Address Poisoning and Dusting
Address poisoning sends you a tiny transaction from an address that looks almost identical to one you use, hoping you copy it from your history next time. Dusting sends tiny amounts to many wallets to track or target them. Always check the full address before sending.
You send crypto to an address you have used a dozen times — except this time it isn't that address. Address poisoning is built to make that mistake easy.
- Category
- Cryptocurrency and Blockchain
- Reading time
- 3 min
- Also called
- Address poisoning attack, Dusting attack, Lookalike address scam
- Updated
Address poisoning in plain words
Criminals send tokens from addresses that closely resemble ones you have used before; the FBI calls this an address-poisoning attack.1
The start and end characters may match, but the middle characters differ.1
Scam toolkits use scripts to seed or dust targeted addresses with small payments.2
How to protect yourself
Spot the bait
Be wary when a new address suddenly appears in your wallet history.3
Don't copy from history
Victims copy the lookalike address instead of the right one.2
Check the middle
Compare the middle characters, not just the first and last.1
Verify fully
Check the exact address character by character.2
Use a saved book
Use a verified address book entry.
Double-check before sending
Criminals rely on you skipping that final check.1
Worked examples
Example 1 — The near-miss
Lookalike spottedYour exchange address is 0xA1b2…9F3e. A dust transfer arrives from 0xA1b2…9F3e with a different middle.
| First/last 4 match | Yes |
| Full match | No |
Truncated displays hide the differing middle characters.1
Example 2 — The loss
−2,000 USDCYou copy from history and send a hypothetical 2,000 USDC.
| Sent to scammer | 2,000 USDC |
| Recovered | 0 |
Copying the lookalike from history is exactly how the scam works.2
Example 3 — Test transfer
Funds arrive safelyYou send 5 USDC first, verify receipt, then 1,995.
| Test | 5 USDC |
| Total | 5 + 1,995 = 2,000 USDC |
Verifying character by character before the main transfer avoids the trap.2
Address poisoning vs dusting
| Aspect | Address poisoning | Dusting |
|---|---|---|
| Aim | Trick you into sending funds | Track or target wallets |
| Method | Lookalike address in history | Tiny amounts to many wallets |
| Your risk | Sending to wrong address | Privacy loss, follow-up scams |
| Defence | Verify full address | Don't interact with dust |
When to be careful
Stablecoin transfers
Common targets for Stablecoin senders.
Exchange deposits
Moving funds to an Exchange.
Regular payments
Repeated transfers create history to mimic.
Wallet hygiene
Part of your Pre-Trade and Post-Trade Checklists.
Advantages and disadvantages
Advantages
- Easy to prevent with checks.
- Test transfers limit losses.
- Address books reduce copy errors.
Disadvantages
- Transfers are usually irreversible.
- Truncated displays hide differences.
- Attacks are automated and cheap.
- Fake tokens can look legitimate.
Going deeper
Read as far as you need. Each level builds on the one before it.
Common mistakes
Copying from history
The scam's main trigger.
Checking only ends
Middle characters differ.
Interacting with dust tokens
Can lead to further scams.
Skipping test sends
Large first transfers.
Check your understanding
Test yourself before moving on. Each answer comes with an explanation.
Key points to remember
- Poisoning plants lookalike addresses in history.
- Ends match; middles differ.
- Never copy from history.
- Verify every character.
- Dusting tracks or targets wallets.
Frequently asked questions
Can I reverse a poisoned transfer?
Is dust dangerous by itself?
Do hardware wallets prevent it?
Further learning
- Stablecoin
Common scam target.
- Pre-Trade and Post-Trade Checklists
Build a send checklist.
- Exchange
Deposit safety.
- Trading Discipline
Routine checks.
Sources
This article is written in our own words. The sources below support the specific facts, rules and figures marked with a number in the text. Links open the original publisher’s page.
- FBI. FBI Warns of Cryptocurrency Token Impersonation Scam (opens in a new tab) Checked .
- Chainalysis. Anatomy of an Address Poisoning Scam (opens in a new tab) Checked .
- ESMA. Factsheet on crypto frauds and scams (opens in a new tab) Checked .
Educational content, not financial advice. Examples use hypothetical prices and simplified costs; actual fees, margin rules and regulations vary by broker, market and country. We are not affiliated with any publisher linked above. Last reviewed . Report an error or request a source credit.