A honeypot is a fraudulent token whose smart contract permits buying but blocks selling for everyone except the creator. The victim sees a green chart, buys in, and is trapped.
Defense: check the contract through token screeners (Honeypot.is, GoPlus); never buy unaudited tokens.