Safety guide
Solana volume bot scams: 8 red flags to check before you send SOL.
8 red flags to check before you send SOL to a Solana volume bot, and how to test one for free first, with no deposit and no private key.
Updated
A real case, July 2025
In July 2025, security firm SlowMist traced stolen funds back to a GitHub repo called “solana-pumpfun-bot”. It looked popular, with plenty of stars and forks. Hidden inside it was code that scanned the user's computer for wallet files and private keys, then sent them to the attacker's server.
Source: Cointelegraph
If you're a token dev about to pay for volume, this page is for you. It covers the 8 things to check before you send any SOL to a volume bot, and how to test a bot with no deposit before you trust it with real money.
Three ways volume bot buyers lose money.
Every red flag below protects you from one of these three.
The bot takes your keys.
You import a wallet, paste a seed phrase or run downloaded code, and the wallet is emptied. This is the most expensive way to lose, because it can take everything in the wallet, not just the budget for volume.
What you can loseEverything in the wallet
You pay and the service disappears.
The site takes the SOL, and then the Telegram bot stops replying or the domain goes dark.
What you can loseThe whole payment
You pay for volume that never arrives.
The run is shorter, smaller or slower than what you paid for, and you have no way to check it.
What you can losePart of the payment
8 volume bot red flags to check before you pay.
Each red flag comes with the safe sign to look for instead, and the loss it protects you from.
Red flag 1
It asks for your private key or seed phrase
A volume service doesn't need your keys to run volume. You send SOL to a deposit address, and the service trades from its own wallets. If any bot, site or “support” agent asks for a private key or seed phrase, stop there.
Check instead
You only ever send SOL to a deposit address. Nobody asks for your keys.
Protects you from Stolen keys
Red flag 2
It promises trending or a price move
No volume bot controls DEX rankings, trending lists or price. Those depend on things outside any bot, such as other traders, other launches and each platform's own rules. A “guaranteed trending” promise means either the seller doesn't understand the product or is counting on you not to.
Check instead
The seller tells you what volume does, and what it can't do.
Protects you from Short delivery
Red flag 3
It's code you download and run
The fake GitHub bot above had stars and forks, and those numbers can be bought or faked. Running someone else's trading bot on a machine that holds wallet files gives that code access to everything on it. Prefer a service you use through Telegram or a website, where your keys never touch its code.
Check instead
You use the bot in Telegram or on a website. There is nothing to install.
Protects you from Stolen keys
Red flag 4
No prices or fee math before you pay
A real service shows you the price, the target and the fees up front. Fees matter a lot here. Pump.fun and PumpSwap pools charge 1.25% on every buy and sell, five times the 0.25% of a standard Raydium pool, so the same budget makes far less volume on Pump.fun. If a seller can't show you that math before you pay, you can't check what you got after.
Pool fee on every buy and every sell - Pump.fun and PumpSwap pools1.25%
- Standard Raydium pool0.25%
5× the fee, so the same budget makes far less volume on Pump.fun.
Check instead
You see the price, the volume target and the fees before you pay.
Protects you from Short delivery
Red flag 5
A new domain borrowing a big name
Scam sites copy trusted names. One scam site, dressed up as a Solana volume bot, was flagged for impersonating Solana, and its domain was only weeks old when it was first detected. Check the domain's age, go to the bot from the official site rather than from a link someone sent you, and never connect a wallet to a site you reached from a DM. Connecting is how it starts: a 2025 study of Solana phishing found that transactions which hand control of a wallet to the scammer caused about 74% of $1.1 million in losses.
Check instead
The domain isn't brand new, and you opened the bot from the official site.
Protects you from Stolen keys
Red flag 6
“Support” DMs you first
Real support waits for you to message it. A “support agent” who messages you first, especially right after you posted in a public chat, is almost always a scam.
Check instead
You started the chat, from the support link on the official site.
Protects you from Stolen keys
Red flag 7
You can't watch the trades happen
If all you get is a “done” message at the end, you're trusting the seller's word. A good service shows every trade as it happens, with totals and wallet activity, so you can check the work on-chain while it runs.
Check instead
Every trade shows up as it happens, and you can check it on-chain.
Protects you from Short delivery
Red flag 8
No written refund terms
Ask what happens if a run never starts, and what happens to SOL you didn't use. If the answer isn't written down before you pay, assume there is no refund.
