Stay Ahead Of The Scammers

[X-ray]

To prevent from falling victim, we can just do address rechecking, as simple as that. I would never send a tx without rechecking the address.

Another solution is just scanning QR code of an address, I always use QR code when depositing to an exchange for my BTC and find it really convenient and eliminate human error most of the time.

[michellee]

Scammers will always around us and will find out how they can trick us. In the article, it said that this type of scam use a human error and trust. So that means, our negligence in checking on the wallet which making many people getting scams.

In this matter, we must always checking the wallet destination before we making transaction. We need to make sure that we send into a right wallet address and we can stay away from the scammers.

It is part of carefully that will help us to avoid scammers although scammers can find the other ways to trick us. We also need to read more information about preventing the scammers so we will not be their target.

[Mpamaegbu]

https://cointelegraph.com/news/address-poisoning-attacks-in-crypto

Thank you OP for pointing our attention to that interesting article. There's a whole lot to learn from that long read. However, in all I got to learn that we can only be easy target when we're too much in a rush not to crosscheck facts and addresses we copy and deposit to. Scammers play on the impatience and greed of people. So, we should be well guarded on those two — Impatience and Greed.

[lionheart78]

I just came across an interesting article about "Address Poisoning Attack" and I thought it was worth sharing.

These types of scams can definitely be tricky, so it is very important to stay informed to keep our funds safe.

https://cointelegraph.com/news/address-poisoning-attacks-in-crypto

Note; Address Poisoning attack invole tampering with cryptocurrency address, exploiting human error rather than vulnerabilities in blockchain security.

Basically, this type of scam has been around for a long time. Scammers send small amounts of tokens to many wallets to increase their chances of success, because they know that there will definitely be people who don't pay attention and send tokens to the scammers addresses. Basically, this takes advantage of other people's negligence, because the addresses are almost identical to ours.

True, this kind of attack has been posted on this forum several times and we have some thread about it already.  I am still surprised some regular members of this forum have yet to read or know about this poisoning attack. 

https://bitcointalk.org/index.php?topic=5537492.0
https://bitcointalk.org/index.php?topic=5433343.20
https://bitcointalk.org/index.php?topic=5425576.0

Nevertheless, it is always good to have a reminder of stuff like this from time to time.

Personally, i have experienced this multiple times. i received transactions from addresses that were nearly identical to those in my Phantom wallet. Fortunately, i always double-check the address before sending. Typically, victims of this scam copy the address from their last transaction.

Scammers will always maximize their chance to scam others so for sure the altcoin address is also plagued with this kind of attack hoping someone will fall for it.

[lovesmayfamilis]

I would not blame the victims of these scams since we are always in a hurry and forced to act faster.
But double check your address always.dont trust what you're pasting but double check.
Its easier spend few seconds early and not later after a wrong transaction...

I think the victims blame themselves. It is not for nothing that they say in the world that the best lessons we learn are by going through mistakes on our own experience, human attention does not always work where others make mistakes.  These victims in the future will not check twice, I think it will be more, and will not rush to make transactions because they have already been burned, or the lessons will be repeated regularly.

[mirakal]

Even though we are already aware of the scam, there is still a time when we fall into their trap. Scammers are not dumb enough not to think about how people find ways to detect scam attempts. That is why they also find new strategies to succeed. I'm wondering why these scammers are not tired or have no conscience to scam innocent people. For sure, when this strategy is exposed and known to the community, another one will pop up. This scamming activity will probably have no ending story, and we expect the new generation will continue.

[Z-tight]

Pmalek has a thread on address poisoning that is very detailed and anyone who wants to understand it better should read it:
https://bitcointalk.org/index.php?topic=5433343.msg61556293#msg61556293

A lot of people have lost money to address poisoning, but you can avoid it in a few ways, all of which are covered in the thread i just posted above, i.e. do not copy addresses directly from your transaction history, check addresses very well before sending funds and if it is possible, do not reuse addresses, etc. It is easy to avoid address poisoning scam if you know exactly what you are doing.

[Pmalek]

Note; Address Poisoning attack invole tampering with cryptocurrency address, exploiting human error rather than vulnerabilities in blockchain security.

