A stranger’s message lands on Telegram: “Friend, are you playing contracts too?” Thirty minutes later the same person is pitching a token that “launches tonight at 19:00 on Sushi, Base chain,” offering to “take you buying coins” with “at least tens of multiples tonight,” and bragging about a “10,000x I found on Solana a few days ago.”
We’ve written about the Telegram scam economy and the social-media scam playbook from the outside, using other people’s research. This week one of these conversations arrived in our own inbox, and we let it run — then ran a small experiment on it. This article reproduces the chat (translated from Chinese, usernames stripped) and annotates every beat, because the script is easier to recognize forever once you’ve seen it laid out flat.
One honesty note up front: twice during this conversation, we deliberately pitched fabricated material back at the scammer — a fake paid-whitelist offer, and later a fake “10,000x” brag — same formats he was using, invented on the spot, to see how he’d react. Those experiments, and his reactions, are the most instructive part of the whole exchange.
The Chat, Translated
The original conversation is in Chinese; the lines below are faithful translations. “Us” is our side of the chat.
Stranger: Friend, are you playing contracts too? Us: No. Stranger: Then what are you playing? Us: AI. Do you play too? Us: There’s an AI Agent NFT launching soon, on Arc. Want in? Us: I can get you a WL. Stranger: Which coin? Us: NFT, not a coin. Stranger: Tonight there’s an AI coin, actually. Launches at 19:00, on Sushi, Base chain, right in your wallet. Us: I don’t do coins, I’m an NFT guy. Us: Whitelist is 1,200 U per slot. Want one? Stranger: Whitelist? Why don’t you call it a blacklist? Us: Where would a blacklist come from? Only coins have blacklists — the kind where money only goes in, never out. You buy, and they won’t let you sell. Stranger: Not playing. Us: Fine then. Stranger: If you want to play, I’ll take you buying coins. At least tens of multiples tonight. Us: Too little. I don’t bother with anything under ten or twenty multiples. Us: I found a 10,000x on Solana just a few days ago. Stranger: You can really brag. Us: You bragged first.
At that point the bragging contest collapsed into insults — his last substantive line was “don’t believe me? go watch it yourself,” and ours was “watch what, Base farm coins?” — and the conversation ended where these always end: nowhere. What follows is the same chat, slowed down.
Beat 1: The Probe — “Are You Playing Contracts Too?”
The opener is engineered to be answerable. Not “send me money,” not “join my group” — just a low-stakes question about a hobby. It exists to sort: anyone who replies with engagement is marked reachable, and the reply content routes them into a branch of the script. “I trade” leads to the mentor path. “I don’t trade” leads to the opportunity path. Silence ends the thread at zero cost — which is the point, because these operations run conversations in parallel, industrial scale, which is exactly the structure documented in our pig butchering anatomy.
The tell is structural, not linguistic: a stranger has no honest reason to care what you trade. No version of this question from an unknown account has an innocent explanation worth discovering.
Beat 2: The Adaptive Pivot — “Then What Are You Playing?”
We answered “AI.” Watch what the script does with that: the stranger’s pitch, minutes later, is an “AI token.” That is not a coincidence — the fallback pitch is assembled from whatever you revealed. Like crypto? The launch is a token. Like NFTs? There’s a mint. Mention AI, and tonight’s launch happens to be “about AI.” The script’s flexibility is its consistency: the product always matches the target’s stated interest, because the product was never the point.
Beat 3: The Launch — “Tonight at 19:00, on Sushi, Base Chain”
This is the core pitch, and every component earns its place:
- “Tonight at 19:00” — urgency. A fixed, near-term launch time removes the window in which you might research, verify, or ask someone. Decisions made under countdowns are the decisions scam economics depends on.
- “on Sushi, Base chain” — specificity as credibility. Naming a real decentralized exchange and a real chain makes the fictional launch feel anchored to verifiable infrastructure. The venue is real; that is not the same as the event being real.
- “right in your wallet” — the framing that you’re already equipped, no special access needed. Low friction, low suspicion.
