
Drained your deposit on a coin nobody had heard of an hour ago? Chances are you walked into someone else's scheme. Crypto pump and dump isn't some rare event on the fringes of the market — it's a working business for dozens of groups that pick a new victim among low-liquidity tokens every week.
Let's break down the mechanics step by step: who organizes crypto pumps, what the pump looks like from inside the order book, and what to do so you don't end up being the exact liquidity the organizers cash out on. Below are the specific signs that separate a crypto pump from ordinary growth, and a checklist worth keeping on hand before any sharp move.
Pump and dump is a scheme of artificially accelerating an asset's price followed by the initiators closing their positions en masse. What gets pumped is usually whatever's easy to pump — coins with a daily volume of a couple hundred thousand dollars, where even 20-30 BTC is enough to triple the price in 10 minutes.
The term came from the stock market back in the last century, but it flourished in crypto for one simple reason. There are thousands of tokens here with close to zero liquidity, and you can buy and sell them without any verification or disclosure. On traditional exchanges, that gets people arrested. On DEXs and small CEXs, the worst that happens is an account ban.
A standard pump goes through four phases. Understanding this sequence is the main tool for protecting yourself, because every phase leaves a trace in the order book and in the tape.
The key detail here is the time asymmetry. The accumulation phase can take weeks, while the pump and dump phases fit into 15-40 minutes. That's exactly why most traders only see the second half of the scheme and mistake it for the start of "real" growth.
I usually check a coin's history for the past 2-3 days before even considering an entry on a sharp move. If there was dead calm before it, followed by a sudden 40% spike in five minutes, that's almost always someone's organized dump entry, not organic market interest.
Three types of participants are behind most schemes.
The first are closed Telegram groups with paid entry ranging from $500 to several thousand dollars. Organizers announce the "signal" to members a few seconds before the push, while already holding a position bought in advance at a low price.
The second are the token creators themselves. In the classic memecoin scheme, the developer holds 40-60% of the supply, runs a minimal ad campaign, and after the first organic rally sells their stake into the order book they themselves had inflated with the initial buys. Retail is convinced at that point they're buying into a rising trend, when in reality they're buying out the insider's position. The mechanics of launching such tokens and their risks are covered separately in the article "Memecoins: mechanics and risks".
The third are bots and algorithmic groups that hunt for coins with collapsed volume and run a series of trades between connected wallets (wash trading), creating an illusion of interest for outside screeners. Such groups often operate on several exchanges at once so the move looks market-wide rather than local, since synchronized growth across two or three venues looks far more convincing to a random observer than a spike on just one.
In all three cases, the logic is the same. The organizer enters first and cheaper, retail enters last and more expensive. One side's profit is mathematically equal to the other side's loss — crypto here is simply moving money around, not creating new value.
Spotting a pump with 100% certainty in the moment is impossible, but there's a set of signs that, together, give a fairly high probability of a correct diagnosis. None of them is conclusive on its own. People searching "pump and dump crypto" are mostly looking for these exact signals rather than theory, so what follows are the actual working markers.
Most of these signs come down to liquidity: the less of it a coin has, the cheaper it is to organize a pump. What liquidity on an exchange actually is and how to assess it yourself is covered in detail in the article "Liquidity on an exchange".
The main trigger is a mismatch with the coin's volume history. If daily turnover usually sits around $200,000-500,000, and $1.5M in trades goes through in 10 minutes, that's a statistical anomaly, not "market interest."
Easy to check: open the coin's chart for the last 5-7 days and look at the average candle volume. In a real pump, the current spike exceeds the average by 15-30x. In organic growth, even a sharp one, volume usually builds gradually over several hours, not in a single candle.
The number of trades matters here too. A sharp price rise on a small number of large transactions (say, 5-10 orders at $50,000 each) looks a lot more suspicious than the same rise spread across thousands of small trades from different participants.
A handy filter for a quick check is sorting the coin list by price change over 15-30 minutes instead of the standard 24 hours. That kind of sort immediately surfaces anomalies that are still invisible on the daily timeframe but already visible in the moment. If a coin with a normal daily volume of $150,000-300,000 suddenly shoots to the top of market gainers, that's a signal to open its order book and check the other signs — not to jump into a position on emotion.