It exploits the laziness of people more than anything else. You can fall for a poisoning scam if you are lazy and take shortcuts when it comes to verifying the addresses you send crypto to. Take some time to verify the destination addresses and you will never have to worry about scammers sending small sums of money to your wallet with the aim of tricking you to copy their addresses instead of the real ones you usually send to.

[zasad@]

I just came across an interesting article about "Address Poisoning Attack" and I thought it was worth sharing.

These types of scams can definitely be tricky, so it is very important to stay informed to keep our funds safe.

https://cointelegraph.com/news/address-poisoning-attacks-in-crypto

Note; Address Poisoning attack invole tampering with cryptocurrency address, exploiting human error rather than vulnerabilities in blockchain security.

This is no longer new information. No need to copy anything from the explorer blockchain. You always need to be careful and use hardware wallets where you can check the sender's address. From viruses on a PC, this is a very good protection.

[JoyMarsha]

Scammers don't want to rest a bit. When they know that people have know about a particular strategy of theirs, they divert to another strategy to continue with their prolonged scamming of people.

It's unfortunate that it is the crypto space that these scammers are find a resting grounds on. Many individuals have loss their money through this method, and it's counting up to $83 million as confirmed losses, which is heartbreaking. Just wish this strategy will come to an end. For everyone of us would be reconfirming their wallet address before they make any crypto transactions.

[BABY SHOES]

@Pmalek has made a detailed thread what is a poisoned address scam? What are Address Poisoning Scams?

The point is to stay alert and do not copy from your transaction history because it can fall into other traps as explained in the thread.

In the case of poisoned addresses, many victims have been killed and losses have been greater... Stay alert.

[Patikno]

I just came across an interesting article about "Address Poisoning Attack" and I thought it was worth sharing.

These types of scams can definitely be tricky, so it is very important to stay informed to keep our funds safe.

https://cointelegraph.com/news/address-poisoning-attacks-in-crypto

Note; Address Poisoning attack invole tampering with cryptocurrency address, exploiting human error rather than vulnerabilities in blockchain security.

So this is something new:

Address poisoning involves sending small transactions from wallet addresses that closely resemble a legitimate one, tricking users into copying the wrong address when making future transactions.

Trying out to send those wallets that having that almost identical with having that 1-2 digit or just like look the same for the real user will be trying out to copy that recent transaction?
Im surprised that it work considering on how many have been victimized on this, but the main question on my mind is on how the heck will someone copy out the address from history of transactions? rather than on
copying directly with that main address written above? 

As far as I know, it's a kind of using a Vanity address to create an address that is almost the same (and usually it's made similar to a smart contract address, Cmiiw), and it's aimed at the wallet address of the potential victim, so that for people who are not careful, they will be lured and fall into the trap.

Some time ago, a centralized exchange in my country experienced the incident, the owner of the exchange stated that they were fooled by the trap, and as I recall he said that he got a fake USDT token that had a smart contract that was almost the same as the original, and unfortunately they immediately processed the fake token, and in the end it all happened. Well, the lesson we learn from the incident is to always be careful with anything, and we should re-verify every information or action we are going to take, especially in this case, we have to recheck every coin or token that we will process, so that we do not experience a similar incident.

[kotajikikox]

I just came across an interesting article about "Address Poisoning Attack" and I thought it was worth sharing.

These types of scams can definitely be tricky, so it is very important to stay informed to keep our funds safe.

https://cointelegraph.com/news/address-poisoning-attacks-in-crypto

Note; Address Poisoning attack invole tampering with cryptocurrency address, exploiting human error rather than vulnerabilities in blockchain security.

When sending money in transactions, we ought to double check the address we are sending it to. If possible, test it out first if it is really the right address. The problem is that a lot of people are too reckless when it comes to sending transactions. That or they are just lazy. Digital transactions is meant to be convenient so a lot of people tend to be too comfortable and end up not double checking things.

[sheenshane]

These types of scams can definitely be tricky, so it is very important to stay informed to keep our funds safe.

https://cointelegraph.com/news/address-poisoning-attacks-in-crypto

This is quite new for me, and thank you for sharing this kind of scam.
It seems like the same as the dust attack, which I personally experienced back then in 2021.  We should always be suspicious of small, unexpected transactions in our wallet, we might be attempting to poison our history.

