Look-alike history
An attacker can send a tiny or zero-value transaction so a similar address appears among recent activity. The goal is selection—not access to your private key.
Wallet-address safety
Crypto Address Poisoning Explained
Verify the full destination before you approve a transfer.
Address poisoning is a wallet-address scam. An attacker places a look-alike address in your transaction history and hopes you copy it later. Verify the complete destination from a trusted source every time; matching first and last characters are not enough.
Android only. SIMGUARD provides security signals, alerts, and guidance—not a guarantee of prevention.
Know the signal
Understand the risk before you react
These are practical signals and safer response ideas. They are not proof of compromise, and they do not replace trusted Android, carrier, wallet, or account-provider controls.
Middle characters matter
Long addresses are hard to read, which is why a familiar start and end can mislead. Compare the full address against a trusted source.
A separate clipboard risk
Clipboard malware may replace an address after you copy it. A changed paste is a stop signal, not proof of one specific attack.
How the scam works
A familiar-looking address can be planted in plain sight
Attackers generate a public wallet address that resembles one you have used, often matching its beginning and end. They then send a low-value or unexpected token transaction so the look-alike appears in wallet history.
If you later select a recent-history entry instead of the recipient’s verified address, funds can go to the attacker. The attacker does not need your seed phrase or private key for this social-engineering tactic.
What to look for
History is not an address book
An unexpected tiny, zero-value, or unfamiliar-token transaction appears in wallet activity.
An address seems familiar because its beginning and end match, but its middle characters have not been checked.
A pasted destination does not exactly match the address you copied from an independent, trusted source.
A message pushes you to send immediately, verify a wallet through an unfamiliar link, or use an address supplied in the message.
Before you send
Use an independent source of truth
Get the address from a verified contact, address book, official app, or other trusted channel—not a surprise transaction or unsolicited message.
Compare the full destination after pasting, including the middle characters. For high-value activity, use the wallet or hardware-wallet confirmation screen and obtain independent recipient confirmation.
If the pasted text changes, stop before approving. Review untrusted apps, update Android and wallet software, and run the relevant security checks. Clipboard replacement and address poisoning are different risks.
If a transfer is already confirmed, preserve the transaction details and contact the wallet, exchange, and relevant reporting channels promptly. Recovery is not assured.
How SIMGUARD can help
- SIMGUARD can provide Android security signals, alerts, and guidance for suspicious apps, links, scams, and safer verification habits.
- Free tools such as Verify a Link, Scam Watch, Security Briefings, Defender Drill, and SCAM SHIELD can support awareness and decision-making around address-related scams.
- Premium adds 24/7 SIM and number watch plus the full protection layers for broader account, device, network, wallet, and response context described in the app.
Important limits
- SIMGUARD cannot validate every wallet address, access a wallet, control a transaction, or decide that an address is legitimate from appearance alone.
- It cannot reverse a blockchain transfer, recover funds, or guarantee detection of clipboard malware or address poisoning.
- Never share a seed phrase, private key, password, or recovery code with any support or security service.
Crypto Address Poisoning Explained FAQ
Is address poisoning the same as clipboard hacking?
No. Address poisoning puts a look-alike public address into transaction history. Clipboard malware changes what is pasted on the device. Both make full destination verification important.
Can a small unexpected transaction steal my wallet?
A poisoning transaction is generally meant to influence a later copy or selection decision. Do not interact with unexpected activity or treat it as a trusted recipient address.
Can SIMGUARD prevent a wrong blockchain transfer?
No. SIMGUARD provides security signals and guidance. You must verify the recipient and transaction before approving it, and confirmed blockchain transfers may not be reversible.
Related SIMGUARD guides
Continue from a trusted starting point
