Main Takeaways
Fake token attacks are common cryptocurrency scams where criminals create fraudulent assets that mimic legitimate cryptocurrencies, using them to steal users’ money or sensitive data.
These scams often use platforms such as Telegram, WhatsApp or WeChat to spread misinformation. A common tactic is running token “pre-sales,” attracting victims with promises of a higher future “listing price” compared to the current “pre-sale price.”
In most cases, losses are irreversible. Binance encourages users to stay vigilant, be aware of common threats and red flags, and constantly learn to protect themselves.
A fake token attack is a type of cryptocurrency scam where malicious actors create counterfeit or fraudulent tokens that mimic legitimate cryptocurrencies. These fake tokens are designed to deceive investors and traders into believing they are purchasing or trading a genuine asset, often leading to financial losses or other negative consequences such as identity theft.
How Fake Tokens Trick Investors and Steal Funds
Real tokens and fake ones mimicking them can exist on the same blockchain but with different smart contract addresses, or on different blockchains. Fake tokens can be used in a variety of fraudulent schemes.
Initial Coin Offerings (ICOs) and Token Sales: Attackers may launch fake ICOs or token sales, enticing investors with the promise of getting in early on a groundbreaking project. Once they collect funds, they disappear, leaving investors with worthless tokens.
Airdrops and Giveaways: Fake tokens are sometimes distributed through airdrops or giveaways, where users are asked to provide personal information or pay a small fee to receive the tokens. This can lead to further scams or identity theft.
Pump and Dump Schemes: Scammers may artificially inflate the price of a fake token through coordinated buying (pump) and then sell off their holdings at the peak (dump), leaving other investors with devalued assets on their hands.
Launchpool Token Scams: The schemes described above can be complicated and costly to pull off, so scammers may resort to lower-cost methods, like fake Launchpool token scams. In these scams, criminals take advantage of the publicity generated by a reputable exchange's promotion of an asset. They may, for example, falsely claim to offer these tokens at a discount via unofficial channels that are not associated with the platform, like Binance, which conducts the original promotion.
Real token launch announcement on Binance Launchpool
When Binance announces the upcoming launch of official Launchpool tokens, scammers often try to take advantage by creating fake tokens that imitate the promoted assets. This strategy allows them to cut down on promotional costs. All they need to do is convince potential victims that the fake tokens they are selling are the same ones promoted via Binance Launchpool.
Real-Life Cases of Fake Crypto Token Scams
BOOM
In July 2024, Binance’s Risk Intelligence team identified an asset called BOOM as a fake token. The asset exhibited several red flags at once, which makes it an excellent example of such tokens.
Liquidity: A BOOM pool on PancakeSwap had a meager $3.38K liquidity, all provided by the contract deployer. The market value of this token is very low.
BOOM’s page on CoinMarketCap, showing total liquidity and the number of holders
Suspicious Transfers: While the token’s liquidity amounts to just several thousand dollars, there are over 11.18M addresses that have received this token. This is abnormal: with legitimate tokens, liquidity should be proportional to the number of holders.
BOOM’s page on Dextools, showing sell tax
Sell Tax: A token's sell tax is a fee imposed on each sale of the token, set by the project developers. In BOOM’s case, sell tax is set at 100%, which means that whenever someone tries to sell this token, the entire amount of the sale will be deducted as tax, and the seller will not receive any funds.
In this case, scammers have set sell tax at 100% and airdropped the fake token to more than 11 million addresses. Had the trading of this asset taken off, the people behind the token would have pocketed 100% of each sale via a built-in smart contract. This case stands as a reminder that users should closely scrutinize the tokens they receive via unsolicited airdrops.
Fake OMNI
In 2024, Binance promoted multiple new tokens via its Launchpool program. Scammers around the globe have attempted to use these opportunities to create fake tokens to defraud users. For example, a popular scheme has been setting "pre-purchase" programs through unofficial channels such as Telegram or WeChat groups. Remember that overly attractive prices on much-anticipated tokens before they launch should be considered a red flag.
Real OMNI’s page on CoinMarketCap
OMNI is an example of a Launchpool token that was highly anticipated. Criminals were quick to launch several imposter tokens, including the one in the screenshot below, which originated in Turkey.
Fake “OMNI’s” BscScan page
As you can see, this fake “OMNI” has zeroes in its price and on-chain market cap metrics, with only a few holders and total transfers.
5 Tips to Identify a Fake Crypto Token Before You Invest
Verify the Contract Address: Every digital token has a contract address associated with it. Always obtain the contract address from official sources such as the project's official website, verified social media accounts, or reputable cryptocurrency listing platforms like CoinMarketCap or CoinGecko. Cross-check the contract address across multiple official sources to ensure consistency.
Use Risk Assessment Tools: Contract code analysis, swap analysis, and liquidity analysis are the most basic methods to detect token risks, but these can present technical barriers as they require a certain level of coding and blockchain-specific skills. Users who are less familiar with the technical aspects of digital assets can rely on consumer tools designed to help assess risk probabilities. For example, Token Sniffer is an easy-to-use and convenient tool that can help in risk identification.
Screenshot of Token Sniffer
Stay updated with Risk News: The best way to mitigate scam-related risks in the crypto space is staying on top of the latest developments in the industry. Following specialized risk-focused blogs and security news will help you get better at identifying red flags and avoiding scammers.
Check the token metrics: Look for red flags in token metrics such as zero or unusually low prices, market cap, and liquidity. A legitimate token should have consistent and reasonable metrics proportional to its number of holders.
Beware of Unofficial Channels: Never purchase tokens through unofficial channels on Telegram, WhatsApp, or WeChat. Scammers often use these platforms to run fake token pre-sales with promises of higher future listing prices.
What to Do If You’ve Bought a Fake Token?
1. Stop Trading Immediately
Cease all transactions and transfers related to the fake token to prevent further losses.
2. Check Transaction Records
Review your transaction history to identify the source and details of the fake token. This will help you assess the situation and guide your next steps.
3. Report to the Trading Platform
Immediately contact the customer support team of the platform where you purchased the fake token and report the issue. Provide detailed transaction records and relevant information. Please note that recovery of losses is not guaranteed.
Final Thoughts
Fake tokens are a significant threat in the cryptocurrency space, preying on the enthusiasm of investors and their willingness to explore new opportunities in emerging tokens. By staying informed, conducting thorough research, and exercising caution, you can protect yourself from falling victim to these scams. Always remember the old adage: if something sounds too good to be true, it probably is.
Further Reading
Know Your Scam
Stay Safe: How to Spot and Avoid Telegram Scams
4 Critical Tools to Enhance the Security of Your Binance Account