Security

How to Spot a Rug Pull Before It Happens

Published 24 August 2026 · 7 min read

How to Spot a Rug Pull Before It Happens
Short answer

The warning signs are visible before the exit, and most of them can be checked in under ten minutes without technical skill.

Check who can move the money

Look at whether liquidity is locked, and for how long. Unlocked liquidity means whoever provided it can withdraw it at any moment, leaving holders with a token nobody can sell. This is the single most common mechanism and it is publicly checkable.

Then check whether the contract has functions allowing the creator to mint new tokens, pause transfers, or blacklist addresses. Any of these means the outcome is at one party's discretion regardless of anything else about the project.

Check who holds it

Heavy concentration in a few wallets means a coordinated exit is possible and easy. Look specifically for wallets holding large percentages that are not identifiable as exchanges or locked contracts.

Also check how the supply was distributed. A launch where insiders acquired most of the supply at negligible cost has built-in selling pressure at any price, and the people with the most information have the least reason to hold.

Check the human signals

Anonymous teams are not automatically fraudulent — plenty of legitimate crypto is pseudonymous — but combined with any of the above, anonymity removes the only remaining accountability. Copied documentation, a roadmap of vague milestones, and engagement that looks manufactured are all consistent tells.

Urgency is the strongest one. Sustained pressure to buy before a deadline exists to prevent exactly the checks described here. If you are being hurried, that is the finding — the rest is confirmation.

A workable method, step by step

Theory is cheap. Here is the sequence that actually works in practice. First, write down what you are trying to find out. "I want to know if Bitcoin breaks its range" is a question you can act on; "I want to keep an eye on the market" is not, and it is why most people end up watching charts aimlessly.

Second, define the specific condition that answers it — a price, a percentage move over a window, or a level relative to a moving average. Third, decide in advance what you will do when that condition is met. Skipping this step is the reason so many alerts fire and produce nothing but a raised heart rate.

Fourth, automate the watching. Set the alert and close the app. Fifth, review monthly: which alerts fired, what did you do, and was it right? Alerts you never acted on should be deleted. The review is what turns rug pulls from a one-off setup into a system that improves.

Timeframes: why the same signal means different things

Most disagreements about direction are actually disagreements about timeframe. A 5-minute chart is dominated by noise, execution and short-term liquidity. A daily chart shows genuine supply and demand. A weekly chart shows the trend that actually determines multi-year outcomes. None is more correct — but mixing them is how people end up taking a long-term position and managing it on a 15-minute chart.

Match the timeframe to your holding period. If you expect to hold for years, intraday movement is not information you should be acting on, and watching it will only cost you the position. If you are trading a multi-day move, the weekly trend is context rather than a trigger.

A useful convention: use the higher timeframe to decide direction and whether to be involved at all, and the lower one only to choose an entry once that decision is made. Alerts fit this naturally — set them on levels that matter on the higher timeframe, and you stop needing to watch the lower one.

Turning this into something automatic

The gap between knowing what to do and doing it is closed by automation, not discipline. You will be asleep, in a meeting, on a flight, or simply not thinking about markets on the day it matters. That is not a discipline failure — it is the normal condition of having a life, and any system that ignores it is badly designed.

So convert every conclusion from this article into a condition that can be watched for you. A level you would act on becomes a price alert. A move size that would change your view becomes a percentage alert. A whole segment of the market you cannot follow coin by coin becomes one bulk rule that scans it and tells you when something unusual happens.

Set them, then close the app. The point of rug pulls is not to make you watch more closely — it is to let you stop watching entirely and still be there when it counts. CoinPriceAlert sends push notifications for crypto, stocks, metals and forex, with quiet hours so nothing wakes you at 4am for a move you would not have traded anyway.

Costs that quietly eat the return

The return you see on a chart is not the return you get. Between the chart and your account sit trading fees, the spread between bid and ask, slippage on anything larger than a small order, network fees when moving assets, and conversion costs if you are not trading in your home currency.

None is large in isolation. Together, on an actively traded account, they routinely consume a meaningful share of gross returns — and unlike market moves, they are guaranteed. This is the strongest practical argument for trading less: every round trip you avoid is a cost you certainly save, against a gain you only might have made.

Slippage deserves particular attention because it is worst exactly when you most want to act. Liquidity thins during violent moves, so the market order you place during a crash fills materially worse than the screen suggested. Limit orders paired with alerts are the standard answer: the alert tells you the level arrived, the limit order controls what you pay for it.

The mistakes that cost the most

Treating every notification as requiring a response. An alert is information, not an instruction, and most of them should end with you doing nothing.

Reacting to a move without checking what caused it. A fall that happens while the whole market falls is a different event from a fall that happens alone, and the correct response differs completely. Checking correlation first takes ten seconds and prevents most panic decisions.

Changing the plan mid-move. The level you chose while calm is better than the one you will choose while watching a candle. If you find yourself widening a stop or moving a target during volatility, that is the moment to close the app rather than the moment to act.

Never reviewing. Most people set up rug pulls once and never look at whether it worked. A short monthly review — what fired, what you did, what you would change — compounds faster than any refinement of the setup itself.

Risk, defined properly

Getting the definition right changes what you actually do. Volatility is how much a price moves. Risk is the probability of a permanent loss of capital — of the reason you owned something ceasing to be true. An asset can be extremely volatile and low-risk for a patient holder, or barely move and be extremely risky if it is quietly failing.

The practical difference: volatility is survived with position sizing, risk is avoided with research. Sizing a position so that a 60% drawdown is uncomfortable rather than ruinous handles volatility. Nothing about sizing protects you from owning something whose thesis has broken.

Which is why both jobs need doing. Size for the volatility, research for the risk, and set an alert at the level where the thesis would be in question — so the review is triggered by the market rather than by whether you happened to be paying attention that week.

Never miss a move in the markets you follow

Set a price or percentage alert once and get a push notification the moment it triggers — free, with quiet hours so nothing wakes you at 3am.

Download on the App Store Get it on Google Play

Frequently asked questions

Is any of this financial advice?

No. Everything here is general educational information about how markets and tools work, not a recommendation to buy or sell anything. Your circumstances, tax position and risk tolerance are specific to you — for decisions that depend on them, speak to a licensed professional in your jurisdiction.

What is a sensible alert threshold?

Wide enough that firing is unusual. Compare the threshold to the asset's typical daily range over the past month: if the alert sits inside that range it will fire constantly and you will stop reading it. For most large-cap crypto, 5–10% is a reasonable starting point; high-volatility assets need considerably more, and currencies need far less.

Will alerts still reach me if the app is closed?

Yes — alerts are evaluated server-side and delivered as push notifications, so the app does not need to be open or running in the background. On Android, aggressive battery optimisation can delay notifications; excluding the app from battery optimisation resolves late delivery.

Keep reading