Skip to main content

Shepley Capital

RISKS & SCAMS
Risks and Scams - Cryptopedia by Shepley Capital

Legitimate Presale vs Crypto Scam

Why Presales Are High-Risk and High-Scam Territory

A crypto presale is an early investment round that occurs before a token is listed on public exchanges. Legitimate projects use presales to raise development capital and reward early supporters with discounted token allocations. Fraudulent projects use the identical format as the first stage of a rug pull, a pump and dump scheme, or an outright exit scam where founders take the raised funds and disappear.

The presale format is attractive to scammers because it combines multiple favourable fraud conditions: an early-stage project where lack of product is expected and explainable; no trading history to scrutinise; a credibility gap that marketing can fill; and investors who are motivated by the prospect of early-stage returns and may lower their due diligence standards accordingly. The fake token launch guide covers how fraudulent launches are structured overall. This article focuses specifically on the comparison between legitimate and fraudulent presales at the point of evaluation.

The ACCC Scamwatch data consistently shows that Australians lose hundreds of millions of dollars annually to investment scams, with crypto presale fraud representing a significant and growing proportion. Developing a systematic evaluation framework is the most effective protection.

 

Team Transparency: The First Filter

The most fundamental difference between a legitimate presale and a scam is team transparency. Legitimate projects have identifiable, verifiable founding teams with real professional histories that can be independently checked. Fraudulent projects have anonymous teams, fabricated identities using stock photography, or LinkedIn profiles with no genuine employment history.

The verification process for any presale team: take each team member’s name and search for them independently (not through the project website or social channels). Their LinkedIn profile should have connections, employment history, and activity that predates the project. If a team bio claims prior experience at a major company, that experience should be verifiable through the company’s own communications or the individual’s independent professional presence.

Reverse image search every team profile photo using Google Images or TinEye. Stock photos used as fake team members are a universal red flag: if the profile photo returns results from a stock photography site, the team member is fabricated. The fake token launch guide covers this verification step in the context of fake launch marketing specifically.

 

Doxxed Founders and Legal Entity Checks

The strongest form of team verification is a registered legal entity. Legitimate projects often operate through a registered company in a reputable jurisdiction (Australia, Singapore, Cayman Islands, BVI). The company registration can be independently verified through the relevant government business register. In Australia, ASIC’s business names and company register allows anyone to check whether a company exists and who its directors are. A project that claims an Australian base but cannot be found on ASIC’s register is either not Australian or not a legal entity, both of which are red flags for a presale claiming to be a legitimate investment.

The Capital Nexus newsletter covers presale evaluation, token launch analysis, and crypto risk management for Australian investors: Capital Nexus Newsletter.

 

Smart Contract Verification: The Technical Filter

The smart contract is the most objective evidence of a project’s legitimacy or fraud intent, because it reveals the actual capabilities of the token regardless of what the marketing claims. The malicious smart contract guide covers the specific technical mechanisms in detail. For presale evaluation, the key checks are: is the smart contract source code verified and published on the relevant block explorer (Etherscan for Ethereum, BscScan for BNB Chain, etc.)? Does the contract have unrestricted owner mint functions? Can the contract be paused or drained by the owner?

An unverified contract is an immediate red flag. There is no legitimate reason for a serious project to deploy an unverified contract: verification is free, takes minutes, and is a standard practice. An unverified contract is either incompetent or deliberately obscuring the code’s contents.

Automated contract analysis tools Token Sniffer and Honeypot.is perform these checks and produce a risk score. Using both tools before interacting with any presale contract is a minimum standard of diligence. A contract that fails these checks should be rejected regardless of how compelling the marketing is.

 

Audit Status

A legitimate project at presale stage will typically have commissioned a smart contract audit from a reputable security firm. The audit report should be publicly available, linked from the project website or GitHub, and issued by a named firm that has a verifiable track record of legitimate audit work. Common reputable auditors include CertiK, Trail of Bits, Quantstamp, and OpenZeppelin. A “certificate” or “audit” from an unknown entity with no track record is worse than no audit: it is designed to provide false assurance.

 

Tokenomics: Reading the Distribution for Intent

The token distribution plan (tokenomics) reveals whether the project is structured to benefit its community or to enable founders to dump on investors. Legitimate tokenomics: founder and team allocations of 10-20% with multi-year vesting schedules (typically 2-4 year linear vesting with a 6-12 month cliff); a meaningful public sale or community allocation; transparent use-of-funds disclosure; locked liquidity for the initial trading pool.

Red flags in tokenomics: large founder allocations (30%+) with short or no vesting; excessive allocations to undefined categories like “marketing”, “ecosystem”, or “advisors” that are unlocked or have trivial vesting; a small public allocation meaning insiders hold the vast majority of supply; and no liquidity locking commitment for the initial trading pool.

Vesting schedules exist specifically to align founder incentives with long-term project success. A founder who vests over 4 years cannot profitably abandon the project after launch. A founder who has no vesting can immediately sell their allocation into the post-listing market. The presence and structure of vesting is one of the most important signals in evaluating founder intent.

 

Liquidity Locking

For any presale that will list on a decentralised exchange, the team should commit to locking the initial liquidity pool for a minimum period (typically 6-12 months for serious projects). Liquidity locking is performed through services like Unicrypt or Team Finance, which provide a verifiable on-chain proof of the lock. An unlocked liquidity pool means the team can withdraw all trading liquidity at any moment after listing, making the token immediately untradeable. The rug pull guide explains how liquidity removal is the terminal step in most rug pull exits.

