Emerging Scams · Crypto Security
Crypto Address Poisoning
The scam that turns your own transaction history against you — by slipping in a wallet address that looks almost exactly like one you trust.
Updated Aug 2026 · 6 min read
In December 2025, someone sent a $50 test transaction, saw it arrive, and then moved the real amount — 49,999,950 USDT. Twenty-six minutes later it was gone. They hadn’t been hacked. They’d copied a wallet address from their own history that looked right but wasn’t.
That’s address poisoning: an attacker plants a lookalike address in your transaction history so that, next time you pay, you copy theirs by mistake. It exploits a simple human habit — we recognize a wallet address by its first and last few characters, never the middle.
Why it’s so costly
It has scaled into an industry. One study counted over 270 million poisoning attempts on BNB Chain and Ethereum in two years; the successful ones drove tens of millions in losses. The pace hasn’t slowed — Ethereum users alone lost a reported $62 million to address poisoning across December 2025 and January 2026, including a single $12.4 million mistake after the victim’s wallet had been quietly “dusted” for two months. The losses are large because the attack targets the one moment you’re moving real money.
How the attack works
They watch your wallet
Automated bots scan the blockchain for wallets that just moved funds to a counterparty — an exchange deposit address, a friend, a business.
They craft a lookalike
They generate a “vanity” address whose first and last few characters match that counterparty’s. At a glance — which is all most people check — it looks identical.
They poison your history
They send you a tiny “dust” transfer, or even a zero-value token transfer, from the lookalike address. Now it sits in your transaction history, looking like an address you’ve used before.
You copy the wrong one
Next time you pay that counterparty, you copy the address from your history to save time — and grab the poisoned lookalike instead. The crypto goes to the attacker, and because blockchain transactions are irreversible, it’s gone.
Red flags in your wallet
- A tiny or zero-value transfer from an address that “almost” matches one you’ve paid before.
- Unexpected token spam or dust landing in your wallet, especially just after you sent a payment.
- Clusters of small transactions appearing near the time you last paid a counterparty.
Check an address before you send
Paste the address you’re about to send to and the one you meant to use. Our checker highlights the matching ends versus the different middle — and flags the poisoning pattern instantly.
Open the address checker →How to protect yourself
- Verify the WHOLE address, character by character — never just the first and last few.
- Never copy an address from your transaction history. Get it from the original, trusted source every time.
- Save trusted addresses to a whitelist or address book and reuse those, not your history.
- For any large transfer, send a small test amount first and confirm it arrives before sending the rest.
- Use a hardware wallet, which makes you confirm the real destination on a separate screen.
Frequently asked questions
What is a zero-value transfer?
A quirk of the ERC-20 token standard lets anyone move zero tokens “from” any address without permission, paying only a little gas. Attackers use it to make a lookalike address appear in your history as if you’d interacted with it — no dust needed.
Can I get funds back if I sent them to a poisoned address?
Almost never — blockchain transactions are irreversible. If the funds land at an exchange you can report it fast and they may freeze the account, but recovery is rare. And beware anyone who contacts you promising to recover funds for a fee; that’s a follow-up scam.
How do I check an address before sending?
Verify the whole address, not just the ends, and compare it against a saved contact or the original trusted source — never your transaction history. Our free Crypto Address Checker compares two addresses and flags the poisoning pattern for you.
Does a hardware wallet help?
Yes. A hardware wallet makes you confirm the real destination on a separate screen, which defeats many address swaps and malware — though you still must verify the full address.
Keep going: check an address now, or browse all our scam guides.
Sources: ScamSniffer and on-chain security research; academic analysis of BNB Chain and Ethereum poisoning attempts; 2025–2026 incident reporting. Figures are drawn from public reporting and should be verified against primary sources.