Fake tokens and copycat tickers: how to verify the contract before you buy

A ticker is the creator's claim, not an identity[2][3]

Whoever creates a token types in its name and symbol. The ERC-20 standard used on Base, BNB Chain and Robinhood Chain treats name and symbol as optional and says other contracts must not even expect them to be present. Nobody enforces a unique symbol.

Solana works in a similar way. The name, symbol and metadata link are ordinary fields stored with the mint, and the update authority can change them later or lock them permanently. Nothing stops a thousand mints from using the same name.

We cover the basics of address verification in “A ticker is not an identity” and a general list of warnings in “Memecoin red flags to check before buying”. This guide focuses on copycats: what they look like, where they come from and how to filter them out before you sign a swap.

The scale: 361 contracts using the GME ticker[1]

Bitquery analysed trading on Robinhood Chain from 16 to 28 July 2026, in the network's first weeks. The GME symbol was used by 361 different contracts, and only one of them was the GameStop stock token. The copycats did $213.0 million of volume across 1.34 million trades and, according to the authors, out-traded the genuine token roughly two to one.

The most impersonated ticker was ROBIN, used by 416 addresses. Seven contracts carried exactly the same name, “GameStop - Robinhood Token”, so filtering by name fails too. Bitquery concludes that the contract address is the only reliable check.

Four kinds of copycat[1]

Copycats do not always look like an obvious scam. Some try to capture search traffic, some ride a trending theme, and some target habits such as copying an address from wallet history.

• A famous asset's ticker: a stablecoin, a stock, a network's native token or a large memecoin, such as GME, USDG or WETH
• A clone of a hot launch: the same name and logo on a new contract created moments after the original
• An exact copy of the name that defeats filters looking for differences
• Address poisoning: a lookalike wallet address planted in your transaction history

Address poisoning: a copycat in your own history[4][5]

In this attack, a scammer generates an address whose start and end look like an address you have traded with or sent funds to. They then send a zero or negligible-value transaction from it. The transaction takes nothing, but the fake address now sits in your wallet history. MetaMask warns that copying it from history later is enough to lose funds irreversibly.

A Carnegie Mellon study presented at USENIX Security 2025 covered Ethereum and BSC from July 2022 to June 2024. The authors counted about 270 million attack attempts against about 17 million victims and at least $83.8 million of confirmed losses across 6,633 incidents.

• Take the recipient address from your address book or the recipient's app, never from transaction history
• Compare the start, middle and end of the address, not only the first and last characters
• Treat unknown zero-value transfers as a sign of attack, not a glitch
• For larger amounts, confirm the address on a hardware wallet screen

Where to get the real address[10][8][9][6][7]

The issuer is the best source. Paxos publishes the USDG address separately for each network, including Robinhood Mainnet. Robinhood states that stock tokens are issued by Robinhood Assets (Jersey) Limited and lists their addresses on the Token Contracts page of the chain documentation. If an address from a search differs from the issuer's documentation, it is not that token.

Memecoins rarely have documentation, so the sources are the project's own channels: its website, X account, Telegram or the token page on its launchpad. Check that all of them show the same address and that the accounts were not created yesterday. An address pasted in a reply, a direct message or by an “admin” in chat is not a source.

Verifying on DexScreener and in an explorer[11]

Searching DexScreener by symbol returns every pair with that ticker, often across several networks. Start from the address instead: paste it into search or open the pair list for that specific token. Each pair has a baseToken field with the address and the pool creation time, so you can quickly see whether it is the same contract the project published.

Then open the address in the network explorer, such as Solscan for Solana or Basescan for Base. Check when the contract was created, who deployed it and whether the same deployer launched many similarly named tokens in a short time.

• The network on DexScreener matches the one the project names
• The baseToken address is identical to the official one, character by character
• The token is the base token in the pair, and the quote currency is the one you expect
• The pair creation date fits the project's known history
• In the explorer, the deployer is not mass-producing similarly named tokens

Pool age, liquidity and holders as copycat signals[11][1]

A copycat of a famous ticker usually has a very young pool and shallow liquidity, because it is built for a quick turnover rather than for years. When the symbol of an asset that has traded for months appears in a pool created an hour ago, the first question is why the pair is new.

Holder distribution matters too. If a few addresses, including the deployer, hold most of the supply, someone can sell into a shallow pool at any moment. Remember that a large address can be a pool, an exchange or a burn address, so read the percentage together with the address's role.

How the MEMECOINY launch radar and risk report help

The new launch radar at /launches shows fresh pools on Robinhood Chain, Solana, Base and BNB Chain with the full contract address ready to copy. A row is flagged when it uses a ticker scammers routinely reuse, such as USDG, HOOD, TSLA, NVDA, SOL or BONK, or when the same ticker appears on more than one contract among the fresh pools on the radar. We also mark liquidity below $25K and a valuation more than 100 times liquidity.

On a token page, the risk report collects data from external providers. For Solana it shows mint authority, freeze authority, Token-2022 extensions, holder concentration and LP lock. For Base and BNB Chain it shows trading restrictions, owner privileges, holder concentration and LP lock. DexScreener data adds liquidity, pair age and valuation to liquidity.

A one-minute routine before you buy

This list takes no more than a minute and filters out most copycats. If any point does not match, do not buy and go back to the official source.

• The address comes from the issuer's documentation or at least two official project channels
• In the terminal or DEX you paste the address rather than picking a token from a list by ticker
• The address in the swap window matches the official one at the start, middle and end
• The pair's age and liquidity make sense for what the token claims to be
• The token page risk report shows no sell block, active mint authority or extreme concentration
• The amount is one you can afford to lose entirely