Unless you enable the setting to show risk tokens, they are hidden by default