Start with verification
On a block explorer, confirm the contract source code is verified. Unverified contracts hide what they actually do and deserve extra caution.
Check activity and holders
Look at transaction history, holder distribution, and age. A brand-new contract with concentrated holdings and sudden hype is a warning.
Look for audits and permissions
Search for a reputable audit and check owner and mint permissions. If one address can mint freely or change rules, the risk is higher. When unsure, do not interact.