DexsAlertBot/Blog/BNB Chain Scam Signals

BNB Chain Rug Pulls and Scam Signals: What to Look For

By DexsAlertBot TeamPublished 8 min read

Who wrote this: the team behind DexsAlertBot, a Telegram alert bot for meme coins on Solana, Robinhood Chain and BNB Chain, with a free plan and a paid Premium tier. That makes us an interested party in this topic, so this guide is written as evaluation criteria you can apply to any tool — including ours. More about who publishes this →

Every scam on BNB Chain is a variation on one of six ideas. They look different in the moment — different names, different charts, different urgency — but the mechanics underneath repeat. Learn the six and you stop evaluating stories and start evaluating contracts.

Why This Chain in Particular

BNB Chain is cheap to deploy on and permissionless by design, which is exactly what makes it useful and exactly what makes it a target. Nobody approves what gets published, so a scam contract costs its author a few dollars and a few minutes. The same openness that lets a real project launch without asking permission lets a fake one launch beside it.

None of that makes the chain bad. It makes verification non-optional — the chain gives you the tools to check, and expects you to use them.

Signal 1 — You Can Buy It, But You Cannot Sell It

The honeypot is the purest form of the trap: the contract accepts your buy and blocks your sell. Sometimes it blocks everyone except a whitelist, sometimes it blocks any address that was not the deployer, sometimes it allows a sell so small it is not worth making.

You cannot see this by reading the chart. The chart of a honeypot looks beautiful, because nobody is selling. The only reliable way to catch it before you buy is a sell simulation — a test transaction that asks the contract whether a sale would succeed, without actually sending one.

This is the single check that cannot be replaced by intuition, and it is the reason the automated check exists.

Signal 2 — Liquidity That Can Still Be Withdrawn

A rug pull in its original sense is one transaction: whoever holds the pool's liquidity position removes it, and the token's price collapses to nothing because there is no longer anything to sell into.

The defence is knowing what share of the liquidity can no longer be withdrawn. Burned liquidity has been destroyed. Locked liquidity is held by a contract until a set date. Everything else is withdrawable at will.

A token with most of its liquidity unlocked is not necessarily going to rug, but it is one decision away from it, and that decision is not yours.

Signal 3 — Ownership That Is Still Live

On an EVM chain, ownership is not a formality. An owner address that still controls the contract can usually mint new supply, pause transfers, blacklist a wallet, or change the fees — and those powers do not expire.

Renounced ownership means the owner address was set to 0x0000...0000 and those doors are closed permanently. Live ownership means they are open. Many legitimate projects hold ownership during a launch and renounce later, so this is a question of trust and timing rather than an automatic verdict.

What matters is that you know which of the two you are buying.

Signal 4 — A Transfer Tax That Can Be Changed After You Buy

Some contracts take a percentage on every buy and sell. A disclosed, fixed tax is a design choice. A tax the owner can raise after you are already holding is a trap with a delay built into it.

The pattern is predictable: launch with a low or zero sell tax, wait for buyers to accumulate, then raise the sell tax to a level that makes exiting pointless. Nothing about the chart changes at the moment it happens.

This is why a live setFee-style function matters even when the current tax reads as zero. The number you see is the number right now, not the number you will face when you try to leave.

Signal 5 — A Cloned Contract Wearing a Real Name

Deploying a copy of a trending token with the same name, ticker and logo takes minutes. The clone will appear in search, in aggregators and in group chats, and the only thing that distinguishes it is the contract address.

This is why address verification is the first step of any check and why it is worth doing twice, from two independent sources. A perfect audit of the wrong contract protects nothing — our BNB Chain verification workflow starts there for exactly this reason.

Signal 6 — Supply Concentrated in a Few Wallets

If a small number of addresses hold most of the circulating supply, they do not need bad intent to hurt you. One ordinary exit is enough to collapse a thin market, and a coordinated one is enough to end the token.

Read the holders list carefully: the liquidity pool contract, the launchpad contract and burn addresses all appear there and none of them are people. Judge the concentration of what remains.

What a Clean Token Looks Like

Inverting the six signals gives you the shape of a token worth considering — not a guarantee, a baseline.

Minimum before you consider buying

  • A sale would succeed. Confirmed by simulation, not by the chart looking healthy.
  • Liquidity is mostly locked or burned. And you know the actual percentage, not a claim in a chat.
  • Ownership is renounced, or you have accepted the specific powers that remain.
  • The contract source is verified, so what it does can be read by anyone.
  • The address came from two independent sources and matched character for character.
  • Supply is not concentrated once pool and burn addresses are excluded.
The question behind all six Every signal above answers the same thing: after I buy, who can still change the rules? If the answer is anyone other than the market, you are not holding a token — you are holding someone's permission to leave.

Frequently Asked Questions

Can I spot a honeypot from the chart?

No, and this is the reason honeypots work. A honeypot chart looks strong precisely because nobody can sell. The only check that catches it before you buy is a sell simulation that asks the contract whether a sale would go through.

Is unlocked liquidity always a scam?

No. Some ordinary launches start with unlocked liquidity and lock it later. But unlocked liquidity means the pool can be removed in one transaction by whoever controls it, so it belongs in your position sizing rather than in your optimism.

Does renounced ownership make a token safe?

It closes one category of risk — the owner can no longer mint, pause, blacklist or change fees. It does nothing about liquidity being pulled, supply concentration, or the market simply going down. It is one answer, not the answer.

Does DexsAlertBot check these things automatically?

Yes, for the mechanical ones. Check Token reports whether the token can be sold, whether the source is verified, whether new tokens can still be minted, whether ownership was renounced, the locked or burned share of liquidity and the holder count — then gives a direct verdict, and says so openly when the analysis cannot be completed. It is free and needs no wallet connection.

Why do scams concentrate on new chains and new launchpads?

Because attention concentrates there first and tooling arrives later. The window between a venue becoming popular and its checks becoming routine is where most of the losses happen, on every chain this has ever occurred on.

If you want the step-by-step version of the checks above, read how to check a BNB Chain token before you buy. And for how the same traps appear on Solana under different names, see Solana rug pull warning signs.

Screen a token before you buy it

Paste any BNB Chain contract address and get sellability, ownership, liquidity lock and holder data in seconds. Free, inside Telegram.

Try Check Token →

References

⚠️ This article is educational and not financial advice. No checklist eliminates risk entirely — always do your own research (DYOR) before buying any token.