How to Spot and Report Token Impersonators: A Safe Checklist

Updated 2026-10-11 | 4 min read | QUANTUM (QNT) community

Why impersonators exist

On Solana anyone can create a token with any name and any ticker in minutes. Nothing stops a second token from being called the same thing as yours, with the same logo. The only thing that makes a token unique is its mint address, a long string of letters and numbers. Impersonators rely on buyers who search by name and pick the first result. Related guidance: what a token mint is and verifying a contract.

The problem is widespread across crypto. Wikipedia's memecoin article describes more than 700 copycat and spam coins being sent to a famous wallet in February 2025, apparently to suggest an endorsement, and hacked verified accounts being used to promote fake tokens. Impersonation is simply a normal risk to plan for.

The usual tricks

• Fake contract address: a token with the same name and logo but a different mint. Sometimes the first few and last few characters are made to look similar.
• Fake social accounts: a look-alike handle, a copied profile and pinned post with the wrong address. Replies from copycat accounts under real posts are common.
• Hacked accounts: a real, verified account takes a post-like "new contract" announcement. A badge does not prove safety.
• Fake support and airdrops: private messages offering help or free tokens. See fake airdrops and support scams and airdrop scams.
• Unsolicited tokens in your wallet: a token you never bought, with a link in its name or description. Do not interact with it.
• Fake websites and apps: a copy of a swap site or wallet that asks for your seed phrase. See wallet safety.

The safe checklist before you buy

1. Start from the official source. For QNT use the contract address shown on the official overview and the Solscan verification guide. Do not copy an address from a reply, a DM or a trending list.
2. Paste, do not search. In your swap tool, paste the full mint address instead of searching by ticker.
3. Compare the whole address, not just the first and last characters.
4. Open the token on an explorer. Check supply, holder list, creation date and authorities. Use Solscan, DEXScreener and the on-chain health checklist.
5. Be suspicious of a brand new copy. A token created yesterday with the same name as an older one is a fake until proven otherwise.
6. Check the pool. Low liquidity and few holders are a bad sign. See liquidity and price impact.
7. Ignore DMs. No real team member contacts you first about buying, claiming or fixing something.
8. Never share your seed phrase or private key. Anyone who asks is a scammer. See seed phrase basics.
9. Use a test amount the first time, from a wallet with only what you can afford to lose. See the first purchase checklist.

Warning signs in a post

The FTC lists several scam signs that apply here: guaranteed profits, unexpected links in messages, and impersonation of well-known companies. Add urgency ("claim now"), pressure to move to another chat, and an address that differs from the one pinned on the official page.

What to do if you already bought the wrong token

• Stop. Do not buy more or click anything linked to it.
• If you signed something suspicious, review and cancel permissions with the revoke routine.
• If your seed phrase may be exposed, create a new wallet and move what you can. See device and account hygiene and hardware wallets.
• Keep screenshots, transaction signatures and links as evidence.

How to report

• The platform: use the report function on the social network or app where you saw the fake account or post.
• Your wallet: many wallets let you hide unwanted tokens. Phantom's own help pages were not readable when this page was written, so check your wallet's support site for current steps.
• Authorities: the FTC page lists ReportFraud.ftc.gov, the CFTC at cftc.gov/complaint, the SEC at sec.gov/tcr, the FBI's IC3 at ic3.gov, and your exchange if you sent money through one. IC3 is an FBI hub for cyber-enabled fraud and says you can file even if unsure whether your case qualifies.
• The community: tell the official project channels so they can pin a warning.

For project teams

Pin the official mint address on every channel, publish it on one canonical page, keep admins' accounts secured with strong two-factor authentication, and say plainly that the team never DMs first. Teach members the same habits. See healthy communities. The QNT project is independent of Quantinuum Ltd, so also watch for fakes claiming a link to the company: read the comparison.

Also see rug pull warning signs and memecoin scams. This is education, not financial advice.

Sources and further reading

• FTC Consumer Advice: What to know about cryptocurrency and scams
• FBI Internet Crime Complaint Center (IC3)
• Wikipedia: Memecoin (impersonation and copycat tokens)

Reported as of 2026-10-09. Rules, prices and tools change, so check the original pages.

Frequently asked questions

Share on X

Keep reading

• How to Verify a Solana Token Contract Before You Buy
  A checklist to verify a Solana token: confirm the contract address, check mint and freeze authority, supply and holders on Solscan.
• Solana Wallet Safety: Approvals, Fake Tokens, Address Poisoning and Drainers
  How common Solana scams work and the habits that reduce your risk: reading approvals, ignoring fake token airdrops, avoiding address poisoning and using a hardware wallet.
• How to Spot a Rug Pull in Crypto
  A rug pull is when creators drain a token's value and vanish. Learn the common warning signs on Solana and the on-chain checks that reduce your risk.
• Phishing, Fake Airdrops and Fake Support: Telegram and Discord Scams Explained
  Regulator guidance on phishing and impersonation applied to crypto: fake airdrops, fake wallet support, recovery scams and what to do if you clicked.

All How to buy and stay safe guides | Back to top | Search the site

Main pages: What is QNT? | Token information | How to buy | FAQ