An address poisoning scam tricks you into sending funds to a fake wallet address that looks almost identical to one you have used before. Scammers plant this address in your transaction history through tiny “dust” transfers, then wait for you to copy it by mistake.
You can protect yourself by never copying addresses from your history, verifying the full string before sending, and testing small amounts first.
At Crypto Accountants, we see the fallout from scams like this firsthand.
If you’d like a second pair of eyes on your wallet security, call us at 0208 638 5800. We are happy to help.
Address Poisoning Scam: The $100K Copy-Paste Mistake
According to KuCoin, the attacker planted a fake address in the victim’s wallet history. They sent small “dust” transfers using an address that looked almost identical to a real one the victim had used before.
The fake address matched the first and last few characters of the real one. Most wallets only show these parts, so the trick works well.
Later, the victim needed to send funds. They opened their transaction history, copied what looked like the right address, and sent over $100,000.
Within seconds, the attacker swapped the stolen USDT into ETH. This move helps scammers dodge freezes, since Tether can lock stolen funds but Ethereum offers no such protection.
One trader lost $12.4 million in ETH the same way. Another lost $649,000 after a $10 dust transfer set the trap.
Total losses from this scam reached $62 million in just a few months. Scammers rarely rely on just one trick, either. Many pair address poisoning with social engineering tactics to build trust before striking.
Why Does an Address Poisoning Scam Work So Well?
Most people trust their transaction history without a second thought. That trust is exactly what scammers count on when they attack via an address poisoning scam.
1- Trust in Transaction History
Most people trust their transaction history. They assume any address listed there must be safe, since they seem to have used it before. Scammers exploit this trust directly.
2- The Truncated Address Trick
Wallets and blockchain explorers often shorten long addresses. You typically see only the first four and last four characters, with dots in between. Scammers study this pattern and build addresses that copy those same visible characters. The middle section, which nobody checks, holds the difference.
3- Dust Transfers Are Cheap for Scammers
Because dust transfers cost almost nothing, attackers can plant hundreds of poisoned addresses across many wallets. Then they simply wait. Sooner or later, someone gets careless and sends real money to the fake address instead of the real one.
Warning Signs to Watch For
A few small habits can help you catch this address poisoning scam before it costs you anything. Here’s what to look out for.
1- Unrecognised Small Deposits
Pay attention to unexpected transfers. If you receive a small deposit you don’t recognise, treat it as a red flag rather than free money.
Never interact with it, and never send it back, since doing so confirms your wallet is active and worth targeting.
2- Addresses Used Only Once
Check your history for addresses you used only once.
If you don’t remember the transaction clearly, don’t trust the address blindly. Scammers count on faded memory and rushed decisions.
6 Habits That Keep Your Wallet Safe from Address Poisoning Scam
Building a few habits can shut this scam down completely.
None of them takes more than a minute, but together, they close the exact gap scammers rely on.
1- Stop Copying Addresses from Your Transaction History
Stop copying addresses from your transaction history. Instead, save trusted addresses in a personal address book inside your wallet app.
Then, always send funds from that saved list, not from old transaction records.
For example, if you send USDT to the same exchange wallet every month, save it once as “Binance Deposit” instead of copying it fresh from history each time.
2- Verify the Full Address, Not Just the Ends
Verify the full address before sending anything.
Don’t just glance at the first and last characters.
Compare the entire string, character by character, or use a tool that highlights differences automatically.
For instance, 0x4A2f…9B3c and 0x4A2f…9C3d look identical at a glance but belong to two completely different wallets.
3- Test Before You Trust
Send a small amount first, confirm it arrives safely, and only then send the full amount.
This one habit alone would have prevented every case mentioned above. If you are sending $50,000 in USDT, send $5 first, wait for confirmation on-chain, then release the rest.
4- Use Address Allowlisting on Exchanges
Use address allowlisting if your exchange offers it.
Many platforms let you lock in approved withdrawal addresses, often with a delay before new ones become active. This gives you time to catch mistakes before funds move.
Coinbase and Binance, for example, both offer this feature under withdrawal security settings.
5- Add a Hardware Wallet for Large Transfers
Consider a hardware wallet for large transfers. These devices show the address on their own screen, separate from your computer or phone. Since malware sometimes swaps addresses on infected devices, this extra screen adds a real layer of protection. A Ledger or Trezor device, for instance, forces you to confirm the exact address on its own display before signing any transaction.
6- Turn On Monitoring Tools That Flag Lookalike Addresses
Use monitoring tools built to catch lookalike addresses.
Several wallet extensions and blockchain explorers now flag suspicious address patterns automatically.
Adding one of these tools costs little and adds meaningful protection.
Etherscan’s address-labelling warnings and browser extensions like Wallet Guard are two easy starting points.
If You Think You Have Been Targeted in an Address Poisoning Scam
Scan your wallet history for addresses you don’t fully recognise.
Compare them carefully against your known contacts. If anything looks even slightly off, remove it from your saved list and avoid using it again.
If your wallet shows signs of repeated dust transfers, consider moving your funds to a brand-new wallet entirely.
This step feels inconvenient, but it removes any risk tied to a poisoned history.
If You Have Already Lost Funds in an Address Poisoning Scam
Act quickly.
Check whether the stolen funds still sit in the attacker’s wallet or have already moved elsewhere.
Report the incident to your exchange right away, especially if the funds passed through an on-ramp or off-ramp service.
Blockchain analytics firms sometimes track stolen funds across chains, so reporting early gives you the best chance.
That said, recovery remains rare.
Once funds convert to another token, as happened in the $100,000 case above, freezing becomes nearly impossible.
Prevention will always beat recovery here.
For Crypto Accountants
If you manage client funds or reconcile wallets professionally, the address poisoning scam carries extra weight.
A single poisoned address slipping into a client’s payment batch creates real financial and reputational damage for your practice.
The same discipline applies when you are monitoring for pump-and-dump schemes or other forms of market manipulation on behalf of clients. A verified process catches problems before they become losses.
Build a verified address book for each client, updated only through a secondary channel like a phone call or secure message.
Require two people to approve any transfer above a set amount, with one person preparing the transaction and another independently checking the address.
These simple controls turn a personal habit into a firm-wide safeguard.
Final Thoughts!
An address poisoning scam thrives on speed and routine. Attackers don’t need to hack your wallet or steal your keys. They just need you to trust a familiar-looking address for one careless moment.
Slow down before your next transfer. Check the full address. Send a small test amount first. These small steps take seconds, but they can save you from losing everything.
Want an extra layer of protection? At Crypto Accountants, we help traders and investors stay ahead of risks like this with crypto tax preparation, advisory, and full wallet health checks.
Book a FREE 30-minute consultation, and let’s make sure your portfolio stays secure and compliant.
