Investing

How to Research a Crypto Project Before You Buy: A 2026 Checklist

· Updated · 11 min read

Comic-book illustration of an older archaeologist in a desert canyon brushing dust off a smiling silver coin while a meerkat inspects it with a magnifying glass and a second coin cracks open to show it is hollow inside.

Short answer: to research a crypto project you check five things before you spend a dollar. Who is behind it. What the token actually does. How the supply works and who holds it. Whether the code and the money are where the project says they are. And whether you can get out when you want to. This guide turns that into a 12-step checklist you can run in about an hour.

Research matters more than ever. The FBI says Americans reported $7.2 billion in crypto investment fraud losses in 2025, up 25% from the year before. Chainalysis estimates $17 billion was taken in crypto scams worldwide in 2025. Most of that money went to things that looked legit at first glance.

Why most crypto research goes wrong

Most people research the price chart and the hype, not the project. Price tells you what other people paid. It tells you nothing about whether the project is real, who controls the supply or whether you can sell.

FINRA warns investors to avoid investing based on social media posts, messages or videos and to watch for pump and dump schemes, fake coins and phishing. The SEC's Five Questions to Ask Before You Invest adds a simple rule many successful investors follow: never invest in something you do not understand.

The 12-step crypto research checklist

Run these in order. If a project fails a step marked as a stop sign, you can stop there.

# What to check Where to look Red flag
1 The problem it solves Official site, docs Only buzzwords, no clear user
2 Whether a token is even needed Whitepaper, docs Token exists just to be sold
3 The team Docs, LinkedIn, past projects Anonymous with no track record
4 Legal status and who sells it Investor.gov, FINRA BrokerCheck Unregistered seller, "guaranteed" returns
5 Supply, market cap and FDV CoinGecko, CoinMarketCap Tiny float with huge FDV
6 Unlock and vesting schedule Docs, token unlock trackers Large unlock in the next 90 days
7 Holder concentration Block explorer holders tab A few wallets own most of the supply
8 The contract and admin powers Block explorer Unverified code, owner can mint or freeze
9 Security audits Auditor's own website Logo only, old or partial report
10 Liquidity and where it trades Exchange order books, data sites Thin volume, one tiny venue
11 Real usage and development Explorer activity, GitHub No users, no code updates for months
12 Your exit and your size Your own plan No plan for how much you can lose

Step 1: Can you explain what it does in two sentences?

Read the official site and docs. Write down what problem the project solves and who it is for. If you cannot do it in two plain sentences after ten minutes, that is a yellow flag. Vague lines like "revolutionizing finance" with no real product behind them are another.

Step 2: Does it actually need a token?

Many projects could run fine as a normal app with no token. Ask what the token does that nothing else could. Does it pay fees, secure the network or vote on changes? Or does it just sit in wallets waiting to go up?

The SEC's bulletin on token offerings tells investors to ask what their money will be used for and what rights the token gives them. If the answer is "none, but the price could rise," you are buying a story.

Step 3: Who is behind it?

Find the founders and core team. Then confirm them somewhere the project does not control. Look for real work history, past projects and how those projects ended.

An anonymous team is not automatically a scam. Bitcoin's creator was never identified. But anonymous plus brand new plus big promises is a combination to skip. Search each team member's photo and name separately to make sure the person exists.

Step 4: Who is selling it and is it legal?

If someone pitched you the token, check that person first. Investor.gov and FINRA's BrokerCheck show if a seller is licensed and has a disciplinary record.

Also know what bucket the asset falls into. In a March 17, 2026 release the SEC sorted crypto assets into groups such as digital securities, digital commodities, digital collectibles and digital tools. Only digital securities get SEC investor protections. Most tokens you see on crypto sites sit outside that net, so your own research is the main protection you have.

Stop sign: guaranteed returns, pressure to buy right now or an unsolicited pitch from someone you met online. The SEC lists all three as classic fraud warnings.

Step 5: Read the supply, not just the price

A low price per token means nothing on its own. Supply matters.

  • Market cap = price × circulating supply (tokens trading today)
  • Fully diluted valuation (FDV) = price × total supply (including locked tokens)

CoinGecko explains that when more locked tokens are released the price per token may drop if demand does not keep up. Its supply methodology notes that team and foundation tokens are often left out of circulating supply.

