Guides · Safety ·

How to tell a jetton apart by its master contract address

A jetton is identified by its master contract address, not by its ticker or name. Anyone can deploy a token called USD₮ with the same icon; only the master address is unique on TON.

Gram Wallet shows the token contract and its decimals on the review screen before you sign, and the token list folds away holdings whose ticker imitates a token the indexer marks as whitelisted. The trust flag itself comes from tonapi and has three values: whitelist, none, blacklist.

An absent flag is not a clearance. Most newly deployed tokens have none. Compare the master address against the one published by the project you expect, character by character.

Browse token transfers

What this covers

  • Covers jettons on TON mainnet as displayed in the Tongram explorer and in Gram Wallet.
  • Assumes you already have the address the project itself publishes for its token. Tongram does not maintain its own list of legitimate tokens.
  • Does not cover GRAM itself, which is the network coin and has no master contract.

Steps in Tongram

  1. Open Explorer, then Transfers, then Tokens. Paste the master address into the token filter; the header shows name, symbol, supply, decimals and whether the token is still mintable.
  2. In Gram Wallet, open Assets. Tokens folded away are listed under a switch with the reason, for example "imitates verified USD₮"; nothing is deleted.
  3. Tap a token and start a transfer. On the review screen, read the Token contract line and Decimals before pressing Send.
  4. Compare the full master address to the one the project publishes. A match on the first and last four characters is not enough.
  5. If the recipient or the token is flagged, the outcome box says so. Cancel from the review screen; nothing is broadcast until you confirm.

What you see and where it comes from

  • Balances, symbol, name, image and decimals come from Toncenter v3 jetton wallets with metadata. When decimals are missing, the wallet assumes 9.
  • The trust flag comes from tonapi jetton verification per master address. Whitelist, blacklist, or none; if the request fails, every token is treated as unknown.
  • Imitation detection is local: tickers are normalised (₮ and T, О and 0, l and 1) and compared against whitelisted tokens in the same wallet.
  • Supply and mintable status in the explorer header come from Toncenter jetton master data.

Freshness and limits

  • A missing flag means only that tonapi has not classified the master. It does not say the token is legitimate.
  • A whitelist flag is the indexer’s opinion, not a statement by Tongram or by the network.
  • Metadata can be off-chain and can change after you saw it. The master address cannot.
  • The imitation check only sees tokens present in the same wallet. A lookalike of a token you do not hold is not caught this way.

Common mistakes

  • Trusting the icon and ticker. Both are free-form metadata set by whoever deployed the contract.
  • Reading an amount without checking decimals. 1,000,000 units of a 6-decimal token is 1 token.
  • Treating "not flagged" as "checked". Unknown is the default state for most jettons.
  • Checking the jetton wallet address instead of the master. Each holder has their own jetton wallet; the master is shared.

Sources

Related