🍯 What is a Honeypot Scam?
A honeypot scam in the crypto space is a type of fraud where a smart contract is designed to allow users to buy a token but prevents them from selling it. The contract contains hidden logic that blocks or reverts sell transactions for everyone except the scammer's address. Unsuspecting investors buy the token, often driving up its price, but are then trapped with worthless tokens while the scammer sells their holdings for profit.
The term "honeypot" comes from the idea of a trap that lures victims in with something attractive (the promise of quick profits or a new "gem" token) but then ensnares them. Honeypot scams are particularly dangerous because they exploit the trust users place in smart contracts and decentralized exchanges.
On the TRON network, honeypot scams often involve TRC20 tokens paired with USDT TRC20 on decentralized exchanges like SunSwap. Scammers promote these tokens heavily on social media, creating hype and FOMO, then drain liquidity or trap investors.
Unlike rug pulls where liquidity is drained, honeypots let you buy but lock you out of selling. Victims see their investment grow on paper but can never realize it. The scammer, who has a whitelisted address, sells at the peak and walks away with the profits.
⚙️ How Honeypot Scams Work
Honeypot scams rely on malicious code embedded in the token contract. Here's a typical flow:
- Step 1: Promotion. Scammers create a token with a catchy name and a professional-looking website. They use social media (X, Telegram) and sometimes influencer shills to create hype. The token is listed on a DEX with a USDT TRC20 pair.
- Step 2: Buy Trap. The contract allows anyone to buy the token. This is essential to attract victims and drive up the price. Early buyers see the price increase and may even make small profits if they manage to sell (some honeypots allow a few small sells to build trust).
- Step 3: The Lock. The sell function contains a modifier or condition that checks if the seller is the scammer's address. If not, the transaction reverts with an error or silently fails. Other techniques include blacklisting non-whitelisted addresses or requiring a minimum token balance that's impossible to achieve.
- Step 4: Dump. Once enough victims have bought in, the scammer sells their entire holdings at the inflated price. The price crashes, and victims are left with tokens they cannot sell. The scammer moves the funds to another wallet and disappears.
Common Honeypot Techniques
- Whitelist / Blacklist: Only certain addresses (the scammer's) are allowed to sell. Others are blocked.
- Minimum Balance Requirement: The contract checks if the seller's balance exceeds a threshold that's impossible for most users to reach.
- Hidden Transfer Tax: A 100% transfer tax on sells, effectively taking all the proceeds.
- Modifier Revert: A simple if-statement that reverts the transaction for non-whitelisted addresses.
- Delegate Call Proxy: The contract uses a proxy pattern where the sell logic can be changed by the owner, blocking sells at any time.
Before investing in any new token, always attempt a small test sell with a tiny amount (e.g., $1 worth). If the sell fails, you've dodged a bullet. If it succeeds, it doesn't guarantee the token is safe, but it's a good first step.
🧩 Common Tactics Used by Honeypot Scammers
Scammers use fake influencers, paid shills, and bot accounts to create massive hype around the token, often promising "1000x" returns.
They claim partnerships with well-known projects or exchanges, often using stolen logos and fabricated announcements.
The token's price spikes rapidly as victims buy in. The scammer sells at the top, causing a crash.
The contract is often not verified on TronScan or Etherscan, or the verified code is misleading.
Telegram and Discord groups with thousands of bots or fake members to appear legitimate.
Messages like "Pre-sale ends soon" or "Only 1000 holders left" push victims to buy without verifying.
🚩 Red Flags: How to Spot a Honeypot Scam
| Red Flag | Why It's Suspicious |
|---|---|
| Contract Not Verified | Unverified code hides malicious logic. Always check if the contract is verified on TronScan or Etherscan. |
| High Buy Tax, Low Sell Tax | If buy tax is low but sell tax is extremely high (or 100%), it's likely a honeypot. |
| You Can Buy but Not Sell | Test with a small amount. If the sell fails, it's a honeypot. |
| No Liquidity Lock | If the liquidity isn't locked, the scammer can pull it. But honeypots often lock liquidity to appear safe. |
| Whitelist / Blacklist in Code | Search the contract for functions like `onlyWhitelisted` or `isBlacklisted`. These are red flags. |
| Owner Can Modify Fees or Block Sells | If the owner can change fees or enable/disable trading, they can trap you at any time. |
| Too Good to Be True Returns | Promises of 1000x returns with no clear utility are classic honeypot bait. |
| Fake Trading Volume | Scammers use wash trading to create artificial volume. Check if the volume is consistent with real users. |
If you cannot sell a token, it is worthless. Always test selling a small amount before investing significant funds. If the sell transaction fails, you've found a honeypot.
✅ How to Check If a Token Is a Honeypot
Here are the best ways to check for honeypot traps before investing:
-
1
Manual Test Sell
Buy a very small amount of the token (e.g., $1 worth) and try to sell it immediately. If the sell fails, it's a honeypot. If it succeeds, wait a few minutes and try again — some honeypots allow early sells to build trust.
-
2
Use Honeypot Detection Tools
Tools like Token Sniffer, Honeypot.is, and BSCCheck (for BSC) or dedicated TRON scanners can analyze the contract code and flag suspicious patterns. However, these tools aren't perfect; manual verification is still recommended.
-
3
Review the Contract Code
If the contract is verified, read it. Look for functions like `setBlacklist`, `addWhitelist`, `transferTax`, or any modifier that restricts `_transfer`. Check if the owner has special privileges that could block sells.
-
4
Check Ownership Renunciation
If the contract has renounced ownership, the owner can't change the code. This is a positive sign, but it doesn't guarantee safety — the trap may be hardcoded.
-
5
Research the Project
Look for a whitepaper, team information, and real community activity. Honeypots often have no substance beyond a flashy website and fake social media.
-
6
Check for Liquidity Lock
Use tools like DEXtools or TronScan to check if the liquidity is locked. While locked liquidity doesn't prevent a honeypot, unlocked liquidity is an additional risk.
Use a burner wallet with a small amount of funds for testing new tokens. This way, even if you get trapped, you only lose a small amount. Never test with your main wallet.
⚖️ Honeypot vs. Rug Pull: What's the Difference?
These two scams are often confused, but they work differently:
| Feature | Honeypot Scam | Rug Pull |
|---|---|---|
| What Happens | You can buy but cannot sell | Liquidity is drained or developers abandon the project |
| Victim's Tokens | Locked in wallet, cannot be sold | Become worthless (price crashes to zero) |
| Scammer's Profit | Sells tokens at inflated price before trapping | Pulls liquidity or dumps tokens |
| Detection | Detected by testing sell | Detected by monitoring liquidity or developer activity |
| Recovery | Virtually impossible | Virtually impossible |
Both are common in the crypto space, and scammers sometimes combine them: a honeypot trap may be followed by a rug pull to take the remaining liquidity.
🚨 What to Do If You've Been Trapped in a Honeypot
If you discover that a token you bought is a honeypot:
- Stop buying more. Do not throw good money after bad.
- Revoke any approvals you may have given to the token contract (if you approved it for spending, though this is less common for honeypots).
- Report the scam to the platform where you discovered it (e.g., SunSwap, DEX screener, social media) to warn others.
- File a report with your local law enforcement and cybercrime units. Recovery is unlikely, but reporting helps build cases against scammers.
- Monitor the token's activity. Sometimes, scammers may re-enable selling temporarily to create a "second chance" trap — don't fall for it.
- Learn from the experience. Use it as a lesson to always test sells and research before investing.
After being trapped, scammers may contact you offering to "help" recover your funds for a fee. These are recovery scams — ignore and report them.