How to spot a fake Solana token: copycats, look-alikes and fake addresses

On Solana anyone can create a token in seconds, with any name and any logo. That's why every popular token has copies, and why new projects get copied within minutes of launching. The copies look real. They often have the same ticker, the same picture and a link to a convincing website.

There is one thing a fake can never copy: the contract address. Every safe habit below comes back to that.

The four tricks fakes use

1. The same name and ticker. A token called "USDC", "JUP" or a brand-new project's name, with a different address. Search results and trading screens often show several tokens with the same name side by side.

2. Speed after a real launch. The moment a project goes live, copies appear with the same name. People searching in a hurry buy the first one they see.

3. Addresses sent to you. "Here's the contract!" in a DM, a reply under a post, a group message or an ad. Real teams don't DM you first, and they don't need to: the address is on their website.

4. Fake support. Someone offers to "help" with your wallet, a "verification" or a "migration" and asks for your recovery phrase. No real project ever needs it. Anyone who asks for it wants to empty your wallet.

Five habits that beat them

1. Get the address from the project's own website only. Not from search results, a chart, a DM or a screenshot.
2. Compare the full address, not just the first and last characters. Fakes are sometimes generated to start and end the same way.
3. Check the token before buying. Our free Token Safety Checker flags copycat names of well-known tokens and the settings scam tokens rely on, such as an active mint or freeze authority.
4. Be suspicious of urgency. "Last chance", "only minutes left" and countdowns in DMs are pressure tactics.
5. Never share your recovery phrase. Not with support, not with a bot, not on a website. It stays on paper, offline.

What a checker can and can't tell you

A checker reads public on-chain data. It can tell you that a token called "BONK" isn't the real BONK, or that its creator can still create more tokens. It can't tell you whether a website or a team is genuine. That's why the first habit (the address from the official website) matters most.

The fake $ODDI rule

$ODDI hasn't launched yet. Any token called ODDI today is a fake, and our checker flags it as one. When we launch, the official contract address goes to the waitlist first and is published on oddiforge.com, and only there. We'll never DM you first or ask for your recovery phrase.