Pump.fun volume bot scams, how to spot one before paying

Published September 1, 20263 min readVolume bots

The five common scam shapes, the questions that expose each of them, how to verify delivery on chain afterwards, and what a legitimate service looks like.

Two categories of problem exist here, and conflating them wastes your attention.

Outright theft, which is loud and avoidable. And quiet under-delivery, which is far more common and costs more in aggregate because almost nobody checks.

Shape one: the key request

Any service asking for your seed phrase or private key is stealing from you.

Trading on your coin requires no access to your wallet whatsoever, since the coin is public and anybody at all can trade it without your permission, which means the mint address is genuinely the only thing a legitimate operator ever needs from you.

No explanation makes this acceptable. Not verification, not setup, not "connecting your wallet to the engine". Seed phrase safety covers why the words are the account.

Shape two: the guarantee

"Guaranteed top 3 trending" is a promise nobody can keep.

Ranking is computed against a field of other coins that changes every few minutes, so delivering a specific position would require controlling those other coins. The seller knows this.

Which makes a promised position the tell, regardless of anything else on the page. Read the wording carefully, though, since a promised remedy is a different claim: "we re-run it free if you never appear" is checkable against a written policy, while "top 3 guaranteed" is not checkable against anything. Can you buy Pump.fun trending covers what is and isn't purchasable.

Shape three: the unpriced signature

You're asked to approve a transaction rather than send a fixed amount.

Sometimes fine. Sometimes the transaction does considerably more than the button claims, because your wallet executes whatever instructions it contains rather than the label somebody put on the button. A manual transfer of a stated amount can't do that, since the amount is bounded by what you typed.

So if a service can't quote a fixed price and take a fixed payment, ask why. Paying for crypto services safely covers the safe flow.

Shape four: quiet under-delivery

Most common by a wide margin, and it doesn't look like a scam at all.

You pay for 200 SOL of volume. Roughly 120 SOL lands, because the operator never tracks confirmations or resubmits anything during congestion, and the shortfall stays completely invisible for the simple reason that almost nobody goes and counts the trades on chain afterwards.

Was anything stolen? Not obviously. You got 60% of what you paid for. Cheaper services fail this way constantly, and that's a large part of why they're cheaper. Free volume bots covers the mechanics of the shortfall.

Shape five: the visible cluster

Subtler damage, and it lands on your coin rather than your wallet.

Some tools fund every trading wallet in a straight line from one source. That produces a star pattern in any clustering tool, visible to anybody who looks, on your coin, permanently.

You've paid for something that makes your holder chart worse. Wallet clustering explained covers what gets rendered, and it takes a stranger 20 seconds.

Questions that expose all five

Ask these before paying anything:

  1. What do you need from me? Anything beyond the mint address and payment is wrong
  2. Is the total fixed before I commit? It should be visible in full
  3. Does the quoted volume mean landed trades or attempted ones? A vague answer means nobody's tracking
  4. How are the trading wallets funded? Straight-line funding from one source draws a cluster
  5. What happens if my coin graduates mid-campaign? A real engine reroutes, a script breaks

Verifying afterwards

The part almost nobody does, and it settles everything.

Open your mint on Solscan and count the trades during the campaign window. Volume is public. Whether the operator delivered what they sold is a matter of arithmetic rather than opinion, and it takes about 10 minutes.

Do it once and you'll know whether to use that service again. Where Pump.fun data comes from covers pulling the numbers.

The filter, in four lines

Nobody needs your keys. Nobody can guarantee a ranking. Fixed price, shown before you commit, paid manually. Then count the trades on chain afterwards, because the chain is the only source that has no incentive to flatter anyone. The console shows the full cost before anything is signed.

Frequently asked

What is the single clearest warning sign?

Any request for your seed phrase or private key. No service needs either one to trade on a coin, since the coin is public.

How do I verify a campaign actually ran?

Count the trades on chain. Volume is public, so the delivered amount is checkable and the answer is not negotiable.

Are the cheap ones always scams?

Not always, and cheap frequently means under-delivery rather than theft, which is harder to notice and often costs more.

How to check this yourself

Everything in this guide describes mechanics that settle on Solana mainnet, so you can check any of it yourself. Mint addresses, swap signatures, curve progress and wallet counts are all public, and an explorer will disagree with us if we are wrong.

Curvegrad sells a volume service, and guides that touch on what a campaign does say so in the text rather than in a footnote.

what this is based on
  • Solana mainnet transaction history, read through the standard RPC methods
  • Pump.fun bonding curve and PumpSwap pool accounts as they appear on-chain
  • Public block explorers, where every claim here can be verified against a real mint
  • Campaigns run through our own engine, which is where the operational detail comes from