What Is a Honeypot Token? How to Spot a Coin You Can Buy but Can't Sell

"Honeypot" is an old idea — something sweet and inviting that's easy to crawl into and near impossible to crawl back out of. Crypto borrowed the word for a class of scam, and it fits all too well: your money can go in, it just can't come out. You buy some coin on-chain like normal, the balance shows up just fine, the figure on screen may even be climbing — but the moment you try to sell, to lock in your gains, the sell transaction simply won't go through. That's a honeypot. It doesn't swipe your money on the spot the way phishing does; it boils the frog slowly, letting you think you've stumbled onto an opportunity, buying more and more, until the whole sum is locked inside with no way out. On the trail of farming and chasing new coins, this trap is everywhere. This quest lays out how it works, what it looks like, and how to check for it, so next time you can recognize it before you spend a cent.

Where the name comes from: a pot that's all entrance, no exit

First, get the concept precise. A honeypot is a class of scam token whose contract itself has been rigged so that you can buy in but can't sell out normally. Its core trait comes down to a single line: buyable, not sellable (or selling gets an extreme cut taken out of it, which in practice means unsellable).

It's a completely different animal from a plain "loss," and beginners must keep the two apart. With a normal price drop, you can sell any time — the price is just low, you take the difference as a loss, and the money is still yours and you can get part of it back. A honeypot is one where you simply can't sell — initiating a sale fails outright, and the asset is stuck inside the contract. One is a loss, the other is a lockup. So the core of judging whether a coin is a honeypot is never whether it's gone up — it's whether you can normally sell it back into a mainstream coin.

How it works: what exactly was rigged in the contract

To understand a honeypot, first accept one fact: behind every token on-chain is a piece of smart-contract code, and how buying, selling, and transferring execute is entirely up to that code. In a legitimate token's contract, buying and selling are symmetric — anyone can do either; a honeypot quietly stuffs logic into that code that works against you. A few common techniques:

• Buy allowed, sell blocked. The contract hard-codes a rule: buying (swapping the pool for tokens) is fine, but the sell function (swapping tokens back into a mainstream coin) is intercepted and errors out for ordinary addresses. You hit sell, the transaction fails, and the coins can't move.
• An extreme tax on selling. Rather than forbidding the sale outright, it slaps a terrifying "tax rate" on selling — say, most of it is taken on the way out, leaving you with almost nothing. It "can" be sold on the surface, which in practice means it can't.
• Only specific addresses can sell. The contract sets a whitelist where only the author (or a few linked addresses) can sell normally and pull the pool's money out at will, while everyone else is locked in. This is the textbook "harvest" structure: everyone's money goes in, only the author can take it out.
• A changeable switch left in. The sneakier kind buries parameters the author can adjust whenever they like: early on it lets you buy and sell and looks perfectly normal, and once enough funds have pooled up, they immediately turn selling off or max out the tax rate, switching faces in an instant to harvest.

Put plainly, a honeypot isn't selling you a coin — it's selling you a trap carefully designed to be all entrance and no exit. It often even comes dressed in a "legitimate" façade: a respectable-looking site, a lively community, a pretty price chart, all to get your guard down and your money in. Once you grasp that "code is the rule," you understand why taking one look at the contract before you buy matters more than any amount of marketing. If you haven't fully built up the underlying concepts of token standards and contracts yet, you can head back to what an airdrop actually is first to lay the groundwork.

A few signals that flag one at a glance

The truly solid verdict comes from tools (next section), but plenty of honeypots are wearing a pile of obvious danger signals before you ever spend a cent. Build the habit of scanning these few and you'll head off the majority of them:

• People reporting "selling always fails." This is the most direct red flag. If people in the community or comments are complaining "can't sell," "errors out the moment I sell," while the admins either delete the posts or dodge the question, it's all but confirmed.
• Very few holders, highly concentrated. Look at this coin's holder list on a block explorer; if there are only a handful of addresses total and the vast majority of the supply sits in one or two of them, it's a one-man show that can dump on you at any moment.
• Closed-source contract. A legitimate project's contract code is usually "verified and open-sourced" on the block explorer, where anyone can read the logic. A closed-source contract hiding from view is itself a huge warning — it's afraid you'll see what's written inside.
• A community that only chants "up" and won't tolerate questions. The group is wall-to-wall "about to moon," "miss it and you'll kick yourself," and anyone who asks "can it be sold?" or "is it safe?" gets kicked or shouted down as FUD. A healthy project can withstand questions; a group that only allows cheerleading almost always has something rotten in it.
• A price that only goes up, never pulls back, with an eerie shape. A nearly straight, never-looking-back line up, paired with a "everyone who bought made money" mood, is often because nobody can actually sell to cash out — so of course the price only rises. A chart too pretty to be real is suspicious in itself.
• It was shoved at you by someone else. A stranger's DM, an out-of-nowhere group, a link stuffed into a token that materialized in your wallet — anything that comes to you on its own urging you to "buy quick, it's about to take off" should be treated as a scam by default.

