You're on pump.fun. A token is moving — price up 200% in 40 minutes, volume spiking, Telegram groups going wild. You want in. But you've been burned before.
The question you need to answer in the next 60 seconds: is this actually safe to buy, or is it another rug?
This guide gives you a repeatable process for checking any pump.fun token before you commit capital — using on-chain data, not vibes.
⚡ Fastest answer: Copy the pump.fun URL or contract address → paste into @PumporaBot on Telegram → get a risk score 0–100 in under 60 seconds. Free, no signup. The rest of this article explains what that score means and why it matters.
Why You Can't Trust the Chart Alone
On pump.fun, the chart looks the same whether a token is legitimate or a honeypot. Both show price action, volume, and buys. Both can trend. The difference is invisible in chart data — it lives in on-chain signals that chart tools don't surface.
Here's what the chart cannot tell you:
- Whether the creator wallet has rugged 4 tokens before this one
- Whether the first 40 buys were all from the same person across 40 wallets
- Whether freeze authority is still active (meaning you can be blocked from selling)
- Whether 73% of the supply is held by 8 wallets that will sell simultaneously
- Whether the token description is a word-for-word copy of a known scam
All of these are detectable. None of them show up on the pump.fun page.
The 5-Minute Window Problem
Pump.fun rugs are fast. The average time from launch to liquidity drain is under 5 hours — and the most aggressive ones move in minutes. By the time the chart shows a cliff drop, the liquidity is already gone and your sell transactions are failing.
This is why the safety check has to happen before entry, not after you see the dump starting. A 60-second Pumpora scan gives you the information you need while there's still time to act on it.
What Pumpora Checks on Every pump.fun Token
Creator Wallet History
Every token the deployer has ever launched — cross-referenced against known rugs. A creator with prior rug history is the single strongest predictor of another rug.
Bundle Detection
Were those early buys 40 real traders, or 1 person with 40 wallets buying in the same block? Coordinated launches manufacture fake demand before the dump.
Benford's Law
A mathematical test on trade sizes that detects wash trading. Real markets follow a predictable statistical pattern — fabricated volume breaks it.
Survival Model
How does this token's liquidity trajectory compare to thousands of historical tokens in the first 48 hours? Statistical probability of surviving vs. rugging.
Description NLP
"100x guaranteed." "LP locked forever." "Dev doxxed." Pumpora detects predatory language patterns copied from confirmed scam playbooks.
Timing Analysis
Machines trade at mathematically perfect intervals. Human traders don't. Bot-dominated trading is a signal the token is being manipulated.
Holder Concentration
When the top 10 wallets hold 70%+ of supply, a single coordinated sell event can crater the price before you can exit.
Insider Pre-Buys
Wallets that bought in the exact same block as launch. Not retail. These are sniper bots or insiders — they exit at the peak, you exit last.
Logo Fingerprinting
Scammers reuse logos across projects. Pumpora compares every logo against a fingerprint database of known rug-pull assets.
Semantic Similarity
Does this token's description closely match the wording of known scam projects? Embedding similarity catches copy-paste scam templates.
Understanding Your Scan Result
Pumpora returns a score from 0 to 100. Higher = more risk detected. Here's what each verdict means for a pump.fun trade:
✅ CLEAN (0–24)
No significant risk signals. Creator is clean, no bundles, healthy distribution. Best-case scenario for a pump.fun token.
🟢 LOW RISK (25–49)
Minor signals present. Proceed with normal position sizing. Don't go all-in, but the risk profile is acceptable.
🟡 CAUTION (50–74)
Multiple risk signals. If you enter, use a small position and set a tight stop. These frequently rug within 48h.
🔴 HIGH RISK (75–100)
Strong evidence of malicious setup. Avoid. A HIGH RISK verdict with creator history + bundle = near-certain rug.
