CryptoGal Glossary
Address Poisoning
A scam where an attacker sends you a tiny transaction from a wallet address that looks almost identical to one you already use, hoping you copy the wrong address next time.
Address poisoning is a trick that lives in your transaction history. The attacker creates a wallet address that starts and ends with the same characters as one you use often, then sends you a dust-sized payment so it appears in your history. Later, when you copy an address from history to send funds, you may grab theirs instead of yours.
How it works
Wallet apps often show only the first and last few characters of an address to keep things tidy. Attackers use tools to generate addresses that mimic yours at both ends. Because most people copy addresses from recent transactions, one careless tap sends the funds straight to the scammer.
Red flags
- A tiny incoming transaction from an unknown address that looks familiar.
- Two very similar addresses appearing in your history back to back.
How to protect yourself
Never copy an address from your transaction history. Always paste it fresh from the source, verify the full string, and consider using a saved contact book inside your wallet for people and platforms you send to often.
Related terms