Not.Trade Safety Scoring: Detect TON Scam Jettons 2026

Why Not.Trade's Insider Safety Scoring Changes TON Sniping in 2026

Every TON memecoin trader has been there. A new jetton appears in a Telegram channel, the chat explodes, the chart pumps two hundred percent in three minutes, and ten minutes later the liquidity pool drains. The post-mortem reveals the same pattern: a small cluster of insiders held more than sixty percent of supply, the dev wallet transferred to a fresh address before the dump, the LP was never locked, and the so-called community of seven thousand holders was actually four bundler contracts wearing different hats.

Not.Trade was built to make that post-mortem unnecessary. Its insider safety scoring panel evaluates every TON jetton in real time across seven structural dimensions. Combined with a holder count and tax percentage, those metrics surface the structural fingerprints of a rug before a single TON leaves your wallet. Most TON terminals show a chart, a price, and a buy button. Not.Trade shows the chart, the price, the buy button, and the seven numbers that tell you whether the chart is real.

This guide walks through every metric, explains the color thresholds, and shows how to read the panel in under five seconds before you click Buy 10 TON. We break down real scam patterns the panel catches, compare it to external tools like Bubblemaps and RugCheck, and finish with a FAQ covering the questions traders ask after their first save and their first loss.

What Is Not.Trade Insider Safety Scoring

Not.Trade's insider safety scoring panel evaluates every TON jetton across seven dimensions: Top 10 holder concentration, insider wallets, sniper percentage, dev wallet movements, bundler percentage, LP lock status and DEX paid badge. Combined, these metrics flag scam patterns before a trader commits capital. Red flags include Top 10 above fifty percent, insiders above fifteen percent, active dev selling and unlocked liquidity pools. The panel sits inside every token info view, color codes each metric green, amber or red, and updates as on-chain conditions change.

The reason this matters in 2026 is that TON's jetton standard makes deployment cheap and permissionless. The same low friction that makes TON memecoins fun also makes them fertile ground for scams. Not.Trade's safety panel does not stop a scam from being deployed. It makes the scam visible to anyone who looks at the token card before buying. For broader context our complete Not.Trade terminal guide covers the workflow, and our jetton standard explainer covers how TON tokens are minted.

A Brief History of TON Scam Patterns and Why Safety Scoring Became Essential

When TON's memecoin season kicked off during the 2024 wave around NOT, DOGS and HAMSTER, retail traders piled into Telegram-native trading bots. Those early bots offered execution, not analysis. You could buy a token in one tap, but the bot did not tell you that the top ten wallets controlled eighty percent of supply, or that the dev had transferred liquidity to a multisig that could unlock in seven hours.

By late 2025, three structural scam patterns had become endemic on TON. The bundled launch, where a single deployer used four to ten wallets funded from the same source to buy at block one. The dev rug, where the deployer left LP unlocked and pulled liquidity once market cap crossed a threshold. The honeypot, where buy transactions succeeded but sell transactions failed because of a malicious transfer hook. By the time Not.Trade shipped its safety scoring panel, the community had absorbed millions in losses from these patterns.

Not.Trade's response was to build the safety panel directly into the trading surface. Traders make better decisions when the relevant data is in their field of view at the moment of decision. A trader who must leave the terminal, open a block explorer, run a holder analysis, then come back to execute, will not do that work. A trader who sees seven color-coded numbers above the buy button will glance at them every time.

How Each Metric Works, In Depth

Top 10 Holder Concentration

The Top 10 metric measures what percentage of total circulating jetton supply is held by the ten largest wallets, excluding the liquidity pool, burn addresses, and known protocol contracts. The exclusion is critical because many TON tokens park enormous shares of supply in DeDust or STON.fi pools to provide depth, and counting that as concentration would create false alarms.

A Top 10 reading under ten percent indicates a broadly distributed jetton where no single group can dump alone. Ten to twenty five percent is normal for healthy memecoins. Twenty five to fifty percent is amber. Anything above fifty percent is red, and combined with a low holder count, almost always indicates a recently launched token that has not distributed organically, or a wash-traded scam where the deployer never let go of supply.

