Memecoin safety in Phantom: warnings, rug pulls and fake tokens
Phantom hides many spam tokens and shows warnings on suspicious ones, but it cannot tell you whether a memecoin is a good buy or will be rugged. Check the token's mint address, liquidity, holder spread and mint and freeze authorities before you swap, keep amounts small, and never interact with tokens that arrive unasked.
Phantom makes buying a new Solana token as easy as a normal swap, and memecoins are a large part of what people trade in it. That ease cuts both ways: most new tokens lose most of their value, and a share of them are built to take your money. This page explains what Phantom's warnings do and do not cover, the common memecoin scams, and the habits that limit damage. Nothing here is investment advice. Last verified: 25 October 2026.
What Phantom's token warnings do
Phantom detects Solana tokens built on the standard SPL Token program and Token-2022 automatically, but it does not promise to show every token. Its trust and safety checks can hide a token or show it with a warning indicator. The signals come from internal systems and third-party providers, including Blockaid. Phantom does not publish its criteria, so that scammers cannot design around them (Phantom developer documentation, 2026).
- Auto-hidden tokens. Since April 2024 Phantom automatically hides tokens it flags as suspicious and moves them into its token list settings with a warning icon. You can hide any token yourself, or unhide one that was flagged by mistake (Phantom announcement, April 2024, as reported by Altcoin Buzz).
- "Unknown" tokens. If a token lacks metadata, Phantom shows it as "Unknown". That is not proof of a scam, but treat it with suspicion.
- Transaction previews. Before you sign, Phantom simulates the transaction and warns about known malicious sites, tokens and programs.
A missing warning does not mean a token is safe. Warnings target known spam and malicious contracts, not ordinary tokens that crash or are abandoned by their creators.
The main memecoin risks
| Risk | How it works | What to check |
|---|---|---|
| Rug pull | Creators or early insiders pull liquidity or sell a large supply at once; the price collapses | Who holds the supply, whether liquidity is locked or burned, how old the token is |
| Fake token | A copy uses the same name, ticker and logo as a popular token | The mint address, from the project's own channels or a trusted explorer |
| Honeypot | You can buy but not sell, for example because the creator can freeze token accounts | Freeze authority (should be revoked), unusual transfer fees |
| Supply inflation | The creator keeps the right to mint more tokens and dumps them | Mint authority (should be revoked) |
| Spam token | Unsolicited tokens advertise a site, a "claim" or a reward | Do not interact; hide it |
Mint and freeze authority
Every Solana token has a mint account that may keep a mint authority (the power to create more tokens) and a freeze authority (the power to freeze holders' token accounts). On most legitimate memecoins both are revoked. If the freeze authority is still active, the creator could freeze your tokens so you cannot sell. Solana block explorers show both fields on the token's page.
Token-2022 extensions
The newer Token-2022 standard lets creators add features such as transfer fees or custom transfer logic. These have legitimate uses, but a high transfer fee or unusual logic can turn a token into a trap. Read the token's details on an explorer before buying anything that uses it.
Concentrated supply and bundled launches
If a few wallets hold most of the supply, often bought in the first seconds after launch, those holders can crash the price at will. Explorers and token analytics sites show the top holders.
Spotting fake tokens
Names, tickers and logos are free to copy. The only reliable identifier is the token's mint address. Get it from the project's official account or website (typed yourself, not from a reply or ad), then compare it with what Phantom shows on the token page before you swap. Scammers often launch fake versions of tokens that are trending or about to be listed somewhere, and promote them in replies and group chats.
Phantom's token pages include live chat, added on 23 December 2025. Chat makes it easy for scammers to post links and look-alike addresses. In February 2026 an investor lost about $264,000 in wrapped bitcoin in an address-poisoning attack that investigators tied to Phantom's chat (Cointelegraph, 10 February 2026). Never copy an address or link from a chat.
Spam tokens you did not buy
Unknown tokens that appear in your wallet are usually bait. Their names often contain a website, a "claim" message or a fake reward. Do not visit the site, do not try to sell the token on a site it names, and do not sign anything to "unlock" it. Hide it and move on. Some spam tokens are also sent from addresses that look like ones you use, to plant a fake entry in your history: always copy addresses from the source, not from your activity list. More in fake Phantom scams.
Costs that eat into memecoin trades
Phantom charges 0.85% on most in-app swaps, shown before you confirm (Phantom help centre, 2026). On top come network and priority fees and price impact. Thinly traded memecoins often need a high slippage setting, which means you may get a much worse price than quoted. Buying and selling a small amount several times can cost more in fees than the price moves. Our swap fee calculator shows the worst-case cost, and Phantom fees explained covers the full picture.
Safe habits
- Only use money you can afford to lose completely.
- Verify the mint address before every first buy.
- Check mint and freeze authority, top holders, liquidity and token age on an explorer.
- Start with a small test swap and make sure you can sell it again.
- Keep trading funds in a separate account from long-term savings. Phantom lets you hold several accounts under one recovery phrase; for real separation, use a separate wallet or a Ledger for savings.
- Ignore DMs, replies and chat messages with "early" tokens or contract addresses.
- Read every warning Phantom shows. If it says a site or transaction may be malicious, stop.
- Never type your recovery phrase into a trading bot, sniper tool or "wallet checker". Phantom never asks for it.
If a swap fails, see Phantom transaction failed. If you signed something on a site you no longer trust, act fast with our drained-wallet steps.
Frequently asked questions
Does Phantom check whether a memecoin is safe?
Partly. It hides or flags tokens its systems and partners such as Blockaid consider spam or malicious, and warns about malicious transactions. It does not judge whether a token will hold its value or whether its creators will sell.
What does a warning icon on a token in Phantom mean?
Phantom's checks flagged it as suspicious or spam. Do not interact with it unless you are sure it is genuine; if it is, you can unhide it in the token list settings.
How do I know I am buying the real token?
Compare the mint address shown in Phantom with the one published on the project's official channels, which you reached yourself. Names, tickers and logos can all be copied.
What is a honeypot token on Solana?
A token you can buy but not sell. A common cause on Solana is an active freeze authority that lets the creator freeze holders' token accounts, or a transfer fee or rule that blocks or taxes sales.
Should I sell spam tokens that appeared in my wallet?
No. Spam tokens are designed to lure you to a site that drains your wallet. Hide them and do not interact with them.