Notice what the pitch never contains: a contract address, a team, a project name, anything checkable. “Tonight, 19:00, Sushi, Base” is a timestamp and a venue — all urgency, zero substrate. A genuine launch announcement links to something you can inspect before it launches.
Beat 4: The Mirror — We Pitched His Own Format Back
Here is our experiment. We told him: there’s an AI Agent NFT launching on Arc, and I can get you a whitelist slot — 1,200 U per slot.
Every component of this offer was fabricated by us, on the spot, by copying his format: an unverifiable launch (“AI Agent NFT” — a genre that genuinely exists and is genuinely used in scams), a scarcity mechanism (“WL”), a chain name-drop (“Arc”), and a paid-entry ask (“1,200 U per slot” — U being shorthand for USDT). Paid whitelist offers like this are among the most common Telegram scam formats: legitimate projects give whitelist spots away as marketing; charging admission inverts the incentive so that your fee is the product. Once it’s paid, nothing on-chain guarantees you anything.
We want to be precise about the ethics here: we lied to a scammer, in a format he would recognize, to observe the recognition. We consider that fair play in an unsolicited solicitation. We do not recommend readers run this experiment themselves — reasons at the end.
Beat 5: The Punchline — He Defined His Own Product
His response to our fake whitelist is the moment the whole chat was worth having:
Stranger: Whitelist? Why don’t you call it a blacklist? Us: Where would a blacklist come from? Only coins have blacklists — the kind where money only goes in, never out. You buy, and they won’t let you sell.
Read his objection again. Our fake offer offended him as an obvious scam — “whitelist, why not blacklist” is mockery, the way you’d sneer at a clumsy pitch. And when we defined “blacklist” for him — a coin you can buy but never sell — we had, without planning to, handed him the textbook definition of the honeypot he was about to launch “tonight at 19:00.”
A token that only takes money in and never lets it out is precisely a honeypot contract: the buy path works, the sell path silently reverts, and the chart looks like a rocket that only you can’t exit. The scammer’s own vocabulary contained the exact description of his own product. He simply never applied it in that direction.
Beat 6: The Decline, the Re-Pitch, and the Second Recognition
Two more beats complete the anatomy.
First: he declined our fake whitelist — “not playing.” A scam operator, offered a scam, declined it. His risk assessment worked flawlessly. He can identify a bad deal instantly when he is the one holding the money.
Second: having declined, he immediately re-pitched his own — “If you want to play, I’ll take you buying coins. At least tens of multiples tonight.” That line is the credibility core of the coin pitch: guaranteed-multiples language, which no honest trader ever attaches to a specific night. Promised returns with a deadline are not analysis; they are the product.
Third — the beat we hadn’t planned — we answered with the survivor-story format: “too little, I don’t bother with anything under ten or twenty multiples… I found a 10,000x on Solana just a few days ago.” A completely fabricated past win, unverifiable by design: no token name, no entry, no transaction. His response was two words: “you can really brag.” He diagnosed fake hype with perfect accuracy — as a listener. Then, when we pointed out he had opened the bragging contest himself (“you bragged first”), the persona dropped and the conversation went straight to insults. There was never a person to offend; there was a conversion funnel that closed.
That is now three for three: the fake whitelist, the fake urgency, the fake track record — he identified every one, in real time, from the receiving end, while running the identical formats on us from the sending end. Recognition asymmetry is not a bug in this business. It is the business.