Example (hypothetical): a new token trades at $0.50. It has 100 million tokens circulating and 1 billion total. Market cap is $50 million. FDV is $500 million. That means 90% of the supply is not trading yet. Unless demand grows 10 times, those future tokens can push the price down as they come out.

A quick rule: the closer market cap is to FDV, the less future supply hangs over the price.

Step 6: Check the unlock calendar

Look for a vesting or unlock schedule in the docs. Token unlock trackers and the tokenomics tab on major data sites also show it.

Ask how much unlocks in the next 90 days, who gets it and whether a contract enforces the schedule or a blog post just promises it. Early investors who paid a fraction of today's price often sell when their tokens unlock.

Step 7: Look at who holds it

Get the official contract address from the project's site or a major data site. Paste it into a block explorer and open the holders tab. Skip exchange wallets and the project's own contracts. If the top 10 wallets hold most of the supply, a few people can move the price or dump on everyone else. Ledger's research guide also suggests checking contract age and whether trades just bounce between the same few wallets, a sign of fake volume.

Step 8: Check the contract and who controls it

On the block explorer confirm the contract source code is verified. Then look for admin powers. Can an owner mint new tokens, pause transfers or block wallets? If so those powers should sit behind a multisig or a time lock and be explained in the docs.

Stop sign: unverified code or an owner wallet that can mint unlimited tokens with no limits explained.

Step 9: Open the audit report yourself

A badge on a website proves nothing. Go to the auditor's own site and find the report. Check the date, which contracts were reviewed and whether the serious issues were fixed. An audit covers the code it was shown at that time. If the project changed its contracts after the audit, the report may not cover what you are using.

Our guide on how to verify crypto proof of reserves shows the same "check the scope and date" habit applied to exchanges.

Step 10: Make sure you can sell

Liquidity is how easily you can sell without moving the price. Check daily volume, how many venues list the token and how deep the order book is. A token with $20,000 of daily volume on one small venue can be hard to exit even if the price looks great.

The venue matters too. See what happens if a crypto exchange gets hacked.

Step 11: Look for real use and real work

Real projects leave tracks. On the explorer look at active addresses and transactions over months, not days. On GitHub look for steady code updates from more than one person. Big marketing with no users and quiet code is a mismatch.

Step 12: Decide your size and your exit before you buy

Research ends with "how much," not "yes." The SEC says the only money you should put into a speculative investment is money you can afford to lose entirely.

Set your position size and what would make you sell. Our guides to crypto risk management basics and how to calculate position size in crypto show the simple math.

How to use AI to research a crypto project faster

AI tools like ChatGPT can cut hours of reading down to minutes. Used badly they can repeat a scam's own marketing back to you.

What AI does well:

  • Summarizes a long whitepaper into plain words so you can spot the core claim
  • Lists questions you have not thought to ask about a token's design
  • Turns this checklist into a scorecard for each project

Prompts that help:

  • "Summarize this whitepaper in five bullet points. Then list every claim that I would need to verify outside the document."
  • "Here is a token's supply data. Calculate market cap, FDV and the percent of supply not yet circulating."
  • "Act as a skeptical analyst. What are the biggest risks in this design?"

What AI cannot do:

  • It cannot confirm a team member is real or check a wallet in real time
  • It can be out of date and miss a recent hack, unlock or lawsuit
  • It can state wrong facts with full confidence
  • Feed it a scam's whitepaper and it may summarize the lies neatly

Scammers use AI too. Chainalysis found scams with links to AI vendors pulled in about 4.5 times more money per operation than those without. Fake team bios and polished whitepapers are cheap to make now. That makes Steps 3, 7, 8 and 9 more important, not less.

The rule is simple. Let AI read and organize. You verify. Our deeper guides on ChatGPT for crypto research and how to use AI for crypto trading show more prompts and their limits.

If you want a simple place to start, the free CCF Quick Start Guide walks you through your first steps.

A one-hour research routine

  1. 10 minutes: read the site and docs. Write your two-sentence summary (Steps 1 and 2).
  2. 10 minutes: verify the team and the seller (Steps 3 and 4).
  3. 15 minutes: pull supply, FDV and unlocks into a note. Let AI do the math (Steps 5 and 6).
  4. 15 minutes: block explorer and audit check (Steps 7, 8 and 9).
  5. 10 minutes: liquidity, usage and your own size and exit (Steps 10, 11 and 12).