That's why we should always do this to carefully verify the entire Bitcoin address before sending or receiving funds, not just the first or last characters.  Don't rely on copy-pasting only or scanning QR codes.

[Ziskinberg]

Real important lessons in the article shared. Thank you very much. This is part of the cybersecurity education that I advocate for everyone who is involved in cryptocurrency. Don't think you are untouchable. Review your already existing security and protection and also make changes where you need to. In as much as there are increasing scams, there is also a growing body of knowledge on these new scams and how to continue to remain safe even when are far away and not have to worry for the safety of your bitcoin assets.

True, while scammers are born wise, but we can always find ways to be smarter than them by getting updated with the latest tricks and styles how they scam those ignorant people around. I know this isn’t a new trick when it comes to scamming, but still a lot would easily fall on this trap. Probably because of negligence and sometimes greed, but we can always avoid something like this if we practice being cautious all the time.

Awareness is the key, and by spreading information like this would mean a great help for others.

[Pmalek]

It seems like the same as the dust attack, which I personally experienced back then in 2021.

Dust attacks are somewhat different from poisoning scams. With dust attacks, the senders are hoping that you will consolidate the pocket change they sent you with other inputs in your wallet, thereby proving that you own all those coins. It's a scheme to deanonymize you with the hope to find out who you are and how much money you have.

Poisoning scams are schemes that go after your money directly if you send your coins to the wrong address.   

[hd49728]

Dust attacks are somewhat different from poisoning scams. With dust attacks, the senders are hoping that you will consolidate the pocket change they sent you with other inputs in your wallet, thereby proving that you own all those coins. It's a scheme to deanonymize you with the hope to find out who you are and how much money you have.

Poisoning scams are schemes that go after your money directly if you send your coins to the wrong address.   

I agree.

Dust attacks are mainly for tracking and finding identity of owners behind attacked addresses.
Poisoning scams are mostly for fooling you and if you are careless in transaction broadcast, you will lose your coins by sending it to a wrong address.

Dust Attack, what it is, why it is dangerous and how to prevent falling to it.
What are Address Poisoning Scams?

[Outhue]

I just came across an interesting article about "Address Poisoning Attack" and I thought it was worth sharing.

These types of scams can definitely be tricky, so it is very important to stay informed to keep our funds safe.

https://cointelegraph.com/news/address-poisoning-attacks-in-crypto

Note; Address Poisoning attack invole tampering with cryptocurrency address, exploiting human error rather than vulnerabilities in blockchain security.

Wallet poisoning attack only happen on crypto multi wallets, anyone is free to correct me if I am wrong, I've never seen where fake Bitcoin is been sent to any Bitcoin wallet before, it's always those useless tokens and shit coins.

The only way someone can carry out an attack similar to this one on Bitcoin network is through those inscription and ordinals, what are they called again? Brc20 or something.

The trap is fully active when the crypto wallet user tries to move the fake token from the wallet to another wallet, if you are greedy you will get caught, don't try to claim what's  not yours, I have so many fake tokens been sent to me almost all week but it's not mine to claim, also it's a trap.

[joeperry]

This is a good article thanks for sharing this, I personally not aware of this kind of scam and this is new to me I sometimes do copy and paste some previous transactions that I have before and wasn't verifying the address (which most of us don't as we don't want to check each letter/number in an address), but I'll practice it now for safety of my own. This is a scam that doesn't need to install or whatever but rather relying on a human error so to better fight this kind of scam a user should do manual checking of address.

[Ambatman]

I'm surprised people are considering this new after how much it has been talked about here.
Well can't blame them was once like that until I personally experienced it.
The worse was I wasn't even checking the wallet to confirm if the funds were going through
Since I was all on holding so never considered checking as long as I see the transaction ID.
until one day while checking a transaction, I checked mempool for its balance and what I saw was an amount I'm sure I don't have.
Long story short it was a wrong address generated anytime I copied via my device.

That's why it should be an habit to confirm the words not just the first but mid and last.