CRYPTOSMAP TRUST ENGINE
The world’s most accessible crypto verification tool. Paste any contract address — and we analyse it across 6 layers of live on-chain intelligence in seconds. Free. Forever. For everyone.
Live data sourced from GoPlus Security API and DexScreener. Results are for educational purposes only and do not constitute financial advice. Always conduct your own research before investing. Learn more →
6 Layers. One Trust Score.
We don’t just scan one thing. Every token and exchange goes through six independent checks — so nothing gets missed.
Smart Contract Security
The contract is the actual code running the token. We check if it’s publicly visible, whether the team can secretly change it, and if there are any hidden traps built into the code itself.
Liquidity & Distribution
Liquidity is what lets you sell. If one person controls most of it they can drain the pool and disappear — known as a rug pull. We also check how many wallets hold the token.
Honeypot & Trap Detection
A honeypot lets you buy but makes it impossible to sell. Your money goes in and never comes out. This is one of the most common crypto scams. We simulate a sell to find out before you invest.
Trading Privileges & Control
Some tokens give the team dangerous powers — like blocking specific wallets from selling, pausing all trading, or secretly raising taxes. We check whether anyone has these powers over your money.
Market Intelligence
Real market data tells us if the token is actually being traded — or just looks like it is. We check live price, liquidity depth, 24h volume, and whether people are actually able to sell.
Malicious Address Intelligence
We cross-reference the address against GoPlus Security’s global database of known bad actors — including phishing wallets, theft contracts, sanctioned addresses and cybercrime operations.
What the Score Means
Stop. Do not invest. Matches known scam patterns.
Multiple red flags. Deep research required first.
Some concerns present. Invest only what you can lose.
No critical flags found. Always verify independently.
Ready to Verify Your First Token?
Free. No sign up. Results in seconds. Paste any contract address and see exactly what the engine finds.
What Your Score Means
Every verification produces a score from 0 to 100. Here’s exactly what each range tells you — and what to do about it.
Multiple critical red flags detected. This token matches known scam and rug pull patterns. Investing here means very high probability of total loss.
Significant concerns found across multiple layers. This could be a new project with poor setup, or an intentional scam. Requires thorough research before any investment.
Some warning signs present but no critical failures. May be a newer project still building trust, or a legitimate token with incomplete data. Proceed carefully.
No critical flags found across all six layers. Contract is open source, liquidity appears stable, no honeypot detected. Always verify independently before investing.
What Affects The Score
Smart Contract Safety
Open source code, no mint function, ownership renounced. These are the biggest green flags.
Honeypot Detection
A confirmed honeypot immediately scores 0. This is the most dangerous scam type.
Liquidity Health
Is liquidity locked? Who controls the pool? Concentrated LP ownership is a major rug pull signal.
Owner Privileges
Can the team pause trading, blacklist wallets or modify taxes? These hidden powers are dangerous.
Live Market Activity
Real trading volume and liquidity depth from DexScreener. No market activity is a warning sign.
Malicious Database
Any match against phishing, theft or sanctions databases immediately flags as extreme risk.
A High Score Is Not A Guarantee
A score of 75–100 means no technical red flags were found at the time of scanning. It does not mean the project is a good investment, that the team is honest, or that the price will go up. Many legitimate-looking tokens still fail due to poor fundamentals, abandoned projects, or market conditions. Always conduct your own research. Never invest money you cannot afford to lose.
Recently Checked
Every day people around the world use the Trust Engine to check tokens before investing. Here’s a live sample of recent verifications.
Verify Your Token Now
Join thousands of investors using Cryptosmap to check before they invest. Free. No sign up. Results in seconds.
Red Flag Library
Scammers use the same tricks over and over. Learn to recognise every pattern — before you lose your money.
Scammers Are Getting Smarter
Modern crypto scams often pass basic checks. They use verified contracts, real liquidity, and working socials — right up until the moment they pull the rug. That’s why the Trust Engine runs six independent layers, and why understanding these patterns yourself is your best defence.
Honeypot Contract
The contract lets you buy but makes it impossible to sell. Your money goes in and never comes out. One of the most common and devastating scam types.
Unlimited Mint Function
The team can create unlimited new tokens at any time, instantly destroying the value of your holdings by inflating supply to zero.
