Binance warns on rising address poisoning scam

TLDR

Binance has issued a new security warning about address poisoning, a scam that tricks users into sending crypto to lookalike wallet addresses.

1. Address poisoning creates fake addresses that mimic your real counterparties and plants them in your transaction history.
2. The scam is spreading across multiple chains and already targets large wallets, with examples seen around big Binance deposits.
3. The most effective defenses are verifying full addresses, using trusted address books or allowlists, and ignoring suspicious tiny inbound transfers.

Deep Dive

1. How Address Poisoning Works

In its latest alert, Binance describes address poisoning as a scam that does not hack wallets or steal keys but exploits copy paste habits when sending crypto, according to a detailed warning on the scam.

Attackers generate a wallet that matches the first and last characters of an address you actually use, then send a tiny or zero value transaction from this fake address to your wallet. Your wallet history now shows the attackers address alongside real ones.

Later, if you pick an address from history instead of from a trusted source, you can easily copy the poisoned address and send funds directly to the attacker. Because blockchain transfers are irreversible, those funds are effectively gone.

2. Why It Is Spreading Now

Address poisoning has been observed around large exchange deposits. One Ethereum whale moving tens of millions to Binance saw their history quickly filled with fake USDC and ETH transfers from lookalike contracts and addresses, a textbook address poisoning pattern.

The scam works on any chain that shortens addresses to a few leading and trailing characters in common wallets, including BNB Smart Chain and Ethereum. It scales cheaply for attackers, since they only need to send dust transactions and rely on human error rather than advanced exploits.

Active users with high balances and frequent transfers are prime targets, but casual users can be caught the same way if they rely on recent history instead of verified address sources.

3. Practical Ways To Reduce Risk

The strongest defense is to treat addresses as full identifiers, not just the first and last few characters. Many users reduce risk by pasting addresses from verified sources and visually checking a longer substring before sending.

Using an exchange or wallet address book or allowlist can help, since you are selecting from entries you added yourself rather than from recent history. Ignoring unexplained dust transfers and obviously spammy token movements also lowers the chance you reuse a poisoned entry.

Binance notes that some users also perform small trial transfers, but this still depends on copying the correct address. The core protection remains verification of the address origin and careful review before confirming any transaction.

Conclusion

Binances warning signals that address poisoning has moved from niche tactic to a mainstream scam that targets everyday habits rather than code vulnerabilities. For crypto users, the key shift is behavioral, not technical. Treating addresses as data that must come from trusted sources and double checked before each send is what makes this attack path far less effective.