Binance warns users about address poisoning scam

TLDR

Binance has issued a security warning about address poisoning, a scam that tricks users into sending crypto to attacker-controlled lookalike wallet addresses.

1. Address poisoning uses near-identical wallet addresses and small fake transactions so victims later copy the wrong address from history.
2. The scam targets active users on BNB Smart Chain and other networks that abbreviate long addresses, relying on human error rather than hacking wallets.
3. You can reduce risk by verifying full addresses, using trusted address books, and avoiding copy-paste from recent transactions when sending funds.

Deep Dive

1. How Address Poisoning Works

According to Binances warning, scammers create wallet addresses that closely resemble ones a user often interacts with, matching the first and last characters that most wallets display by default. They then send a tiny or zero-value transaction from this fake address, so it appears in the victims transaction history as if it were a familiar counterparty.

Later, when the user sends funds and simply picks a recent address from their wallet history, they may accidentally choose the poisoned address instead of the genuine one. Because blockchain transfers are irreversible, any funds sent to the attackers address are effectively lost, with no need for the attacker to compromise private keys or passwords Binance warning.

2. Why This Scam Matters

Binance notes that address poisoning has been seen on BNB Smart Chain and can affect any chain that uses long hexadecimal addresses and shows them in shortened form. Active users with larger balances and frequent transfers are prime targets because they are more likely to reuse addresses from history without checking.

This makes address poisoning a low-cost, scalable attack for scammers: they just need to push lookalike addresses into many users histories and wait for mistakes. No exploit of the wallet software is required, so traditional security hygiene like keeping keys safe does not fully address this specific risk.

Confidence: high, based on Binances public warning and recent reporting.

3. How To Protect Your Funds

Binance advises users to stop relying on abbreviated or recent addresses when sending funds and instead verify the full address each time before confirming a transaction. Using an address book or allowlist of known trusted addresses can help, since you control which destinations are saved.

You should also be cautious with any new address that appears in your transaction history with a tiny or zero-value transfer and no clear context. Treat those entries as suspicious and cross-check against the original source where you obtained your real recipient address, such as an official exchange or project page.

Conclusion

Binances warning highlights a growing class of social engineering style crypto scams that exploit user behavior, not protocol flaws. For everyday users, the key defense is slowing down before sending, verifying full addresses, and using trusted address lists instead of blindly reusing whatever appears in wallet history.