How to identify a scam token in MetaMask? (Security Tips)

Token Contract Verification

1. Always check if the token’s smart contract is verified on Etherscan or BscScan before interacting with it. Unverified contracts hide malicious logic behind opaque bytecode.

2. Click the “Contract” tab on the token’s page and confirm the “Verified” label appears next to the contract address. If it says “Not Verified” or shows only bytecode, treat it as high-risk.

3. Compare the contract address shown in MetaMask with the one listed on the official project website and verified explorers. Scammers frequently deploy fake tokens using similar-looking addresses with minor character swaps.

4. Use the “Read Contract” section to inspect functions like totalSupply, decimals, and name. Abnormal values—such as zero total supply or unusually high decimals—indicate manipulation.

Token Name and Symbol Analysis

1. Search for exact matches of the token name and symbol across major platforms like CoinGecko, CoinMarketCap, and official social media. Legitimate tokens usually have consistent branding and verifiable listings.

2. Watch for subtle misspellings: “ShibaInu” vs. “Shibainu”, “PepeCoin” vs. “Pep3Coin”. These mimicry attempts target users who paste addresses hastily.

3. Hover over the token name inside MetaMask’s asset list and verify the full contract address appears in the tooltip. Fake tokens often display truncated or mismatched addresses.

4. Tokens with generic names like “SafeToken”, “StableUSD”, or “NewEthereum” without clear documentation or team background are red flags.

Transaction Behavior Monitoring

1. Before approving any token transfer, open the transaction details in MetaMask and examine the recipient address. Scam tokens often route approvals to routers, migrators, or unknown wallets with no public history.

2. Reject transactions that request unlimited allowance. Legitimate dApps rarely need infinite access; use tools like Revoke.cash to limit or revoke excessive permissions.

3. Observe gas estimates. Unusually high or fluctuating gas fees may indicate hidden loops or reentrancy traps embedded in untrusted contracts.

4. Never confirm a transaction if MetaMask displays a warning banner such as “This transaction may result in loss of funds” or “Unknown contract interaction”.

Liquidity and Pair Integrity

1. Navigate to the token’s pair on decentralized exchanges like Uniswap or PancakeSwap and inspect the liquidity pool. Low liquidity (

2. Check if the liquidity is locked via services like Team Finance or Unicrypt. Absence of lock certificates means developers can withdraw all funds instantly.

3. Review the top holders list on blockchain explorers. If a single address holds over 70% of supply—or if multiple addresses share identical creation timestamps—the token is likely centralized and manipulable.

4. Look for unusual swap patterns: repeated small buys followed by large sells within seconds often indicate bot-driven artificial volume.

Frequently Asked Questions

Q: Can I trust a token just because it appears in MetaMask’s default token list?A: No. MetaMask’s token list includes community-submitted entries. Anyone can submit a token; inclusion does not imply security review or legitimacy.

Q: What does it mean if a token has “0x0000…0000” as its contract address?A: That is not a real contract—it is a placeholder used by MetaMask when the token was added manually without a valid address. Such entries are unsafe and should be removed immediately.

Q: Is it safe to add a token using only its symbol and name without the contract address?A: Absolutely not. MetaMask will auto-resolve symbols to arbitrary contracts. This behavior has led to numerous losses when users unknowingly imported scam tokens sharing popular ticker names.

Q: Why do some scam tokens show high trading volume on DEX aggregators?A: Volume can be faked through wash trading, flash loans, or router-based circular swaps. Real volume requires sustained organic trades across multiple independent pools—not just one mirrored pair.