Crypto scams often rely on confusion, lookalike tokens, and malicious approvals. This guide covers the tools and steps you can use to verify what you're seeing before you connect your wallet, approve a request, or swap a token.

Research a token before you interact #

Before buying or swapping any token, two things are worth doing: verifying the contract address and checking the token's signals using an analysis tool.

Start with the contract address #

The contract address is the most reliable way to confirm you're looking at the right token. Use it to:

• Confirm you're looking at the correct token
• Avoid copycat tokens that reuse familiar names or logos

For steps, see Check a token's contract address before you interact with it.

Use token analysis tools #

Token analysis tools can help you identify risk patterns before you interact with a token. No single tool can guarantee safety so treat results as one input in your decision.

For a full guide on what signals to look for and how to interpret them, see Understanding token security signals.

Recommended tools by network #

These tools can help you research a token before you buy. You don't need to use all of them but checking more than one source gives you a fuller picture.

Solana:

• RugCheck provides an overall risk score and flags common red flags like unlocked liquidity, token permissions, and holder concentration. A good first stop when researching an unfamiliar Solana token.
• Solscan shows onchain activity including market overview, holder data, and full transaction history. Useful for verifying a token's contract address and reviewing past activity.
• Solsniffer provides a safety score for Solana tokens based on common risk factors. Quick and easy to use for a fast first check.

Ethereum and EVM networks:

• Token Sniffer analyzes tokens for common scam patterns including honeypot behavior and suspicious contract settings.
• Honeypot.is specifically checks whether a token is a honeypot, meaning you can buy but cannot sell.
• Etherscan shows full onchain activity including holder data, transaction history, and token contract details.

Investigate suspicious activity #

If something already looks wrong, use a blockchain explorer to review your onchain activity.

Use a blockchain explorer #

Blockchain explorers show public onchain activity for each network Phantom supports. They are your way to locate transaction IDs, addresses, and see any onchain activity. For example, you can use them for the following:

• Confirm whether a transfer completed.
• Review the exact tokens moved in a transaction.

For steps, see View your wallet history on a blockchain explorer.

What to look for when investigating a scam #

When reviewing activity in an explorer, focus on the following:

• Transfers you don't recognize, especially those that occurred after connecting to a new app.
• Lookalike token transfers. Scammers may send tokens with a similar name or logo to create confusion.

Revoke approvals and disconnect suspicious apps #

Many scams rely on approvals. If you approve a malicious request, an app or contract can access your tokens even after you disconnect.

Disconnect apps in Phantom #

1. Select your profile avatar in the upper left.
2. Go to Settings > Connected Apps.
3. Disconnect any app you don't recognize.

Revoke approvals with external tools #

Revoke.cash (Ethereum and EVM networks) #

1. Open Revoke.cash.
2. Connect your Phantom wallet.
3. Select the approvals you want to revoke and confirm.

Famous Fox's Revoker (Solana) #

1. Open Famous Fox's Revoker.
2. Connect your Phantom wallet.
3. Revoke any suspicious approvals.

Revoking approvals prevents future token movement by apps or contracts you no longer trust.

Safer browsing tips #

• Bookmark trusted apps and tools instead of relying on search results or ads.
• Avoid opening links that you see in token names or descriptions.
• Use the Explore tab in Phantom to browse apps you trust.
• Verify a token's contract address before you swap, especially for trending tokens.