Impersonator Token Detector
Free to download on every platform. Comes pre-installed on BotFone, BotPad and BotFlip — with extra free apps included.
About this app
WHAT IT DOES
Impersonator Token Detector reads live on-chain data from any EVM token contract and uses AI to detect impersonation attempts, lookalike names, bytecode clones, and suspicious deployment patterns. It examines token metadata including name, symbol, decimals, and total supply, flagging visual spoofing with lookalike characters (e.g., "ο" instead of "o", "0" instead of "O"), extra spaces, or similar spelling to legitimate tokens. It computes a bytecode fingerprint to detect tokens that are clones or near-clones of known projects. It analyzes deployer address and creation timestamp to identify patterns associated with scam factories. It scans holder distribution to detect extreme concentration that enables manipulation. The AI generates a plain-language verdict—GENUINE, SUSPICIOUS, or IMPERSONATOR—along with specific explanations of the impersonation risks before you trade or interact with the token.
HOW TO USE
Paste any EVM token contract address into the input field. The tool reads the contract's bytecode and queries standard ERC-20 metadata methods including name(), symbol(), decimals(), totalSupply(), and owner(). It computes a bytecode fingerprint hash to compare against known legitimate token patterns. It scans transfer event logs to build a holder distribution map and calculate top holder concentration. It analyzes the deployer address for known scam patterns. The AI receives all this data and returns a verdict: GENUINE (no impersonation indicators), SUSPICIOUS (some concerning patterns), or IMPERSONATOR (likely impersonating a legitimate token). The AI also provides a detailed plain-language explanation of the specific impersonation risks and what to look out for before trading.
CHUNKED LOG SCANNING WITH AUTOMATIC BACKOFF AND BYTECODE FINGERPRINTING
The tool fetches transfer event logs to build holder distribution maps. Public RPC endpoints enforce varying block range limits per request—some allow 10,000 blocks, others only 2,000, and some reject requests that span more than a few hundred blocks. This tool automatically detects the per-request range limit by probing and adjusts batch sizes accordingly. It walks backwards from the current block in chunks and, if a request fails due to a range limit, it halves the chunk size and retries. If a request fails due to rate limiting, it backs off exponentially and resumes from the last successfully scanned block. The scan is capped to the most recent 200,000 blocks to balance completeness against performance; older tokens may show partial holder data, but the most active holders are still captured. Additionally, the tool computes a bytecode fingerprint hash from the first 64 bytes and total length of the deployed bytecode, enabling detection of tokens that copy legitimate bytecode but deploy under fake names or with slight modifications. The fingerprint is compared against known legitimate token fingerprints to identify clones.
WHAT IT CANNOT SEE
This tool cannot detect off-chain impersonation, fake websites, or social media scams that direct users to fraudulent tokens through external links. It cannot analyze bytecode that is obfuscated beyond EVM disassembly limits. It cannot verify that a token's name/symbol match the official project's off-chain branding; it only compares on-chain strings against common patterns. It cannot detect tokens that perfectly impersonate legitimate tokens by cloning the bytecode identically and using identical metadata—in that case, the token is indistinguishable on-chain from the original. It cannot determine if a token's off-chain metadata, logo, or website is fraudulent. It cannot detect token impersonation that occurs through off-chain URL redirection or metadata manipulation. It cannot detect tokens that impersonate legitimate projects through fake liquidity pools or forged trading volumes.
PLEASE NOTE
EVM chains only. This tool reads on-chain data and generates AI explanations—it does NOT sign transactions or execute any on-chain actions. The wallet's own signature prompt remains the final gate for every real action. Always review the exact transaction details in your wallet before approving any token purchase, transfer, or approval. The AI assessment is informational only and does not constitute financial or security advice. Always verify token contract addresses against official project documentation before interacting with any token.