INSIDERS

The INSIDERS metric counts wallets with a verifiable on-chain link to the deployer. Not.Trade walks the funding graph backward: if a wallet received its initial TON from the deployer, or from a wallet that traces back to the deployer within a small number of hops, it counts as an insider. The metric reports the percentage of total supply held by all insider wallets.

Insiders are not automatically bad. Many legitimate launches have a small allocation reserved for the team. The question is scale. Under five percent is benign, five to fifteen percent is normal for community launches, above fifteen percent the chart misrepresents organic interest, and above twenty five percent the cluster can control price discovery. This is the metric most correlated with rug pulls. For coordinated wallet patterns see our anti-rug playbook for new memecoins.

SNIPERS

SNIPERS reports the percentage of supply bought during the first few blocks after liquidity was added. Sniper bots are not inherently fraudulent. They are an arms race. Where Not.Trade's panel matters is when the snipe percentage is extremely high, because high snipes mean that ordinary buyers who arrive even one minute later are buying tokens that snipers can dump on them. A SNIPERS reading under ten percent is healthy. Ten to twenty percent is acceptable. Above twenty percent the token's price action in the first hour is dominated by sniper exits, which is the classic pump-and-dump structure.

DEV M. (Dev Wallet Movements)

DEV M. is arguably the single most actionable metric on the panel. It reports what the deployer wallet has done with its current holdings. The states are HOLDING, where the dev wallet has not moved tokens, TRANSFERRED, where the wallet has moved tokens to other addresses (often a precursor to a coordinated sell), and SELLING, where the wallet has actively swapped jettons for TON in the LP. If you see SELLING, the answer is almost always to walk away. A deployer who is dumping into their own liquidity is the textbook definition of a soft rug, and the chart will reflect it within minutes.

BUNDLERS

BUNDLERS measures the share of supply bought through bundled transactions, which means multiple buy orders bundled into a single block by the same actor using different wallets. Bundled launches mimic organic demand. A genuinely organic launch has dozens of independent buyers arriving in different blocks. A bundled launch has ten correlated wallets buying in block one. The Not.Trade panel detects this by clustering wallets that funded each other and bought in proximity. Healthy BUNDLERS reading is under five percent. Above ten percent indicates a coordinated launch, and above twenty percent the token's perceived community is largely fictional.

LP LOCK

LP LOCK is the status of the liquidity pool. LOCKED in green means the LP tokens have been sent to a verified locker contract with a known unlock time. PARTIAL in amber means some portion of LP is locked while another portion remains in the deployer's control. UNLOCKED in red means the deployer can pull all liquidity in a single transaction. UNLOCKED is the standard precondition for a hard rug.

When LP LOCK is PARTIAL, hover the metric for the percentage locked and the unlock countdown. Eighty percent locked for six months with twenty percent flexible is a different risk than twenty percent locked for two days. For secure custody after entry see our Tonkeeper wallet guide.

DEX PAID

DEX PAID is a yes or no flag indicating whether the token's project has paid for the Dexscreener (or equivalent aggregator) premium badge. This metric is the one that most often confuses new traders. DEX PAID yes does not mean the token is safe. It only means the dev paid a promotional fee to put their logo, socials and description on aggregator listings. Many scams have DEX PAID yes because the rug team treats the badge as a marketing expense to attract more victims. Conversely, many legitimate projects skip the badge because they prioritize organic discovery. Treat DEX PAID as a marketing signal, not a safety signal.

HOLDERS and TAX

Two additional fields round out the panel. HOLDERS reports the total wallet count holding any non-zero balance of the jetton. A real Not.Trade UI example we observed showed seven thousand eight hundred and eighty four holders for a mature memecoin in the steady state. For new tokens, holders under one hundred combined with a market cap above one hundred thousand dollars is a red flag, because it means a tiny group is supporting an inflated valuation. TAX reports the buy and sell tax encoded in the jetton's transfer hooks. A tax under three percent is normal. Three to seven percent is acceptable if the project clearly explains the use of fees. Above ten percent is rare in legitimate tokens and often signals a honeypot or extractive design.

