In crypto, a honeypot is a scam designed to lure users into depositing funds or buying tokens that they cannot sell or withdraw.
The two main types are token honeypots (malicious smart contracts that allow buying but block selling) and wallet honeypots (fake seed phrases or private keys shared by scammers).
Free simulation tools can check whether a token allows selling before you buy, reducing exposure to this type of scam.
In computer security, a honeypot is a decoy system set up to detect or study unauthorized access attempts. In the context of cryptocurrency, the term has taken on a more specific meaning: a scam mechanism designed to attract users with the promise of easy gains, while trapping their funds so they cannot be recovered. The two meanings are related by analogy, both involve bait, but the crypto version refers specifically to a fraudulent scheme rather than a defensive security tool.
Crypto honeypots generally fall into two categories: token honeypots and wallet honeypots. Both exploit the appearance of a legitimate opportunity to deceive users into committing funds.
From the outside, the token may look like any other: it has a ticker, it shows trading volume on DEX trackers, and the price may be rising. Users who buy in discover only later, when they attempt to sell, that the transaction fails or that nearly all the value is taken as a fee. The scammer then drains the liquidity pool.
Before buying a new token, simulation tools such as Honeypot.is or the GoPlus Security API can run a test buy and sell against the contract to check whether a sell transaction would succeed. A token that passes a simulated buy but fails on a simulated sell is a strong indicator of a honeypot. Other warning signs include anonymous development teams, unlocked liquidity, ownership not renounced, and unusually high sell taxes.
In both cases, the underlying principle is the same: if an opportunity requires you to commit funds before you can verify that you can recover them, verify first. Irreversible transactions cannot be recalled once confirmed on-chain.
In crypto, a honeypot is a scam that tricks users into sending funds or buying tokens they cannot later sell or withdraw. The term originates from classic cybersecurity, where a honeypot is a decoy system used to detect attackers. In crypto, it refers to a trap designed around a fraudulent smart contract or a manipulated wallet.
Token honeypots allow buying but block selling through hidden contract code. Wallet honeypots involve seed phrases shared by scammers for wallets that appear funded but cannot be accessed. You can check tokens using simulation tools like Honeypot.is before buying. For wallets, never import seed phrases from unknown sources.
They are related but different. A rug pull typically involves developers removing liquidity from a token pool after attracting enough buyers, collapsing the price suddenly. A honeypot prevents selling at the contract level, so the price may continue to appear stable while individual buyers find they cannot exit. Some scams combine both mechanics.
In most cases, funds lost to a honeypot scam cannot be recovered. Blockchain transactions are irreversible by design. Some law enforcement agencies and blockchain analytics firms have successfully traced and frozen assets linked to large-scale scam operations, but this is the exception rather than the rule. Prevention through due diligence before committing funds is more effective than recovery attempts after the fact.