 

Community and Communication Quality

The quality of a project’s community and communication reveals whether there is genuine substance behind the marketing. Legitimate projects have communities where: critical questions are answered substantively rather than deleted; team members engage directly with technical and strategic questions; the conversation includes genuine scepticism and diverse perspectives; and the project has a development history (GitHub commits, testnet deployments, product updates) that demonstrates real work.

Fraudulent projects have communities characterised by: immediate deletion of any sceptical or critical messages; aggressive promotion of the token with no substantive discussion of the technology; a high proportion of bot accounts (evident from identical promotional messages, no genuine engagement, accounts with no history); moderators who redirect questions to marketing claims rather than technical answers; and no verifiable product development activity.

Checking GitHub activity is a simple and powerful signal. A project claiming to be developing complex blockchain technology should have active development commits. An empty GitHub repository or one with minimal activity despite claims of ongoing development is a significant red flag. Legitimate development activity is one of the hardest things to fake.

 

The Presale Evaluation Checklist

A structured checklist for evaluating any crypto presale before committing funds: team verification (independent checks of all named team members, reverse image search of all profile photos, company registration check); smart contract check (source code verified on block explorer, Token Sniffer and Honeypot.is both passing, audit from reputable firm linked and verifiable); tokenomics review (founder allocation reasonable, multi-year vesting confirmed in the contract code not just in marketing claims, liquidity lock commitment with on-chain proof); community audit (critical questions answered not deleted, genuine GitHub development activity, community includes real independent voices not just promotional accounts); and independent verification of all claimed partnerships.

The DYOR guide provides the broader research framework that applies beyond presale-specific checks. The pre-trade checklist provides the decision framework for when you have completed research and are deciding whether to proceed. Presales carry inherently higher risk than established tokens: even after passing all these checks, position size should reflect that risk, with no presale representing more than a small fraction of your overall portfolio.

 

Red Flags That Should End Your Investigation Immediately

Certain red flags are sufficiently severe that further investigation is not warranted: anonymous team with no verifiable identities; unverified smart contract code; no commitment to liquidity locking; promises of guaranteed returns (no legitimate investment promises guaranteed returns); presale promoted only by influencers with no independent community commentary; project claiming ASIC or regulatory registration that cannot be verified on ASIC’s register; and pressure to invest quickly before the presale closes.

A single one of these red flags is sufficient reason to decline. The pyramid scheme guide and the fake influencer scam guide cover specific scam formats that commonly appear in the presale context. Reporting suspected scam presales to ASIC and ACCC Scamwatch protects other investors and contributes to regulatory enforcement.

Shepley Capital Black Emerald membership provides in-depth research, project analysis, and risk evaluation frameworks for Australian crypto investors who want to evaluate opportunities with professional rigour: View Membership Options.

Frequently Asked Questions

What is the difference between a legitimate crypto presale and a scam?

A legitimate presale raises capital from investors before a token's public launch, with genuine development activity, transparent use of funds, a locked vesting schedule preventing immediate dumping, an audited smart contract, and verifiable team identity. A scam presale takes investor funds and disappears, with no intention of building the project.

What due diligence checklist should you use before investing in a crypto presale?

Check: team identity (LinkedIn profiles, GitHub contributions, doxxed founders), whitepaper quality (original, technical, not plagiarised), smart contract audit by a reputable firm, liquidity lock duration, vesting schedule for team tokens, active development evidence on GitHub, community authenticity (no paid engagement), and legal jurisdiction clarity.

What legal protections exist for presale investors in Australia?

ASIC regulates crypto tokens that qualify as financial products under the Corporations Act. However, many presales operate in regulatory grey areas. Projects that are clearly unregistered financial products can be pursued by ASIC. The ACCC can pursue false representations. Prevention through due diligence is far more effective than legal remedies after the fact.

How do you verify whether a crypto team is real?

Search team member names on LinkedIn and verify their professional history is consistent and has connections (fake LinkedIn profiles typically have few connections). Check GitHub for code contributions to the project. Look for public speaking appearances at legitimate crypto conferences. Seek the team member's own history of commentary and publications independent of the project.

What are tokenomics red flags in a presale?

Red flags include: team token allocation exceeding 20 to 30% of total supply, no vesting schedule on team tokens (allowing immediate dumping), unrealistically low presale price with no clear justification, token emission schedules that heavily inflate supply shortly after launch, and no defined utility that would create genuine demand for the token.

What is the difference between a rug pull and a legitimate project that fails?

A rug pull is deliberate fraud where developers drain funds with no intention of building. A legitimate project failure involves genuine development effort that did not achieve product-market fit or ran out of capital. Key distinguishing factors are: whether the team maintained communication, whether funds were used for stated purposes, and whether developers sold their holdings before announcing failure.

How does KYC (Know Your Customer) on presale participants affect investor safety?

Projects that require KYC from presale investors provide some level of accountability, as participant identities are documented. However, a project requiring KYC from investors but not disclosing the team's own identities is applying standards asymmetrically. Both participants should have verifiable identity for a genuinely accountable investment environment.

What should you do if you have invested in a presale that appears fraudulent?

Stop sending additional funds immediately. Document all communications, contract addresses, and transaction records. Report to the ACCC Scamwatch, ASIC (if the token was a financial product), your state police, and the platform where you found the presale. If the presale was on a legitimate launchpad, contact their fraud team. Accept that recovery is unlikely but documentation is essential for any investigation.

WRITTEN & REVIEWED BY Chris Shepley

UPDATED: AUGUST 2026

Choose your next topic from our Cryptopedia​

Grow your crypto portfolio with the latest insights, straight to your inbox!

Join 10,150+ CEOs, Business Owners, Parents, Students, & more receiving actionable crypto insights to grow their portfolios.