⚠️⚠️⚠️ Beware of Address Poisoning

[Fivestar4everMVP]

Beware of Addressing poisoning on TON blockchain.



Address poisoning is a new scam tactic which is becoming more common on TON. Scammers send 0 TON transactions from fake wallets designed to look like a legitimate one you just interacted with, tricking you into sending funds to a wrong address.


🔍 How It Works:

- A normal wallet interaction occurs, such as receiving an NFT or Token from a wallet.

- Soon after, 0 TON transactions appear from an address mimicking the original sender’s address.

- These scam addresses copy the first 4 and last 4 characters of the trusted address, hoping you’ll accidentally copy the wrong one when making a future transaction.


🛡️ How to Protect Yourself:

- Always verify the full address before sending funds—don’t rely on just the first and last characters.

- Avoid copying addresses from your transaction history or explorer. Always copy the address from the main source.

- Ignore small random transactions (like 0 TON) from unknown wallets—these could be part of a scam.

Address poisoning exploits user habits by making addresses look familiar. Stay vigilant and double-check every transaction to avoid sending funds to scam wallets.

🔒Stay safe

Reference :TonNomads

[hugeblack]

I didn't think that scammers could generate similar addresses with the first 4 and last 4 characters, so manually reviewing and verifying all the characters of the address became necessary.

[enoch_from_off]

That's just phenomenal.
Thanks for noticing it. We should stay even more vigilant now thanks to these people.
 

[rdluffy]

Thanks for the warning
As TON is a network that has had a lot of new users, possibly a lot of people will fall for this scam

But what I always do, regardless of the network or device used, is ALWAYS check the entire address
It's a pain, but it's worth it, in a few seconds you can avoid sending coins to a malicious address and losing forever

[royalRitta]

Thanks for the warning
As TON is a network that has had a lot of new users, possibly a lot of people will fall for this scam

But what I always do, regardless of the network or device used, is ALWAYS check the entire address
It's a pain, but it's worth it, in a few seconds you can avoid sending coins to a malicious address and losing forever

Totally agree.
It's better that way than to be in disappointment of what just happened to yourself.

[Sim_card]

Rechecking the address from the first letter to the last when you want to send your coins to over and over again will safe you from falling victim to these scammers. It is better that you don't do things in a rush, few minutes delay will save you from losing your funds. There was a time clip board malware was sent to my device, I was lucky enough to detsct it when I was about sending out funds, and since that time, I am always cautious of the address I want to transfer funds to.

[yhiaali3]

Thank you for sharing this here, address poisoning was very common on Binance but it seems to have moved to TON due to its huge popularity.

Recently I received more than one NFT with airdrop names on my TON wallet and it seems like this is another scam, I completely ignored it because I know it is a scam and it could contain malicious smart contracts that hack the wallet.

[Crwth]

What are the odds of getting that address? I believe that it is essential to know this. It is really important to be aware of this type of scam, especially for those who are getting into the cryptocurrency space and especially for the TON blockchain.

Upon checking my wallet, I found no trick like this. I hope that this victimizes no one.

[robelneo]

🛡️ How to Protect Yourself:

- Always verify the full address before sending funds—don’t rely on just the first and last characters.

- Avoid copying addresses from your transaction history or explorer. Always copy the address from the main source.

I am fully aware of this as I read a lot of address poisoning in my group, so my motivation always when transacting with an old address is to only get it from the source and to check if there is a Clipboard hijacker. I verify the address for at least two minutes by darting the address from the source to the address I put on the form.
There's nothing wrong, and its recommended to take time when transacting; you don't need to be in a hurry, as once you send it, there's no way to recover it, only if you personally know the receiver.

[SmartGold01]

I know that everything is possible with the cryptospace and scammers can go to the length to exploring tools to scam their fellow crypto users, but naturally I have always been careful while sending out coin especially my bitcoin, because I hardly interact with altcoins apart from bitcoin. The last time I interacted with altcoin was when tried to convert my token to some coin then I moved it to exchanged.

[Tribalchief]

I think I've read about this type of scam, but didn't get to see a live example. Seeing it for myself, it's quite difficult to believe that scammers can go so extreme to trick their victims. It's very common among users to check/remember the first and last 3-5 characters, but we don't usually give much attention to other characters that are in between, and it's obvious that anyone can easily fall for this scam, except he/she has that patience to go through the characters. Thanks for sharing @OP.

[MrSpasybo]

Address poisoning is a new scam tactic which is becoming more common on TON. Scammers send 0 TON transactions from fake wallets designed to look like a legitimate one you just interacted with, tricking you into sending funds to a wrong address.

As far as I know, this has been happening for years to Bitcoin and Ethereum users where scammers can create accounts with addresses very similar to those that have interacted with wealthy accounts in order to deceive them. These scammers are becoming increasingly cunning, and we must be very careful when sending any tokens.

Experienced users always have a few good habits to avoid risks from these kinds of scams: always double-check the receiving address, create a list of important accounts, and stay calm when working with crypto accounts to minimize hasty and wrong decisions.

[0t3p0t]

Thank you for bringing this here because I am not aware of this to be honest and I don't have any technical ideas about addresses and this could help us double check if someone is trying to scam us that is very nice of you hopefully I won't fall for this kind of scam.

[36B]

Address poisoning is a new scam tactic which is becoming more common on TON. Scammers send 0 TON transactions from fake wallets designed to look like a legitimate one you just interacted with, tricking you into sending funds to a wrong address.

As far as I know, this has been happening for years to Bitcoin and Ethereum users where scammers can create accounts with addresses very similar to those that have interacted with wealthy accounts in order to deceive them. These scammers are becoming increasingly cunning, and we must be very careful when sending any tokens.

Experienced users always have a few good habits to avoid risks from these kinds of scams: always double-check the receiving address, create a list of important accounts, and stay calm when working with crypto accounts to minimize hasty and wrong decisions.

That's right, we must keep our guard up because there is always a possibility of more complex fraud in the crypto space especially given what has happened to Bitcoin and Ethereum investors in the past. It is also a fact that creating security in the crypto transactions does not only demand good habits like checking the recipient’s address before sending the token, maintaining a list of some important accounts best to remember, and working without stress and distractions. Thus, if everyone maintain discipline in every steps described above, there are ways to reduce loss and be safe in defending our digital goods.

[joniboini]

Upon checking my wallet, I found no trick like this. I hope that this victimizes no one.

I believe the higher your activity on the network the higher your address will be attacked. For example, making regular DEX trades, sending money to exchanges, buying NFT, staking, etc. They probably look at the number of TON in your wallet too.

Basically, anyone can be a target. Even I get spammed with attacks like this on one of my wallets even though I made 1 transaction since I made it, worth less than $10. It's safer to assume that you'll be the next target instead of ignoring this so you'll always double-check the address before you make transactions. CMIIW.