Pause Before Sendwallet safety · scam watch

What is address poisoning, and how do I avoid sending crypto to a lookalike address?

Published · Updated

By J · Last updated:

Short answer: Address poisoning is a scam where someone sends a tiny or zero-value transfer from a lookalike address so it shows up in your transaction history. If you later copy that address instead of the real one, your crypto goes to the scammer and cannot be reversed. Never copy send addresses from history. (MetaMask)

Key facts

  • The fake address matches the first and last few characters of an address you use, so a shortened display looks identical. (MetaMask; Etherscan)
  • The planted transfer does nothing by itself. The loss happens only if you send to the lookalike. (MetaMask)
  • Chainalysis reported that crypto sent to address poisoning scams grew over 15,000% in 2024, "largely driven by a single massive attack in May." (Chainalysis, Feb 13, 2025)
  • On-chain transfers are final. MetaMask says funds sent to the wrong address "will be irretrievable." (MetaMask)

How does address poisoning work?

  1. You make a normal transfer. Scammers run software that watches transfers of certain tokens, usually stablecoins. (MetaMask)
  2. They generate a lookalike. A "vanity" address generator makes an address whose first and last characters match yours or your contact's. (MetaMask; Etherscan)
  3. They plant it in your history. They send a zero-value or tiny transfer from that address. Etherscan documents two more variants: fake tokens named like real ones ("token spoofing") and forged transfer events ("event spoofing"). Etherscan saw spoofed events appear within a minute of a real transfer. (Etherscan)
  4. You copy the wrong one. Next time you need that address, you copy the newest-looking entry from history and paste the fake.

For recent real cases with the real and fake addresses side by side, see our address poisoning tracker page.

How do I avoid sending to a poisoned address?

"Pay close attention to the middle characters, not just the start and end — those are the ones a poisoned address is designed to disguise."

  1. Get the address from the source. Ask the recipient, or open the exchange's deposit screen or your own wallet's receive screen. MetaMask says to avoid copying from history, even for your own addresses. (MetaMask)
  2. Save verified addresses in an address book and send from there. Etherscan also suggests contact lists, private name tags and its address-highlight feature. (MetaMask; Etherscan)
  3. Hide zero-value transfers on Etherscan, and don't touch tokens you didn't expect. (Etherscan; Trezor)
  4. Confirm the address on your hardware wallet's screen. Most hardware wallets show the destination on the device before you approve. (MetaMask)
  5. Don't click past wallet warnings. MetaMask now shows a blocking warning when a destination closely resembles an address you've used, and a separate alert for a never-used address. (MetaMask)

What should I do if I already sent crypto to a poisoned address?

Frequently asked questions

Is my wallet hacked if I received a zero-value transfer from a lookalike address?

No. MetaMask says the planted transfer "doesn't actually have any negative impacts in itself." The danger is only that you copy that address later. Ignore it and never send to it.

Can I stop scammers from sending transfers to my address?

No. MetaMask says there is no way to stop transactions to your address on a public blockchain. What matters is not copying the wrong address when you send.

Why does the fake address look exactly like mine?

Wallets and explorers often shorten addresses to the first and last few characters. Scammers generate addresses that match those characters, so the shortened versions look the same. The middle characters are different.

Can I get crypto back after sending it to a poisoned address?

Usually not. On-chain transfers are final. Report it at ic3.gov with the transaction hash, and ignore anyone who asks for a fee to recover it.

No affiliate links on this page, by policy.

Sources

  1. MetaMask Help Center, "Address poisoning scams" (undated help article). support.metamask.io (accessed 2026-10-24)
  2. Etherscan Information Center, "Address Poisoning Attacks," published 2024-01-15. info.etherscan.com (accessed 2026-10-24)
  3. Chainalysis, "2024 Pig Butchering Crypto Scam Revenue Grows 40% YoY as Industry Increases Sophistication," 2025-02-13. chainalysis.com (accessed 2026-10-24)
  4. Trezor, "Common scams and phishing affecting Trezor users" (undated help article). trezor.io (accessed 2026-10-24)
  5. FBI IC3, "FBI Guidance for Cryptocurrency Scam Victims" (I-082423-PSA), 2023-08-24. ic3.gov (accessed 2026-10-24)

Changelog