Home
Legal Consequences of Rug Pulls in Cryptocurrency

Legal Consequences of Rug Pulls in Cryptocurrency

Michael James 18 February 2026 21 Comments

When you invest in a new cryptocurrency token, you’re trusting that the team behind it has honest intentions. But too often, that trust is shattered when the project vanishes overnight - the developers drain the liquidity pool, disappear with millions in investor funds, and leave everyone holding worthless tokens. This is a rug pull, and while it might feel like a financial loss, it’s also a crime - and the legal consequences are real, serious, and getting tougher every year.

What Makes a Rug Pull Illegal?

A rug pull isn’t just a failed project. It’s a deliberate scheme. The developers create a token, hype it with social media posts, influencer endorsements, and fake TVL (total value locked) numbers, then pump the price by buying their own tokens early. Once retail investors rush in, the team sells their entire stash, removes liquidity from the trading pool, and cuts off access to the project’s website or app. The token crashes to zero. Investors can’t sell. Their money is gone.

The key to calling this a crime isn’t the price drop - it’s the intent. If the team never intended to build anything real, hid their identities, and lied about their plans to attract money, that’s fraud. Courts and regulators don’t care if the token was called "DeFiCoin" or "MoonLabs" - they look at what was said, what was hidden, and whether people were tricked into handing over funds.

Federal Crimes: Wire Fraud and Securities Violations

In the U.S., most major rug pulls are prosecuted under two federal laws: wire fraud and securities fraud.

Wire fraud (18 U.S.C. § 1343) applies when someone uses email, websites, social media, or any electronic communication to carry out a scheme to defraud. Every tweet promoting the token, every Discord message promising "100x returns," every transaction sent across state lines - all of it can be evidence. The U.S. Attorney’s Office in Brooklyn has already used this law to convict crypto scammers. In 2024, the CEO of SafeMoon was sentenced to 100 months in prison for a $700 million rug pull. His team used Telegram, YouTube ads, and fake partnerships to lure investors. The court ruled it wasn’t a bad investment - it was a criminal fraud.

Securities fraud is even more serious. If a token is sold as an investment opportunity - meaning people expect to profit from the efforts of others - it may be classified as a security under federal law. That triggers Rule 10b-5 of the Securities Exchange Act, which bans lying or hiding material facts in connection with the sale of securities. Many rug pulls involve teams promising future development, staking rewards, or exchange listings. If those promises were false, the SEC can step in. In 2025, the SEC filed its first major civil case against a DeFi protocol where the team secretly held 60% of the token supply and dumped it after a $120 million pump.

New York’s Groundbreaking Law: Illegal Rug Pulls Are Now a Crime

As of February 2025, New York became the first state to make rug pulling its own criminal offense. Assembly Bill 2025-A6515 created three new crimes:

Virtual Token Fraud (§ 191.10): Creating a token with no real utility and falsely marketing it as an investment.
Illegal Rug Pull (§ 191.15): Specifically targets developers who hold a large portion of tokens, drive up the price through manipulation, then sell everything at once, crashing the value.
Private Key Fraud (§ 191.20): Stealing or illegally accessing a user’s wallet key to drain funds.

The law defines an illegal rug pull as when a developer: (1) creates a virtual token, (2) markets it to the public as an investment, (3) retains a large portion of the supply, (4) artificially inflates the price, and (5) sells all their tokens in a single transaction, causing a sudden crash. This is no longer a gray area. If you do this in New York, you’re committing a felony.

State and Civil Laws: More Paths to Justice

Even outside New York, other state laws can apply. Every state has consumer protection laws that ban deceptive trade practices. If a team lied about their team members, fake audits, or fake partnerships, state attorneys general can sue. California, Texas, and Florida have all launched investigations into rug pulls targeting their residents.

Civil lawsuits are another option. Victims can sue for:

Common-law fraud: Proving intentional deception that caused financial harm.
Unjust enrichment: Arguing the developers profited unfairly from money they never earned.

These cases are harder to win than criminal charges because the burden of proof is lower in criminal court. But if the developers have assets - even cryptocurrency stored in traceable wallets - a civil judgment can lead to asset seizures or bank account freezes.

A shadowy figure draining cryptocurrency liquidity while investors reach out in despair.

Why Recovery Is So Hard

Even with laws on the books, getting your money back is rare. Why?

Anonymity: Most developers use burner wallets, offshore exchanges, and fake identities. Tracing them requires blockchain forensics - and even then, they often vanish into mixers or privacy coins like Monero.
International borders: Many rug pulls are run from countries with no extradition treaties or weak crypto laws - places like Russia, Nigeria, or parts of Southeast Asia. U.S. law enforcement can’t arrest someone there without cooperation.
Cost: Hiring a crypto lawyer, paying for blockchain analysts, and filing court documents can cost $20,000 or more. For most victims who lost $5,000, it’s not worth it.

