I used to know only the term, too. It wasn’t until I looked into it more carefully that I really understood it.

When making a transfer, many people copy an address they used last time from their transaction history, glance at the first and last few characters, and hit confirm. Address poisoning takes advantage of exactly this habit.

People who frequently transfer stablecoins and use $ETH wallets are more likely to be targeted by address poisoning. Current: 2432.99 (24h -4.16%).

📌 What is address poisoning?

Attackers first target addresses that frequently send and receive stablecoins on-chain. Then they use software to generate a large number of addresses and pick out “lookalike addresses” whose first and last few characters match those of an address you often use.

Next, the attacker uses this similar-looking address to send you a tiny amount of money or zero-value tokens, making it appear in your transaction history. The next time you copy an address from your history, you might copy the fake one.

📌 Common disguises

Some token contracts allow transfers of zero tokens. Attackers exploit this to leave an on-chain record showing “0 tokens transferred from your address,” making it look as though you sent tokens to that address yourself.

Others issue counterfeit tokens with the same name as a popular stablecoin, in amounts similar to what you usually transfer, making the transaction look more authentic.

📌 Why it’s easy to fall for

An address is a long string of characters. An Ethereum address has 40 hexadecimal characters, and most people only check the beginning and end. But it’s not hard to generate an address with the same first and last few characters, so checking only those leaves you vulnerable.

This scam doesn’t require your private key or for you to sign any authorization. It relies only on you copying an address when making a transfer. Once an on-chain transfer is confirmed, it can’t be reversed, and assets sent to a similar-looking address are almost impossible to recover.

📌 How to protect yourself

Save frequently used recipient addresses in your wallet’s or platform’s address book or withdrawal whitelist, and always select them from there instead of copying them from your transaction history. Before transferring, verify the entire address, including the characters in the middle.

For large transfers, send a small amount first and confirm with the recipient that it arrived before sending the rest. Ignore unsolicited small or zero-value transfers, and don’t save the sender’s address as a frequently used address.

Some wallets and block explorers flag suspicious zero-value transfers or hide them by default. Pay close attention if you see such a warning.

📌 Summary

Address poisoning doesn’t exploit a technical vulnerability—it exploits a convenient habit. Replace “copy from transaction history” with “select from the address book,” and take an extra moment to check the middle characters. That’s enough to avoid this scam. Claims that you need to transfer funds first to unfreeze them are almost always scams.

If anything is unclear, leave a comment and ask.