Hidden Owner / Proxy Contract
The contract appears safe but has a hidden admin address or proxy upgrade function that lets the team swap in malicious code after you invest.
Rug Pull
The team builds up hype and price, then removes all liquidity from the pool simultaneously — leaving investors holding worthless tokens they cannot sell.
Whale Wallet Concentration
A small number of wallets hold most of the token supply. When they sell, the price crashes instantly and other holders cannot exit in time.
Fake Liquidity
The token shows high liquidity and volume on charts but it’s all wash trading. Real sell orders fail because genuine liquidity depth is near zero.
Transfer Pause Function
The contract owner can freeze all trading at any time. They let the price rise, then pause — trapping everyone’s holdings while they quietly exit through a backdoor.
Blacklist Wallets
The contract can blacklist specific wallet addresses, preventing them from selling. Scammers use this to target large holders who might crash the price when selling.
Hidden High Sell Tax
The buy tax is advertised as 3% but a hidden sell tax of 50–99% activates when you try to exit. You can buy freely but lose almost everything when you sell.
Pump & Dump
Influencers or Telegram groups coordinate mass buying to spike the price, then the insiders who bought early sell their bags into the hype — crashing the price and wiping out late buyers.
Fake Team & Whitepaper
The project presents fake LinkedIn profiles, stock photo headshots and a plagiarised whitepaper to appear legitimate. The team is completely anonymous or fabricated.
Fake Community & Bot Activity
Telegram groups with 50,000 members where nobody talks. Twitter accounts with 100K followers but 3 likes per post. Inflated community numbers hide a project with no real users.
Think You’ve Found a Scam Token?
Run it through the Trust Engine. Six layers of live on-chain analysis in under 60 seconds. Free, no sign up required.
Before You Invest
The Trust Engine does the technical scan. This checklist covers everything else. Work through it before putting any money in.
Get a live score before anything else. This takes 60 seconds and covers 6 layers of risk.
If the code isn’t verified and publicly visible, you have no way of knowing what the contract actually does.
On Etherscan/BscScan look for the owner() function. If ownership is renounced, the team can no longer change the contract.
Scammers create clone tokens with similar names. Always copy the address from the official website or verified social media — never from a DM or chat message.
Locked liquidity means the team cannot drain the pool. Look for a lock of at least 6–12 months from a reputable locker.
If one or two wallets hold 30%+ of the supply, they can dump and crash the price at any time. Healthy distribution spreads tokens widely.
Taxes above 10% each way are a red flag. Taxes above 25% make profitable trading almost impossible. Any hidden sell tax is a critical warning.
Liquidity should be a reasonable percentage of market cap. Very low liquidity (<$10K) means even small sells will crash the price heavily.
Use Google Images or TinEye to check team photos. Stock images or photos of celebrities used as fake profiles are immediate red flags.
Copy a paragraph from the whitepaper into Google. If it matches another project word for word, the team simply copied it. No original whitepaper = no original project.
Scam projects are often launched overnight. A website created last week with a Twitter account from 3 days ago is not a serious project.
Is there actual code being written? Check their GitHub. Empty repositories or no commits in months suggest the project is vaporware.
Did someone DM you this token out of nowhere? Unsolicited investment tips — on WhatsApp, Telegram, Twitter, or Discord — are among the most common crypto scam entry points.
100K Twitter followers with 4 likes per post = bot followers. Real communities have active discussions, questions answered by the team, and organic engagement.
Search “[token name] scam” and “[token name] rug pull”. Real victims post warnings. If you find multiple complaints about withdrawal issues or sudden price crashes, take them seriously.
Ask something specific about the tokenomics, the team’s background, or a technical detail. Scam projects either ban you, ignore you, or give vague non-answers.
Checklist Complete
You’ve completed all 16 checks. You’re now better prepared than most crypto investors. Remember — if something still feels off, trust your instincts. No investment is worth ignoring a gut feeling.
⚙️ Run a Full Engine Scan TooThe Checklist Is Step Two
Step one is always the Trust Engine scan. Run the contract address first — six live layers in under 60 seconds.
Check Before
You Invest.
Every Time.
Most people who lose money to crypto scams had one thing in common — they didn't check first. One 60-second scan could save everything. It's free. It's live. It's waiting for you.