Color Coded Reading Guide: Thresholds That Matter

The single most useful skill a Not.Trade user can develop is a five second glance at the safety panel that produces a buy or skip decision. The color coding does the heavy lifting. Green means safe, amber means caution, red means high risk. The exact thresholds depend on the metric, and the table below is the working guide most experienced TON traders internalize within a week of using the platform.

A practical rule of thumb: if any single metric is red, treat the trade as a coin flip at best. If two or more are red, walk away. If the panel is all green except for SNIPERS in amber and the token is less than two hours old, that profile is actually normal for organic launches, because snipers always pile into new pairs. The skill is learning which amber values are transient and which are structural.

Red Flag Checklist: The Pre-Snipe Glance

Print this list, screenshot it, tape it to the side of your monitor. Every Not.Trade user we have spoken with describes the same shift after a week of using the panel: their gut starts to flag the colors before they consciously read the numbers. That muscle memory is the difference between traders who survive a memecoin season and traders who fund the survivors. For broader wallet hygiene, our wallet security tips and the dedicated TON wallet drainer guide cover the other half of the equation.

Case Study One: The Bundled Launch Catch

Consider a hypothetical TON jetton called PUMPKIN, launched on a Friday evening. Within twenty minutes the chart shows a clean parabola, Not.Trade's memescope places it in the top three of one-hour movers, and the Telegram channel has eleven hundred members. A trader watching the new pairs column would read this as a fresh runner. The safety panel reveals a different story. Top 10 sits at forty seven percent, INSIDERS at twenty two percent, BUNDLERS at thirty one percent, DEV M. shows TRANSFERRED, LP LOCK is UNLOCKED, and HOLDERS is forty three.

Every number is screaming. Forty three holders cannot support an eleven hundred member channel unless the channel is largely bots. Thirty one percent bundled supply means the dev cluster bought the first thirty one percent in coordinated blocks. The transferred dev wallet means the deployer has moved tokens to fresh wallets to dump from them. The unlocked LP means the same group can drain liquidity any moment.

A trader who reads the panel skips PUMPKIN and watches the chart. Within forty minutes the price collapses ninety four percent as the bundled wallets dump in waves, the LP drains, the Telegram channel goes silent. The safety panel did not predict the timing, but it told the trader before the trade that the structural fingerprint was a rug.

Case Study Two: The Soft Rug In Progress

Now consider a token that launched three days ago, built up two thousand holders, and has traded sideways for twelve hours. By traditional metrics it looks like a survivor. The safety panel shows Top 10 at twenty eight percent, INSIDERS at eleven percent, SNIPERS at sixteen percent, BUNDLERS at four percent, LP LOCK LOCKED with three months remaining, TAX at four percent, HOLDERS at two thousand and forty one. Everything is amber to green except DEV M. shows SELLING.

SELLING on a three day old token that has otherwise stabilized is a flashing red light. The deployer is exiting into their own holders. The chart will not reflect it immediately because the dev is dripping supply in small chunks. But every token sold by the deployer is a token they will not buy back. A disciplined trader sells their bag the moment DEV M. flips to SELLING. Three days later the chart has bled sixty percent. The save is invisible because nothing dramatic happens, but the save is the entire point.

Case Study Three: The Honeypot Tax Trap

A third common pattern is the honeypot, where buying succeeds but selling fails because of a malicious transfer hook. TON's jetton standard allows custom transfer logic, and a malicious deployer can encode logic that rejects sells from any wallet except an allowlist. Not.Trade's panel surfaces a strong proxy: extreme TAX values combined with a holders count that grows but never shrinks.

A trader scans a new memecoin and sees TAX at twenty four percent, HOLDERS at one hundred and ninety, six hours since launch. Every healthy memecoin sees rotation in six hours. A holder count that only ticks up means nobody is selling, which usually means they cannot sell. Combined with twenty four percent tax the conclusion is obvious. See our safe jetton buying guide for the broader pre-trade checks.

