Token Listing Safety — Risks Around a Listing, Both Directions

Direct answer

Two frauds cluster around token listings. Advance-fee fraud targets projects: an unsolicited offer to arrange a listing for a payment sent to a personal wallet. Impersonator tokens target buyers: a contract copying a real project's name and ticker, promoted around the announcement. Both are defeated by the same habit — verify the identifier and the channel yourself, rather than trusting what reaches you.

Why listings attract fraud

A listing is announced, scheduled, and public. That gives attackers three things they usually lack: a known target, a known moment, and a plausible pretext.

A project expecting to pay a listing fee will accept an invoice without much scrutiny. A buyer expecting a new token to become tradable will search for it and buy the first result. Both expectations are reasonable, and both are the attack surface.

Fraud 1 — Targeting the project

The approach. Someone claiming to represent an exchange contacts you offering a listing. There is a fee, a deadline, and a wallet address. They may know your project name, ticker, and even that you have an application in progress.

Why it works. It arrives when you are already expecting to pay for a listing, from someone who appears to know your situation.

The defence is procedural, not analytical:

• Legitimate applications start from the exchange's published page, never from an inbound approach. If you did not initiate it, it is not real.
• Reach the invoice yourself. Type the exchange domain, log in, open your application. On CoinDock an invoice is tied to your application and visible in your authenticated account — never sent as an address in a message.
• If an invoice you were told about is not in your account, it does not exist.
• Ignore urgency. Real review processes have no reason to manufacture scarcity.

The diagnostic claim: no exchange can guarantee a price, a volume, or a performance outcome after listing. Any offer containing such a guarantee is fraudulent regardless of everything else about it.

See how to pay listing fees.

Fraud 2 — Targeting buyers

The approach. Around the announcement, a contract appears using the project's name and ticker. It is promoted through advertisements, replies to the announcement, and search results. Buyers acquire it believing it is the real token.

Why it works. Token names and symbols are not unique — they are just strings stored in a contract. Interfaces display names prominently and contract addresses barely at all, so the only unique identifier is the one nobody checks.

The defence:

• Take the contract address from the project's own domain or verified account, never from a search result, advertisement, reply, or message.
• Note the chain. The same project may deploy on several chains with different addresses; an address valid on one is meaningless on another.
• Verify before buying, using how to verify a smart contract.

What a project should do around its listing

This is where a project can materially protect its own community:

• Publish the contract address prominently on your own domain, before the announcement, and keep it visible.
• State the chain explicitly, and list every deployment if there are several.
• Say plainly that you will never DM first about payments, allocations, or approvals.
• Warn about impersonator tokens in advance. They will appear; a community told to expect them is far harder to defraud.
• Have someone available on launch day. Questions arrive fast, and an unanswered community fills the gap with whatever it finds.
• Do not announce a listing date before approval. It creates public pressure on an unconcluded process, and hands attackers a schedule.

What a buyer should do

• Get the address from the project, not from the announcement thread.
• Check bid-side depth before buying — can you sell back, and at what price? See how to avoid common liquidity traps.
• Treat the first hours as the least informative. On a thin new book, prices reflect who happened to be watching.
• Assume every unsolicited message about the listing is hostile.

What CoinDock will never do

• Contact you first offering a listing.
• Send a listing invoice as an address in a message.
• Guarantee a price, volume, or outcome after listing.
• Ask for your seed phrase or private keys.

Related

• Common Crypto Scams
• Coin Listing Requirements
• How to Verify a Smart Contract