MrDeFi
Security & Scams2026-06-144 min read

What Is a Fake ICO/IDO Scam? Warning Signs to Know

How fake ICO and IDO token launch scams work, including whitepaper plagiarism and fake teams, and how to vet a new launch.

A fake ICO or IDO scam is a fraudulent token launch — an Initial Coin Offering or Initial DEX Offering — where organizers raise funds from investors by selling a new token under false pretenses, such as a copied whitepaper, a fabricated team, or nonexistent technology, with no intention of building the promised product or with plans to abandon the project shortly after raising funds.

Token launches remain one of the more common ways scammers extract funds directly from investors, because a launch inherently involves people sending real money (or established crypto) for a brand-new, unproven asset, based almost entirely on promises about the future rather than any demonstrated track record.

Common fake ICO/IDO tactics

Plagiarized or fabricated whitepapers. Many fraudulent launches copy substantial portions of a legitimate, unrelated project's whitepaper, sometimes barely modifying the technical description, banking on the fact that most investors won't cross-check the document against existing published work.

Fake or fictional team members. Scam launches frequently list team members with fabricated names, stolen photos of real people who have no actual involvement, or LinkedIn-style profiles that can't be independently verified through any other channel.

Unrealistic roadmaps and vague technical claims. Overly ambitious roadmaps promising to solve multiple unrelated major technical problems simultaneously, described in vague or buzzword-heavy language without specific, checkable technical detail, are a recurring pattern in fraudulent launches.

Artificial urgency and tiered bonus pricing. Aggressive countdown timers and escalating "bonus" structures that reward buying immediately, before supposed price increases in later rounds, are used to short-circuit careful due diligence.

No lock-up or vesting on team/organizer tokens. Legitimate projects typically commit publicly to a vesting schedule that prevents the team from selling their allocation immediately after launch. A launch with no disclosed vesting — or vesting that isn't actually enforced on-chain — allows organizers to sell into the initial demand immediately, a pattern closely related to the mechanics described in our pump and dump guide.

"Rug pull" liquidity removal. In decentralized launches, organizers sometimes retain the ability to withdraw the liquidity pool backing the token shortly after launch, instantly making the token worthless for remaining holders — a specific and common form of exit scam within this category.

ICOs vs. IDOs: where the risk differs slightly

The original ICO model, common in 2017 and 2018, typically involved sending funds directly to a project-controlled wallet or smart contract in exchange for a promise of future tokens, often before any product existed at all. IDOs, which launch tokens directly through a decentralized exchange's liquidity pool, shifted much of this activity on-chain and made certain checks — like whether liquidity is locked and whether the contract has been verified — more directly observable. Both formats remain vulnerable to the same underlying fraud patterns, but IDOs generally offer more real-time, on-chain visibility into red flags like an unlocked liquidity pool or a contract with hidden owner privileges, which a careful investor can check directly rather than relying entirely on the organizers' own claims.

Verification steps before participating in any launch

  • Search specific, distinctive phrases from the whitepaper to check for plagiarism against existing published projects
  • Attempt to independently verify team members through channels outside the project's own website or documents — for example, an established, longstanding professional profile with a verifiable history
  • Check whether the project has undergone a smart contract audit from a reputable firm, and read the actual findings rather than trusting a badge or logo alone
  • Look for a clearly disclosed, on-chain-enforced vesting schedule for team and organizer token allocations
  • Assess whether the roadmap's technical claims are specific and plausible, or vague and implausibly broad

Legitimate launch vs. fake ICO/IDO signals

Signal Legitimate launch Fake ICO/IDO
Whitepaper Original, technically specific Plagiarized or vague
Team verification Independently checkable, established history Unverifiable or stock/stolen photos
Token vesting Disclosed and enforced on-chain Absent, vague, or unenforced
Audit Real audit with published findings No audit, or unverifiable "audit" claim
Urgency Reasonable timeline Aggressive countdowns and bonus-tier pressure

What to do if you suspect a launch is fraudulent

Avoid contributing funds, and if you've already participated, monitor the project's liquidity pool and team wallet activity where possible using a block explorer, since early warning of unusual withdrawal activity may allow you to exit a remaining position before a full collapse. Report the launch to the platform it was distributed through, and see our guide on reporting a crypto scam for further steps. Our companion piece on vetting a new crypto project offers a broader due-diligence checklist applicable beyond just launch-stage evaluation.

Bottom line

Fake ICO and IDO scams exploit the fact that a new token launch is inherently a bet on unverified promises rather than a demonstrated track record. Plagiarized whitepapers, unverifiable teams, absent vesting schedules, and manufactured urgency are the clearest tells, and each can be checked independently before committing any funds. Treat any launch that resists this kind of verification, or actively discourages it through time pressure, as a serious warning sign rather than a reason to move faster.

Related articles

This article is for educational purposes only and is not financial advice. DeFi involves significant risk, including total loss of funds. Always do your own research.