A honeypot token is a scam where developers lock liquidity or code a contract so you can buy the token but can't sell it, trapping your money. The attacker profits from purchases while victims get stuck holding worthless tokens. Before buying any token, check the contract code on Solscan or similar explorers for suspicious patterns like disabled sell functions, massive tax on sales, or liquidity locked in a way you can't verify. Look for red flags like a newly created contract, zero social presence beyond hype, or promises of guaranteed returns. Use tools like Token Sniffer or similar checkers to scan for common honeypot indicators. Also check if the token owner has renounced ownership or if liquidity is locked by a trusted third party rather than held by the team. The safest move is to start small with any unfamiliar token and test a tiny sale to confirm you can actually exit before putting real capital in. One bad trade doesn't mean you're down for the count—do your homework first.