Verify the full transfer address: beware wallet history poisoning

Guidance reviewed on 11 November 2026.

An unfamiliar small transfer or token may appear in your wallet history beside an address resembling one you previously used. Address poisoning aims to make you copy the attacker's address from that history instead of the genuine recipient's address. The first and last characters can look familiar while the middle differs, allowing a quick visual check to miss the substitution.

European supervisory authorities describe how look-alike addresses can contaminate a wallet’s transaction history. An entry in transaction history does not prove that its address belongs to a known contact, and a familiar token name does not establish that the asset is genuine. Do not use unsolicited transfers as the source for a new payment destination.

Obtain the address from the recipient through a trusted channel and compare the entire character sequence after pasting it and before confirmation. Also check the network, asset and any required additional identifier. A correct address alone does not resolve differences between services' transfer requirements. Where an address book is available, verify entries before relying on them.

A small test transfer to a verified recipient may help in some circumstances, but adds fees and does not replace checking subsequent transfers. Do not send tests to suspicious recipients as a trust experiment. If an error occurs, preserve the transaction identifier and contact the provider promptly; an on-chain cancellation option is not guaranteed.