Case Study Four: The Green-Light Snipe

Not every glance ends in a skip. Consider a jetton in Not.Trade's new pairs column with Top 10 at eighteen percent, INSIDERS at three percent, SNIPERS at twelve percent, DEV M. HOLDING, BUNDLERS at two percent, LP LOCK LOCKED with six months remaining, TAX at two percent, HOLDERS at four hundred and sixty after ninety minutes. Mostly green with one amber on SNIPERS, expected for a token under two hours old. The structural profile fits an organic launch.

This is when a trader takes the 10 TON quick buy, sets a limit sell at the next resistance, and trusts the structural read. The trade may still fail because memecoins are volatile, but the failure mode is market risk, not structural fraud. Market risk averages out over many trades; structural fraud has a fat left tail that can wipe an account in one position. The panel does not guarantee profit. It eliminates one of two categories of loss.

How Not.Trade's Built-In Panel Compares to External Safety Tools

The crypto safety tool space has matured rapidly over the last two years. Bubblemaps, RugCheck, Pocket Universe, GoPlus, Honeypot.is and a handful of others have built useful products. The question for a TON trader is not whether to use external tools but how Not.Trade's built-in panel fits into a stack. The short answer: Not.Trade's panel is a real-time triage layer that lives next to the buy button, and external tools are deep-dive validators that you reach for when the triage flags ambiguity.

RugCheck and GoPlus are excellent on their native chains but do not currently cover TON. Bubblemaps is the most useful external complement to Not.Trade because it visualizes the wallet graph in a way that complements the numeric panel. When Not.Trade flags INSIDERS at fourteen percent, opening Bubblemaps on the same token shows you the actual cluster structure: are the insider wallets one tight ball funded by a single source, or are they five independent small holders that happen to be connected through a third party? The graph context changes the interpretation. For the Solana equivalent pattern see our fake volume detection guide.

Pocket Universe operates at a different layer. It simulates the outcome of a pending transaction before you sign it, so you see whether the swap actually returns tokens, or whether a hidden approval would drain your wallet. Pocket Universe is complementary to the Not.Trade panel, not a substitute. The panel evaluates the token's structural risk. Pocket Universe evaluates the specific transaction's risk. Sophisticated traders use both.

Common TON Scam Patterns the Safety Panel Catches

Scam patterns on TON have crystallized into a recognizable taxonomy. The Not.Trade safety panel was designed with these patterns in mind, and each metric on the panel was chosen because it is the leading indicator of one or more of these archetypes.

The Telegram Pump and Dump

A coordinator builds a Telegram channel of ten thousand subscribers over a few weeks by promoting "alpha calls." They then deploy a jetton, buy through a coordinated cluster of bundler wallets, push the call in the channel, and dump into the buy wave. The panel catches this through BUNDLERS, INSIDERS, and a holders-to-market-cap ratio that does not match an organic launch. Even if the dev rotates wallets between schemes, the bundler footprint at launch is structurally hard to hide. Combine with our best TON trading bots guide to understand why panel-aware traders outperform pure signal followers.

The Soft Rug (Slow Bleed)

In a soft rug the deployer does not pull liquidity in one transaction. They drip-sell over hours or days, often staying just below the threshold that would trigger external scam reports. The panel catches this through DEV M. flipping from HOLDING to TRANSFERRED to SELLING. Once SELLING appears, the rug is mathematically in progress, even if the chart still looks fine on a fifteen minute candle.

The Hard Rug (LP Pull)

The classic rug: the deployer removes liquidity in a single transaction and the token becomes unsellable. The panel catches this in advance through LP LOCK status. If LP LOCK is UNLOCKED, the rug is a single-click risk. If LP LOCK is PARTIAL with a short unlock window, the rug is a delayed single-click risk. Only LOCKED with a long countdown removes this specific failure mode.

The Honeypot

The contract allows buys but blocks sells, so the dev accumulates buy pressure and then drains the LP. Honeypots are the worst class of TON scam because by the time you realize you cannot sell, your capital is already locked. The panel surfaces honeypot risk through extreme TAX values and a one-way holders count. A token with twenty percent tax and a holder count that only grows is almost certainly a honeypot.