The second marker sits outside the terminal. If a synchronized flood of messages with identical text ("coin X is taking off, get in now") starts across dozens of chats alongside the coin's rise, the probability of an organized scheme jumps sharply.
It's worth checking the age and activity of the accounts spreading the signal separately. Freshly created bots with no history, mass-posting the same call within 5-10 minutes, are almost always part of the same chain as the volume push in the order book.
The bot-and-synchronized-message scheme is just one variety of the scam tactics found on the crypto market.
Similar logic applies here to what happens when spread is being harvested on low-liquidity instruments. There, the price is held with a small size on top and propped up from below with a cascade of orders, keeping it from dropping before its time. In a pump, the algorithm is almost mirrored. The organizer clears resistance above and pushes the price up with a series of market orders, while leaving a minimum of density levels below to make it easier for themselves to pull back when it's time to close the position.
You need to watch three things at once. Density levels above the current price on the sell side disappear one after another without real execution (spoofing). Density levels below the price on the buy side look thin and unstable, and the order book is empty exactly where there should normally be protection. Meanwhile the tape shows a series of buys of roughly the same size at 1-2 second intervals, which is typical of a script, not live demand from different participants.
In my experience, a live organic rally is almost always accompanied by a mixed tape. Someone comes in at $200, someone at $8,000, sizes are ragged. If the tape looks like a metronome with identical prints, that's a red flag on its own, before any chart analysis at all.
![[Placeholder: screenshot of order book with density map during a sharp move]](https://api.secret-terminal.com/uploads/C_c_ue_e_071b247921.png)
Spotting spoofing and disappearing density levels in a standard exchange order book is hard — orders flash by faster than you can register them. In Secret Terminal, the density map and order lifetimes are visible in real time, so a sell wall disappearing a second before the push is noticeable immediately, not after the fact on the chart.
A dump starts abruptly, usually with no warning on the chart, but with a warning in the order book. The first signal is buy-side density levels that had been holding the price for the last few minutes getting pulled all at once or one after another within 10-20 seconds. This happens fast, literally within a couple of candles on the one-minute timeframe.
The second signal shows up in the tape. Large sell orders appear, noticeably bigger than the average trade size over the past hour. The third sign is more subtle but just as telling. The spread starts widening sharply, because market makers and regular participants pull their orders as they sense instability, and the price starts moving in jerks instead of smoothly.
Crypto dumps are almost always faster than the pump itself. If the pump took 15 minutes, the retrace back to starting levels can happen in 2-3 minutes. Trading it manually, without watching the order book continuously, is practically impossible.
The mechanics aren't abstract — there are recognizable, recurring scenarios.
Take a classic example. A low-liquidity token with a daily volume of around $300,000 suddenly rallies 180% in 25 minutes. Volume during that window jumps to $4.2M, almost 14 times the norm. Simultaneously, an identical post urging people to "get in now before it's too late" appears across three dozen Telegram channels. Forty minutes after the peak, the price returns to the level the pump started from, minus 8-10% from fees and slippage for those who tried to exit after the crowd.
I've checked scenarios like this on several small altcoins — the sequence of phases is almost always the same; only the speed and depth of the retrace differ.
The second common scenario is a "dead" token that's traded in a narrow range with no interest for months. A developer or large holder methodically buys up 15-20% of the free supply over two to three weeks in small orders to avoid moving the price. Then comes the volume push and information hype, retail buys into the rally, and the holder sells off the accumulated position over the course of an hour while the price still holds above retail's entry point. A similar speculative fever regularly shows up around fresh listings too — how to trade those moves is covered in the article "Listing trading strategies".
The third variant is closer to memecoins, and here the scheme is often shorter. A team launches a token, buys the first 30-40% of the supply themselves at essentially zero cost, stirs up hype outside Telegram too — on X and on niche forums — and sells their stake after the first 300-500% peak. The price may never return to its former levels. After the organizers dump, there's simply no real liquidity left to support the price, and holders who bought at the peak are left trapped in the position with no buyers.
