What Is Address Poisoning? A Crypto Scam Every Investor Should Know

Crypto wallet addresses are long, complex and easy to misread. Scammers know this, which is why address poisoning has become a growing risk for crypto users.

Address poisoning is a scam where criminals try to trick you into sending crypto to the wrong wallet address. It often relies on one simple habit: checking only the first and last few characters of an address before making a withdrawal.

How address poisoning works

In an address poisoning scam, a scammer creates a wallet address that looks similar to one you have used before.

For example:

Your intended address: 0x7F91aC42bE8309dA674c2F18e9B5D063aF21c804

Scammer’s lookalike address: 0x7F91aC42bE8309fA674c8F18e3B5D063aF21c804

At a quick glance, these addresses look almost identical, but they are completely different wallet addresses. The scammer may send a tiny amount of crypto, or even a zero-value transaction, to your wallet. This makes their lookalike address appear in your transaction history.

Later, when you go to send crypto, you may accidentally copy the scammer’s address from your wallet history, thinking it is one you have used before. Once crypto is sent to the wrong address, the transaction is usually irreversible.

Fake tokens and malicious wallet approvals

Address poisoning is not the only scam to watch for. Some scammers send fake tokens, suspicious NFTs or fake airdrops to crypto wallets. These may look like real assets or appear to have value, but the goal is usually to get you to interact with them.

That could mean clicking a suspicious link, visiting a fake website, trying to swap the token, or approving a malicious smart contract.

In some cases, a malicious approval may give a scammer permission to move other tokens from your wallet. If an unknown token appears in your wallet, the safest option is usually to ignore it.

Is address poisoning the same as device hacking?

No, address poisoning does not usually require the scammer to access your phone, computer or wallet. It works by manipulating your transaction history and hoping you copy the wrong address.

If a scammer has access to your device, browser, clipboard, seed phrase or wallet app, that is a different and more serious type of compromise.

For example, clipboard malware can replace a copied wallet address with a scammer’s address before you paste it. This is known as clipboard hijacking, and it is different from address poisoning.

How to protect yourself from address poisoning:

• Before sending crypto, always check the entire wallet address. Do not rely only on the first and last few characters.
• Avoid copying wallet addresses from transaction history unless you are certain they are correct.
• Be cautious with unknown tokens, fake airdrops and suspicious NFTs that appear in your wallet.
• Do not click links connected to unknown assets, and do not approve wallet transactions you do not understand.
• Where possible, use saved addresses or address book features from trusted platforms to reduce the risk of copying a scam address by mistake.

Stay Cautious

Crypto transactions are usually final once they are sent. Before making a withdrawal, take a moment to check the full wallet address. A few extra seconds can help protect your funds.

Learn more about how Cointree helps protect your account, assets, and personal information here: https://www.cointree.com/company/security/