Address poisoning: the copy-paste trap

How it works

Attackers generate an address whose first and last characters match one you use often, then send you a zero or tiny transfer from it. Later you copy the 'same' address from your history and send funds to the attacker.

Wallets usually show addresses shortened (0x1234…abcd), which is exactly the part the attacker copied.

Protect yourself

Copy addresses from a saved address book, not from transaction history.

Compare the middle characters, not just the start and end.

Send a small test amount for large transfers.

RugWard's recipient check warns when an address looks like one you saved, is a token contract (funds sent there are usually lost) or is on the sanctions list.