The Insider Distribution

A more sophisticated scam where the team allocates a large insider share, lets the token pump organically on community interest, then dumps the insider supply into the rally. The panel surfaces this through INSIDERS combined with a Top 10 reading that includes the insider cluster. A token with twenty percent insiders and forty percent Top 10 has an obvious dump risk regardless of how legitimate the marketing looks.

Step by Step: How to Read the Safety Panel Before You Snipe

After two weeks of doing this on every snipe, the process compresses into a single visual gestalt. You will glance at the panel, perceive the overall color balance, and either click buy or click away. That speed is exactly the point. TON memecoins move fast, and a trader who needs three minutes to evaluate safety has already missed the entry.

Pros and Cons of Relying on the Built-In Safety Panel

The honest position is that the safety panel is a powerful tool, not a magic shield. Scammers iterate. A determined adversary can fragment supply across enough wallets to dodge the Top 10 metric, or use a multi-hop funding pattern that evades the INSIDERS detection. The panel raises the bar enough that lazy scams are filtered out, and the more sophisticated scams require effort that is often not worth the deployer's time. Combine the panel with common-sense rules (never risk more than you can afford to lose, set hard exits, follow projects long enough to confirm dev behavior) and you have a sustainable approach to TON memecoin trading.

Best Practices for Long-Term Use

Three habits separate traders who use the Not.Trade safety panel well from traders who treat it as a green-light vending machine. First, calibrate your tolerance. Some traders skip any token with a single red metric. Others accept one red flag if the others are deep green and the upside justifies the risk. There is no universal correct answer, but you need to know your own threshold and not move it under FOMO pressure.

Second, watch how the panel changes over time. A token that was all green at launch but drifted to amber on INSIDERS over a week is telling you that the deployer cluster has been accumulating, which is the opposite of distribution. A token that improved from amber to green as the dev locked LP and the holder count grew is genuinely de-risking. The panel is a video, not a photo.

Third, combine the panel with broader market context. The Not.Trade memescope shows new pairs, volume movers and trending tokens in three columns. Cross-reference the panel reading with the column the token sits in. A token in the new pairs column with mostly green metrics and rising volume is the strongest combined signal. A token in the trending column with a panel that has deteriorated since you first looked is a strong exit signal. Pair this analysis with our TON memecoins trading guide to round out the workflow.

Frequently Asked Questions

Conclusion: The Panel Is the Edge

TON memecoin trading rewards two skills: speed and selection. Speed gets you into the right token before the move. Selection keeps you out of the wrong token before the rug. Most TON terminals optimize for the first and ignore the second. Not.Trade's insider safety scoring panel is the rare product feature that does not promise a profit, but it does deliver something equally valuable, the consistent elimination of structural fraud risk from your trade pipeline. Over hundreds of trades the difference between a panel-aware workflow and a chart-only workflow is dramatic, because rug pulls produce maximum-magnitude losses that no amount of sniping gains can offset.

If you take one habit from this guide, make it this: never click Buy 10 TON on a Not.Trade jetton without glancing at the seven safety metrics first. Five seconds. Green, amber, red. Walk away from the reds. Trade the greens with normal risk management. Let the panel filter the disasters. For the rest of the workflow our complete Not.Trade terminal guide covers limit orders, MEV protection and multi-wallet sniping, and our address poisoning guide rounds out the safety stack.

The TON ecosystem will continue to produce both legitimate runners and aggressive scams. Traders who survive built the discipline of reading structure, not just charts. Use Not.Trade's panel, calibrate it, and trust the pattern recognition you develop from a few weeks of glancing at it. The save you do not see is the trade you did not take, and over a year those invisible saves are the entire edge.

Related Guides

• Top 3 TON Trading Terminals 2026: Not.Trade vs STON.fi vs DeDust
• TON Terminal: Complete Guide to Not.Trade - The Fastest TON Trading App (2026)
• Not.Trade vs Trojan: TON vs Solana Telegram Terminals 2026
• Not.Trade vs Photon: TON vs Solana Web Terminals 2026
• Not.Trade vs BonkBot: TON vs Solana Memecoin Battle 2026