Score each step pass, fail or unknown. Treat "unknown" as a fail until you can check it. Two or more fails means walk away.

Red flags that should end your research early

  • Promises of guaranteed or fixed high returns
  • Pressure to buy before a deadline or "before the listing"
  • Someone you met online or on a dating app guiding your trades
  • A site that will not let you withdraw unless you pay a "tax" or "fee" first
  • A copied whitepaper or a team that cannot be found anywhere else

The FBI says crypto investment scams often show victims fake profits, then charge fees when they try to withdraw. Our list of crypto scams to avoid walks through each type with examples.

Frequently asked questions

How do I research a crypto project as a beginner?

Start with three checks: what problem it solves, who is behind it and how the token supply works. Then use a block explorer to see who holds the token. Our 12-step checklist covers the rest in about an hour.

What is the most important thing to check before buying a crypto token?

Supply and holders. Compare market cap with fully diluted valuation, check upcoming unlocks and see how much the top wallets own. A great idea can still be a bad buy if most of the supply is waiting to be sold.

How can I tell if a crypto project is a scam?

Watch for guaranteed returns, pressure to buy fast, anonymous teams with no track record and blocked withdrawals. If you cannot verify a claim outside the project's own channels, treat it as false.

Can ChatGPT research a crypto project for me?

It can speed up reading, summarize whitepapers and do the math on supply. It cannot verify people, check live wallet data or catch recent news it does not know about. Use it as an assistant and check every fact yourself.

What is the difference between market cap and fully diluted valuation?

Market cap is price times the tokens trading today. Fully diluted valuation is price times the total supply, including locked tokens. A big gap means a lot of new supply could hit the market later.

Does a smart contract audit mean a project is safe?

No. An audit reviews specific code at a specific time. Check the date, scope and whether issues were fixed. Audited projects still get hacked.

Where can I check if a crypto seller is licensed?

Use the search tool on Investor.gov or FINRA's BrokerCheck to see if a person or firm is registered and if they have a disciplinary history. Report suspected fraud to the SEC, the FTC at ReportFraud.ftc.gov or the FBI's IC3.

The bottom line

Researching a crypto project is not about predicting the price. It is about cutting out the projects most likely to cost you money. Check the problem, the people, the supply, the holders, the code and your exit. Let AI do the heavy reading, then verify every fact yourself. New to all of this? Start with our crypto investing for beginners guide. If you want structured guidance on investing and trading digital assets the simple way with AI on your side, explore our CCF programs.

This article is general education, not financial, tax or legal advice. Figures are as of the dates noted and can change. Trading and investing in digital assets involves risk including loss of your capital.

Free Quick Start Guide

Want more like this?

Get the free CCF Quick Start Guide. Security and first-buy checklists, chart basics, the 1% risk rule and paper trading in one 42-page PDF.

By submitting you agree to receive calls and texts from Crypto Cash Flow (Digital Dash Marketing, LLC) about CCF at the number provided, including automated messages. Msg & data rates may apply. Msg frequency varies. Reply STOP to opt out, HELP for help. Consent is not a condition of purchase. SMS Terms · Privacy

Education only, not financial advice. We never share your details.

Prefer to talk? Book a call

Written by

Joshua Montoya, CCF co-founder

Joshua Montoya

CCF · Co-founder

Teaches trading and investing built on risk management, with AI to sharpen each decision. He lives by the power of 1%: small consistent daily effort makes you the person you want to be.

Marty Cooney, CCF co-founder

Marty Cooney

CCF · Co-founder

Has been in crypto since 2017 and helps people learn investing and trading through structured practical education built on risk management so they can decide with confidence and grow steadily.

Educational content only. This article is general education about digital assets, trading and investing. It is not individualized financial, investment, legal or tax advice, and it is not a recommendation to buy or sell any asset. Crypto markets are volatile and involve risk, including loss of principal; leveraged products can lose more than the amount committed. CCF does not guarantee any outcome or return. Do your own research and consider speaking with a licensed professional about your situation.

Keep learning