This is Sam, a crypto investor. He just put his savings into a new, hot, defy token. The price of the token is already skyrocketing. 5x, 10x, 100x. Sam thinks of himself as an investment genius. He goes to bed, dreaming of the Lambo he will buy the following day. When he wakes up in the morning, Sam checks the balance in his account and sees his almost zero. What? How can it be possible? Sam is devastated. It looks like he was a victim of a classic ragpull. From January to July 2021, $113 million were stolen via ragpulls, the most common type of scam in the booming decentralized final space. While overall crypto-related crime has been steadily decreasing, fraudulent activity in defy has been on the rise. The bad guys have moved over to the defy space. We don't have anti-money-lander controls, we don't have special activity reporting, we don't have monitoring reporting. It's a wonderful world of opportunity. That's why it's just criminals go where it's easier to go. Unfortunately, returning stolen funds after a ragpull is almost impossible. That is why prevention is crucial. In this video, we'll explain how to spot a ragpull and avoid losing money while investing in defy. But before we get into it, don't forget to like the video and subscribe to our channel. So how does a ragpull work? A ragpull is a malicious scheme in which crypto developers create a worthless token and list it on a decentralized exchange. Here, the new token is traded within a liquidity pool, against an established token, such as ETH. To attract investors into the liquidity pool, the scammers promote the project on social media, promising high returns. As more and more investors put their ETH in the liquidity pool, the price of the new token increases. At a certain point, the scammers pull the rag. They drain the pool of all the ETH and disappear with the funds. That immediately crashes the price of the new token, leaving all investors holding the worthless bags. Now that you know what a ragpull is, how can you spot one? To answer this question, we reached out to two defy experts. For safety reasons, they both ask to remain anonymous. Here are six tips you can use before putting your money into a defy token. Tip number one, check the team's background and social media. Find out information about the tokens development team. If the developers are anonymous, it's already a red flag. If the team's information is available, you should check how solid the reputation and background are. It's really about measuring the trustworthiness of the team. Are they anonymous? If not, who are they? Do they have a background in the industry? We often see websites where they've just taken some random LinkedIn photos and created a fake team. Many of those have been exposed. Another important thing to check is the project, social media and telegram chats. This helps to understand how genuine the enthusiasm around the token is and how authentic the community involved is. I feel like how people are acting in there. Does it look like they're talking to each other or it's a lot of people talking? Are people allowed to bring up topics that are not only promoting the token? That's a really important part. For example, you might come in there and say, hey guys, what happens when in this asking kind of hard question? Any kind of hard question? If you get banned, probably a scam. If you get muted or deleted, probably a scam. Tip number two was the project audited. A legitimate project should undergo an auditing process by a reliable third party service. If it wasn't, then you should be cautious. It means the code may contain bugs that could be exploited to steal user's funds. Unfortunately, audits are usually expensive and few projects can afford them. And even if the project was audited, make sure you read the actual audit. People say, oh, they're audited and they go in. But they don't read the audit. And the audit says, these people can steal your money. Don't put your money here. These people can steal your money. But people never read it because they say it's audited. Tip number three, test your ability to sell. Sometimes fraudulent projects contain hidden code that prevents people from withdrawing their funds from the liquidity pool. That is why you shouldn't invest a large amount of money into a project or coin until you know for sure if and when you will be able to sell. Before you put money on these things, one thing I always do every time, even if we looked at the code, let's say I'm going to put $100 in there, I put $1 in and I pull $1 out. Does it work? Okay, it works? 20 in, 20 out. Did it work? Okay, then I'll go in. Tip number four, check the tokens distribution. Check the token concentration. If a large amount of the tokens are concentrated in the hands of a few people, that is a red flag. It means that a bunch of whales could potentially dump their bags and crush the tokens price. You can easily check the tokens concentration by using a block explorer such as either scan or BSC scan. Tip number five, is the liquidity locked? Another important thing to look for is whether the liquidity has a time lock on it. A time lock is security mechanism that prevents developers from removing the liquidity from the pool and make a way with your funds. As long as most of the liquidity is locked, you know, 95-200% is locked, then there cannot be a bug or... Now you're probably wondering, things are getting too technical, how do I even check these things? Don't worry. These are a few online tools that can help you out. Tip number six, check independent auditing websites. Platforms such as tokens nifer, rockdog and BScheck.eu are run by experts who audit defy tokens. They break down most of the metrics we mentioned here so far and rate the tokens according to risk levels. Also, there are telegram communities where you can ask about a specific project. There's lots of people in there because like, hey guys, I'm thinking about going into this thing. I'm not sure about it. Can someone take a look? And the code yours and so forth and there will go look for you. Ultimately, identifying a project as a rock pool is not straightforward. In the unruly defy space, the border between a fraudulent project and the latest meme coin can be very subtle. Sometimes, it all comes down to your own goals and appetite for risk. If you're looking for solid, legit projects with real use cases, then the indications we have given you are going to be valuable. But if you're looking for quick gains and decide to ignore this advice, go in at your own risk. No matter how safe it is, people are still going to go into unsafe things because the unsafe things are going to be the ones that are more likely to return the biggest returns quickly. If you go to social street beds, everything you see is basically a scam. Like 99% of it. You can pretty much bet it's going to be a scam. But if you get any get out at the fast at the right time, you're probably going to make some money too. The goal of defy is democratizing financial services through a trustless and permissionless system. With almost no barriers, preventing crooks from entering the space, defy is flooded with the get-wish-quick schemes and fraudulent projects. That is why, at CoinTelegraph, we want to provide you with the information you need to navigate this rough waters. Hopefully, with our tips, you'll feel a little safer. Thanks for watching this report. I'm your host Giovanni and see you next time.