The common thread across all three scenarios is that the victim of the scheme usually finds out about it only after the fact, looking at the chart and wondering why the coin "just collapsed." In reality it couldn't have collapsed — it was pushed up artificially, and the fall was just a return to fair value once the outside volume was gone.
There's no universal filter that catches 100% of schemes. But discipline around a few points cuts the risk of getting caught in someone else's dump down to a minimum.
Check the volume history before entering on a sharp move. A rally with no backstory, on a coin that's been trading sluggishly for the past few weeks, calls for extra caution.
Look at the composition of the tape, not just the price. Identical-sized prints at even intervals is a sign of a script, not organic demand.
Don't enter on a signal from closed channels. If someone invited you to buy a coin "right now," someone already holds a position and is waiting for exactly your liquidity to exit into.
Check the token holder concentration through a blockchain explorer. If 40%+ of the supply sits in 2-3 wallets, the risk of an organized dump is many times higher than average.
Keep your position small and use a hard stop if you still decide to take part in the volatility. The stop should sit behind the nearest density level in the order book, not "by eye."
If reading the order book and tape still sounds complicated — in our free lesson 4 we show how professionals actually read the market through the order book and clusters. The lesson is free and part of the full course "Trading education from scratch | free crypto trading and scalping course," five videos on our YouTube channel.
This set of rules fails in one particular case: when the organizers pour volume in small batches across several exchanges at once instead of into a single order book. Then the spike gets spread thin across venues, each individual candle looks perfectly market-driven, and you can no longer spot the scheme from one terminal — you need to cross-check volume on at least two or three exchanges at once.
It's also worth talking about psychology separately. FOMO on a sharp rally works stronger than any technical analysis, and that's exactly the emotion the whole scheme is built on. The organizers aren't selling a coin — they're selling the feeling of a missed opportunity.
It's a scheme of artificially pumping the price of a low-liquidity coin, followed by a mass dump by the organizers. Retail buys into the hype and is left holding a devalued asset. It works because on small tokens, a small volume is enough to move the price several times over.
By a sharp volume spike on a coin with usually low liquidity, paired with a synchronized surge of mentions on Telegram and social media. In the order book, it looks like disappearing sell-side density levels above and thin, unstable protection below.
From a few minutes on small altcoins to 2-3 hours on more established coins. The dump, meanwhile, almost always happens several times faster than the pump itself, sometimes in a matter of minutes.
In theory, yes, if you get in during the first seconds and get out before the dump starts. In practice, that's the level of the scheme's organizers or bots with direct access to the signal. A regular trader almost always enters closer to the peak than to the start.
Ordinary growth is based on volume, news, or fundamentals and is spread out over time. A pump is a concentrated push over minutes on a coin where there was barely any trading before, with no real reason for growth.
Watch the order book and the tape, not the indicators. If buy-side density levels start disappearing and large sell prints show up in the tape, the dump has already started, and holding the position further almost always means locking in a bigger loss.
Major platforms like Binance and Bybit monitor abnormal volume spikes and can temporarily suspend trading on a coin or ban accounts involved in wash trading. Small exchanges and DEXs have almost no such controls, which is exactly what makes them the main arena for these schemes.
Seeing the order book structure during a pump and catching disappearing density levels in time is easier when you're working with professional tools instead of a standard exchange interface. Secret Terminal shows the density map, the tape, and order lifetimes in real time, giving you a chance to spot the pump before the bulk of retail gets in.

Has 5 years of trading experience and spent 3 years as a mentor, training over 2,000 students. He is developing Secret Terminal to make professional trading tools accessible to every trader.
Was helpful
Your rating will help us improve the quality of published materials and increase their usefulness.
We publish product updates, setup guides, and practical materials on working with Secret Terminal tools

Types of Cryptocurrency Scams: Phishing, Rug Pull, Fake Exchanges

What memecoins are, why they rise, and how to trade them safely.

The mechanics of crypto listings: why price spikes, when it dumps, and how to profit. Crypto scalping strategies and lis...