Check instead
The refund terms are written down before you pay.
Protects you from Vanished service
How to test a volume bot without risking much.
You don't have to trust any bot on its word, including ours. Test it in steps, and only add money once each step checks out.
- 1Free
Free volume trial, no deposit
Muno runs a small volume target on your token and stops by itself. It's one per user. The token must be on PumpSwap (a Pump.fun token has to graduate first), and cashback tokens aren't supported.
- 2Free
Free makers trial
30 unique makers on a PumpSwap token, delivered in about a minute. Check them on-chain.
- 3You pick the amount
A small DIY run
Send a small amount of SOL to the deposit address the bot gives you and pick a mode: Steady, Random or Micro. Turn on Live Feed and watch every trade. You can stop and restart at any time, and change settings mid-run. Muno charges 0.1% per trade plus the pool and network fees.
- 4From 3 SOL
Then a package
Once you've seen it run, managed packages start at 3 SOL for a 900 SOL volume target. Targets are planned for a 0.25% pool fee, so the bot shows a lower estimate on Pump.fun. Pool fees, network fees and wallet funding are all included.
That gets you three free or cheap checks before you commit a full budget.
How Muno answers each red flag.
| Number | Red flag | Muno |
|---|---|---|
| 1 | Asks for your private key or seed phrase | Never. You fund runs by sending SOL to a deposit address. |
| 2 | Promises trending or a price move | Never. Our pages say no bot can guarantee trending, ranking or price. |
| 3 | Code you download and run | None. Muno runs in Telegram (@MunoBot). |
| 4 | No prices or fee math | Package prices and targets are listed, and the bot shows an estimate before you pay. |
| 5 | Borrowed name on a new domain | Use munobot.xyz and @MunoBot, and open the bot from our site. |
| 6 | Support DMs you first | We never DM first. Support is only at t.me/nomad_pixel, and you message us. |
| 7 | You can't watch the trades | Live Feed shows every trade, plus totals and run status. |
| 8 | No refund terms | A package that never starts because of a Muno issue gets a refund or credit. Completed runs are not refundable. Unused DIY SOL can be withdrawn through support. |
What no volume bot can do.
What volume does
Volume adds on-chain activity to your token's chart.
Plan your launch on the assumption that volume is one input, not the outcome.
What volume can't do
- Decide trending lists
- Set DEX rankings
- Move the price
- Make anyone buy
Volume bot scam questions.
Short answers about trending promises, private keys, refunds and testing Muno.
Will a volume bot make my token trend?
No. No bot can guarantee trending, a DEX ranking or a price change, because those depend on factors outside the bot. Treat any seller who promises it as a red flag.
Is it safe to give a volume bot my private key?
No. A volume service only needs SOL sent to a deposit address. Muno never asks for a private key or seed phrase.
How do I check that a bot's site is real?
Go to the bot from the project's official site, check how old the domain is, and compare the Telegram handle letter by letter. Ignore any link that arrived by DM.
Can I get a refund from Muno?
If a package never starts because of a Muno technical issue, you get a refund or credit. Completed runs are not refundable. Unused DIY SOL can be withdrawn by contacting support, which handles each withdrawal by hand for safety.
How can I tell if Muno is legit?
Check it with the same list you would use on any bot. Muno never asks for a private key or seed phrase, runs in Telegram at @MunoBot, never DMs you first, and shows every trade in Live Feed so you can check it on-chain. The free volume trial lets you see all of this before you pay.
What's the cheapest way to test Muno?
The free volume trial needs no deposit, and the makers trial gives 30 makers free. After that, a small DIY run lets you watch real trades on your own budget.
Free trial rulesSend support the token address and goal. You do not need to buy first.
Ask supportSources, checked on
- Cointelegraph: Fake Solana trading bot on GitHub steals crypto wallet credentials (SlowMist findings, July 2025)
- arXiv: SolPhishHunter: Towards Detecting and Understanding Phishing on Solana (Sun Yat-sen University and GoPlus Security, May 2025)
- PhishDestroy: Domain report on a fake Solana volume bot site
- Muno docs: Getting started
- Muno docs: DIY settings
- Muno: Volume packages
- Muno: Pool fees for Pump.fun, PumpSwap and Raydium
Test Muno free before you send anything.
Start with the free volume trial. If you like what you see, try a small DIY run and watch every trade. Only then pick a package.