📌 What Pumpora doesn't guarantee: A CLEAN scan is not financial advice and doesn't mean the token will increase in value. It means no on-chain red flags were detected at the time of the scan. Market risk, low liquidity, and speculative risk still apply to every meme token.
How to Check a pump.fun Token — Step by Step
Find the token on pump.fun
Copy the token URL from your browser (e.g. pump.fun/coin/6p7...kQm) or copy the contract address from the token page.
Open @PumporaBot on Telegram
Search for @PumporaBot or tap t.me/PumporaBot. First-time users get 3 free scans automatically with /start.
Paste the link and wait 60 seconds
Send the pump.fun URL or contract address as a message. Pumpora resolves pump.fun links automatically — no need to extract the contract manually. Results in under 60 seconds.
Read the verdict and decide
Check the overall score and the layer breakdown. Focus on Creator (max 25) and Bundle (max 25) — these two together account for the majority of actual rugs on pump.fun.
✅ The rule that saves money: If the Creator layer shows 🔴 AND the Bundle layer shows 🔴, exit the tab. This combination predicts rug with very high accuracy regardless of how good the chart looks.
What pump.fun Itself Doesn't Check
pump.fun is a permissionless launchpad — anyone can deploy a token in seconds with zero vetting. The platform is intentionally open. That's what makes it exciting and also what makes it dangerous. Pump.fun shows:
- Token name and ticker
- Price, market cap, volume
- A description written by the deployer (unverified)
- Reply/comment section (often shill bots)
It does not check creator history, freeze authority, bundle detection, or any on-chain safety signal. Tokens explicitly named "SCAM" have appeared in the trending feed with no platform warning. This is not a criticism — it's just how the platform works. The safety check happens elsewhere.
The Two Signals That Matter Most on pump.fun
If you're in a hurry and need to make a fast call, focus on two things from the Pumpora result:
1. Creator wallet score (max 25)
If this is 15+, the deployer has a rug history. Full stop. No chart pattern justifies buying from a serial rugged. The most profitable-looking pump.fun charts are often specifically engineered to make the setup look legitimate before the exit.
2. Bundle detection score (max 25)
If this is 15+, coordinated wallets accumulated at launch. When they sell — and they will sell — there will be no liquidity left for you to exit into. The sell will hit all at once, faster than you can respond.
Creator 🔴 + Bundle 🔴 = exit the tab. Everything else can be context-dependent. These two together are not.
Check before you buy. Every time.
Works on pump.fun links, DexScreener URLs, Birdeye, Solscan, and raw contract addresses
Open @PumporaBot on Telegram →3 free scans on first /start · no signup · no credit card
Frequently Asked Questions
How do I check if a pump.fun token is safe?
Copy the pump.fun URL or contract address and paste it into @PumporaBot on Telegram. Pumpora runs 10 on-chain checks — creator wallet history, bundle detection, freeze authority, holder concentration, and more — and returns a risk score 0–100 in under 60 seconds.
Does pump.fun verify token safety?
No. pump.fun is a permissionless token launcher with no creator vetting, no safety checks, and no freeze authority verification. Anyone can launch a token in seconds. The platform shows price and volume data but provides no on-chain safety analysis.
What percentage of pump.fun tokens rug pull?
Approximately 98.7% of new meme tokens are scams or rug pulls. Most drain liquidity within hours of launch. The 5-minute window after launch is statistically the period of highest risk.
Can I paste the full pump.fun link into Pumpora?
Yes. Paste the full pump.fun URL directly into @PumporaBot — no need to extract the contract address. Pumpora also accepts DexScreener URLs, Birdeye links, Solscan links, and raw Solana contract addresses.
Is Pumpora free to use?
Yes. You get 3 free scans when you first start @PumporaBot — no signup, no credit card. Additional scan packs start from $1.19 for traders who need higher volume.
Related reading: 5 pump.fun Rug Pull Patterns From 2026 · Solana Honeypot Checker · DexScreener Token Safety · How to Detect a Rug Pull on Solana