pump and dump, organisers sell into rising demand, outselling everyone else. In a rug pull, the creators remove the ability of others to exit, by withdrawing the trading liquidity or using hidden powers in the token's contract such as blocked selling or unlimited minting. Both leave ordinary holders with heavy losses.

What is a honeypot token?

A honeypot is a token whose smart contract allows people to buy but prevents them from selling, or charges such a high fee on sales that selling is pointless. The creators can sell while everyone else is trapped. Reports that sells fail are a serious warning sign.

How can I tell if a crypto influencer is being paid?

Often you cannot be sure. Look for disclosure labels, the same token appearing across many accounts at once, a history of promoting tokens that later collapsed, and posts that offer urgency and a contract address but little explanation. Undisclosed paid promotion has led to enforcement action, including a 1.26 million dollar SEC settlement with a celebrity in 2022.

Are pump and dump schemes illegal in crypto?

In many places, yes. In the EU, MiCA prohibits market manipulation, including spreading misleading information to move prices, for crypto assets within its scope. Other jurisdictions apply fraud, market abuse or securities laws. Enforcement varies, organisers are often anonymous and abroad, and victims rarely recover their money.

Is locked liquidity a sign that a token is safe?

No. Locked liquidity removes one particular way of rugging holders, for as long as the lock lasts, but the creators can still dump a large token allocation, use other contract powers or simply abandon the project. It is one check among many, and a token can pass every check and still fall to near zero.