A first-pass check with tools: detector + block explorer

Gut feeling isn't enough; the key is to actually check. There are two kinds of tools a beginner can pick up, neither with much of a barrier:

First: honeypot detectors. There are dedicated detection sites where you paste in the token's contract address, and they simulate a "buy then sell" and tell you whether the coin can be sold, and how much tax each of buying and selling takes. This kind of tool can quickly weed out a batch of obvious honeypots. But let me put the blunt truth up front:

Second: block explorers (Etherscan / BscScan). This one is more versatile, more worth learning, and purely looks without touching your money — completely safe. Paste the contract address into Etherscan (Ethereum) or BscScan (the BNB chain) and you can check a few key things:

• The Holders tab: how many holders there are in total, and whether the supply is highly concentrated in a few addresses. Very few and concentrated = dangerous.
• The Transactions record: whether normal "sells" are happening. If it's all buys with virtually no successful sells, the smell is very off.
• The Contract tab: whether the contract is "verified and open-sourced" (shown with a green check). If it's not open-sourced, raise your guard immediately. And if it is open-sourced but you can't read the code, that's fine — just "did they dare open-source it" is already a signal.

If you want to shore up the mechanics of contracts and tokens a bit more, the materials at Binance Academy and ethereum.org are worth reading; think through "how a smart contract decides whether a coin can be sold" properly, and your immunity to honeypots gets a lot stronger.

Hands-on: the whole process of checking an unknown coin

You don't have to memorize every button of every tool — just remember this order: detector for a quick first scan (fast) → block explorer for holders, sell records, and whether it's open-sourced (detailed) → any one thing looking off, walk away. New coins and trending meme coins aren't in the range this site recommends touching in the first place; even if curiosity gets you wanting to learn about one, be sure to put "checking it clearly" ahead of "spending," not the other way around.

If you bought one by accident, what you can do

If you came in searching "bought a coin can't sell," you may already be in it. Let me say one honest thing first, so you don't carry unrealistic hopes: if you genuinely hit a honeypot, this money most likely isn't coming back. Its whole design is to keep you from selling, on-chain transactions are irreversible, and there's no "support desk" that can unlock it for you. So this section isn't about teaching you how to "get it back" — it's about how to stop the loss here and not let it grow.

• Accept the loss, don't add more. This is the most important one. Many people, once they can't sell, instead think "let me buy a bit more to average down," "wait for it to climb back" — which is exactly what the scammer wants; the more you buy, the more money you feed in. Accept it, treat this small sum as tuition, and stop there.
• Watch for the "unlock it for you" second scam. Once word gets out that you can't sell, people will soon pop up saying "pay a small fee / come to me and I can get your coins out," "I have an inside channel." This is season two of the scam, specifically preying on people already burned and desperate to recover. Don't trust any of it, or you'll lose a second time.
• Keep a record on a block explorer. Note the contract address and your buy transaction on BscScan / Etherscan — first to confirm the boundary of the loss, second to blacklist this contract so you never touch it again, and third because if a larger amount is involved and you need to report it, the on-chain record is evidence.
• Check whether your wallet is still safe. In the process of buying this coin, did you sign any approval along the way? If so, swing by revoke.cash to see which contracts this wallet has granted approvals to and revoke the suspicious ones — don't let one trap drag out other risks. For how to manage approvals, wallet security covers it in detail.

At bottom, a honeypot is something unsolvable after the fact but preventable before it. Like phishing, what truly protects you isn't the rescue after things go wrong — it's the habit of "check before you spend, and don't touch what you can't verify." This site keeps stressing a single wallet, small positions, genuine participation, and part of the reason is exactly this: even if you misjudge and step into a trap one day, the loss is held to a small, bearable sum and doesn't cut to the bone.

Frequently asked questions

What's the difference between a honeypot and a coin that simply went down?

With a normal price drop, you can sell — the sale just goes through at a lower price, and what you lose is the difference. A honeypot is one you can't sell at all: the sell transaction fails outright, or selling gets taxed at an extreme rate, which amounts to being stuck inside the contract with no way out. One is losing money, the other is having your money locked. The key to judging isn't whether the price went up or down — it's whether you can normally sell it back into a mainstream coin.

Why can some honeypots be sold in small amounts early on, then suddenly can't be sold later?

Because many honeypot contracts leave a "switch" the author can flip at any time. Early on, to pump the price and pull more people in, they let you buy and sell so it all looks normal; once enough funds have pooled up, they casually turn selling off or crank the sell tax to extreme, locking everyone in to harvest them. So "sellable now" doesn't mean "sellable later," and the fact that a contract can be unilaterally changed by its author is itself a major risk signal.

A detector says "safe / not a honeypot." Does that mean I can buy with confidence?

No. A detector can only simulate one buy-and-sell and scan for known malicious patterns; what it checks is "this moment, this technique." But a contract with changeable parameters can wait until after the check to switch faces, and new techniques can slip past detection. So a green result only rules out part of the obvious traps — it doesn't mean the coin is safe, let alone worth buying. Treat it as one step in clearing mines, not an endorsement that something is worth investing in.

I bought a honeypot by accident. Can I get my money back?

Most likely not. A honeypot's entire design is to keep you from selling, on-chain transactions are irreversible, and there's no support desk that can unlock it for you. The most rational move is to cut the loss and accept it: accept that this small sum isn't coming back, never add more buying to try to average down your cost (that only feeds more money in), and don't trust anyone who offers to "unlock it for a fee" — that's a second scam. Treat it as tuition paid, note the contract address so you never touch it again, and move on.

Once you can recognize a honeypot, you've shed a whole class of trap that can wipe you out. It's part of the larger "Safety" quest, sharing the same defensive logic as phishing and fake airdrops — at the core, it's all about giving anything of dubious origin one more pass of scrutiny, and any "fast, guaranteed gains, limited time" pitch one more degree of suspicion. To round out the whole defensive skill set, read on through spotting fake airdrops and phishing, work through the full bestiary, and you'll step in a lot steadier.