That’s why regulators focus on big cases. The SEC won’t chase a $50,000 scam. But if a team stole $10 million, they’ll make it a priority. The SafeMoon case? It took two years of international cooperation, seized wallets, and blockchain tracing. That’s the exception - not the rule.

What Victims Should Do Immediately

If you’ve been rug pulled, don’t wait. Time matters.

Preserve everything: Save screenshots of the project’s website, whitepaper, Telegram group, Twitter posts, and any messages from the team. Record the exact date and time you bought the token.
Track the wallet: Use a blockchain explorer like Etherscan or Solana Explorer to find where the liquidity was pulled from. Note the addresses that received the funds.
Report it: File a complaint with the SEC (via sec.gov/complaint) and your state attorney general’s office. Even if they don’t act, your report adds to the evidence pile.
Consult a crypto attorney: Not every lawyer understands blockchain. Look for someone who’s handled crypto fraud cases before.

Tax Implications: Can You Write Off Your Loss?

The IRS treats crypto as property. If your token drops to zero, you can claim a capital loss. You report it as if you sold it for $0. That loss can offset capital gains from other investments - or up to $3,000 of ordinary income per year.

But here’s the catch: you can’t claim it as a theft loss under IRS Code § 165. Why? Because the IRS requires proof of criminal activity - like a police report or court conviction. Most rug pulls involve anonymous developers with no investigation, so the IRS sees it as a failed investment, not a theft. That means you get tax relief, but not the full benefit.

A prosecutor in court pointing to blockchain evidence against a masked crypto fraudster.

The Bigger Picture: What’s Changing

Rug pulls made up over 35% of all crypto scam revenue in 2024, according to Chainalysis. That’s why regulators are shifting tactics. The SEC is hiring blockchain analysts. The FBI has a dedicated crypto fraud unit. And New York’s new law is just the start. Other states are drafting similar bills. The EU is working on MiCA regulations that will require token issuers to disclose team identities and token distribution.

The message is clear: hiding behind decentralization won’t protect you anymore. If you’re running a rug pull, you’re not a pioneer - you’re a criminal. And the legal net is tightening.

How to Avoid Becoming a Victim

The best legal consequence is avoiding the crime altogether.

Check the liquidity lock. Is 80% of the token supply locked for 12+ months? If not, walk away.
Look at the team. Are their LinkedIn profiles real? Have they worked on other projects? Google their names.
Read the audit. Was it done by a reputable firm like CertiK or Hacken? Or a one-time audit from a shady company?
Watch the hype. If every influencer is pushing it and the project has no code on GitHub, it’s a red flag.

Frequently Asked Questions

Can you go to jail for running a rug pull?

Yes. In the U.S., rug pulls can lead to federal charges for wire fraud or securities fraud, with prison sentences of up to 20 years per count. New York’s 2025 law adds a specific felony charge for illegal rug pulls, with penalties of up to 7 years. The SafeMoon CEO received 100 months in prison - and more cases are coming.

Is a rug pull illegal in all countries?

No - but it’s becoming illegal in more places. The U.S., EU, UK, Australia, and Singapore treat rug pulls as fraud. In countries with weak crypto regulation, like some parts of Africa or Southeast Asia, enforcement is rare. But even there, if victims report the crime and the perpetrators have assets in regulated jurisdictions, they can be pursued internationally.

Can the police trace crypto from a rug pull?

Yes - but it takes time and expertise. Blockchain ledgers are public. Law enforcement uses tools like Chainalysis and Elliptic to trace transactions. If the stolen funds move to a regulated exchange (like Coinbase or Kraken), the exchange can freeze the wallet and freeze the funds. The harder part is identifying who owns the wallet - that’s where anonymity tools and offshore servers come in.

What if I lost money in a rug pull - can I sue the exchange?

Maybe. If the exchange failed to do proper KYC, allowed the scam token to be listed without a security audit, or ignored clear signs of fraud, you might have a case. In 2024, a class-action lawsuit was filed against a major exchange for listing a rug-pulled token despite internal risk flags. Success depends on proving negligence - not just bad luck.

Do I need to report a rug pull to the IRS?

You don’t have to report the scam itself, but you should report the capital loss on your tax return if you want to claim it. Use Form 8949 to report the token as sold for $0. The IRS doesn’t require proof of fraud - just that the asset became worthless. But don’t expect a theft loss deduction; that requires a police report and criminal charges, which most rug pulls lack.