The Script on One Table
| Beat | The line | What it does | Red flag |
|---|---|---|---|
| Probe | ”Are you playing contracts too?” | Sorts reachable targets | Stranger cares about your trading |
| Pivot | ”Then what are you playing?” | Harvests your interest to template the pitch | Pitch will mirror your hobby |
| Launch | ”Tonight 19:00, on Sushi, Base” | Urgency + real venue as false credibility | Fixed near-term time, nothing checkable |
| Scarcity | ”I can get you a WL / 1,200 U per slot” | Paid admission; the fee is the revenue | You pay for access |
| Credibility | ”At least tens of multiples tonight” | Guaranteed-return language | Multiples promised in advance |
| Survivor story | ”Found a 10,000x on Solana days ago” (we faked one) | Past luck presented as repeatable skill — he called it “bragging” when he heard it | Unverifiable past wins |
The One-Line Honeypot Test
If you keep one sentence from this chat, keep ours: before buying any fresh token, find out whether selling works. A honeypot passes every visual check — the chart rises, the DEX pair exists, the buy transaction confirms. The trap is only on the exit. Read the contract for sell restrictions or transfer hooks, run an automated honeypot check on the pair, or test with a dust amount and try to sell it back. Our longer guide covers the full verification workflow: how to spot rug pulls and honeypots, and the pre-purchase version: is this token a scam?. Many “launching tonight” tokens are also pump-and-dump or rug pull structures rather than hard honeypots — sells work fine until the operators leave, which is a different trap with the same table above applying.
Why We Don’t Recommend the Mirror Test
Running the scammer’s script back at him was informative, and it was satisfying. It was also the point where the conversation stopped being harmless:
- Engagement is training data for them. Every reply proves the account is active, human, and responsive — which raises its resale value if the pitch fails. The conversation you’re “wasting” is an asset being repriced.
- Scripts have hostile branches. When a target proves unconvertible but stays engaged, some operations pivot from the pitch to the payload: a “check the chart” link to a signature scam page, a fake airdrop claim that drains on approval. Trolling a scammer is free until it isn’t.
- You are not anonymous to them. Your handle, your language, your response style — all of it feeds targeting for the next attempt, from the next account.
The winning move against the probe is not to win the conversation. It is to never let the conversation have a second turn: no reply, block, report the account in-app to Telegram, and — if you already interacted, clicked, or signed something — our crypto scam reporting walkthrough covers what to do in the first hour.
Bottom Line
The chat above is funny, and we’ve laughed at it plenty. But laid flat, it is a complete specimen: probe, adaptive pivot, urgency launch, paid scarcity, guaranteed multiples, survivor story — six beats, every one of them visible in a 30-minute window, every one of them fatal alone. The scammer’s perfect ability to spot a scam when he was the target, while pitching one when you were, is not irony. It is the entire business model: recognition asymmetry, weaponized. Close the asymmetry — learn the six beats — and the script has nothing left to convert.
The conversation above is reproduced from a real chat captured this week; both counter-pitches (the paid whitelist and the “10,000x” claim) were ours, fabricated for this article’s experiment, and no money was sent in either direction.
Frequently Asked Questions
Is it a scam when a stranger on Telegram asks if I trade crypto or contracts?
Treat it as one. 'Are you trading perps/contracts?' is a low-commitment probe used to sort targets by interest and availability. A genuine trader has no reason to cold-open a stranger about their positions. If you reply with anything other than disinterest, the conversation moves to the pitch stage — a token launching 'tonight,' a paid whitelist, or an investment group. The safe move is to not reply and report the account.
What is a honeypot coin in plain words?
The clearest definition we've seen came from the chat in this article, delivered to a scammer: a honeypot is a token on the 'blacklist' side — you can buy, but the contract quietly reverts every sell. Your money goes in and cannot come out. Before buying any fresh token, check whether selling actually works: read the contract's transfer/sell restrictions, or use an automated honeypot checker on the pair, and never test with more than you can lose.
Someone is offering me a paid whitelist slot for an NFT or token launch. Is that legit?
Almost never. Legitimate projects distribute whitelist spots for free as marketing — asking you to pay for access (here: 1,200 USDT per slot) inverts the incentive: your fee is the revenue. Once paid, there is no chain-level mechanism that guarantees you anything. Paid WL offers arriving via cold DM are one of the most common Telegram scam formats.
The person pitching me got insulting when I joked back. Does that mean they're not a scammer?
No. When a target stops being convertible, the script drops the friendly persona fast — the mask slipping into insults is a feature, not proof of authenticity. Scam operators manage many conversations in parallel; there is no real relationship to preserve. End the conversation, block, and report rather than trying to win it.