Beyond the basic buy-high-sell-low mechanics, pump and dump schemes in crypto usually follow a repeatable playbook run through private Telegram or Discord groups. Organizers quietly accumulate a low-cap, illiquid token before announcing it, so their own buying does not tip off the market. Group members are ranked in tiers, with paying "VIP" insiders getting the buy signal seconds or minutes before the free, general audience. When the public signal finally drops, a coordinated wave of buying spikes the price, and the organizers and early tier sell into that demand, leaving latecomers holding a token that quickly collapses back toward its starting price.
Low market capitalization tokens are the preferred target because even modest coordinated buying can move the price sharply, and thin order books make the ensuing crash just as violent. Memecoins launched through permissionless tools are especially exposed, since anyone can create a token in minutes with no vetting.
Where a token qualifies as a security, regulators such as the U.S. Securities and Exchange Commission (SEC) can and do pursue pump and dump organizers for fraud and market manipulation, and some cases have resulted in multi-million dollar settlements. In practice, enforcement is difficult: schemes often originate from anonymous, offshore, or pseudonymous accounts operating across borderless blockchain networks.
Warning signs include sudden social media hype around an obscure token, promises of guaranteed gains, invite-only trading groups, and price charts showing a sharp vertical spike followed by an equally sharp drop. Traders who buy after the hype starts typically become the organizers' exit liquidity.