Orca Crypto
Menu
Start Here
Learn
Chains
Exchanges
Markets
Tools
Safety
Glossary
More
Our tokens Book a session
Security term

Address poisoning

Planting a lookalike address in your history so you copy the wrong one.

Loading live prices
All terms
All termsAddressBlockBlock timeBlockchainConfirmationGasGweiHashMempoolNodePrivate keyPublic keySeed phraseTransactionWalletAll time high (ATH)Bear marketBull marketBundlerCandlestickCapitulationChart patternsCliffDollar cost averaging (DCA)Funding rateLeverageLimit orderLiquidationLiquidityMarket capMarket orderOrder bookPerp (perpetual futures)Position sizingPresaleRisk managementSlippageSniperSpreadStealth launchStop lossSupport and resistanceTrendUnlockVestingVolatilityVolumeWhaleAMMBonding curveBridgeBurnCEXDAODeFiDepegDEXFarmingFlash loanGovernance tokenGraduationImpermanent lossLiquidity poolLP (liquidity provider)LP tokenOraclePerpetual (perp)PointsRestakingRWAStablecoinTVLWrapped tokenYield farmingAirdropAlphaAnonApe (to ape in)Ape inBagholderBagsChadCope / copiumCrypto Twitter (CT)DegenDevDiamond handsDiscordExit liquidityFloor priceFOMOFUDGMHODLJeetKOLLARPLoreMaxiMeme coinMoonNFTNGMINo coinerNormiePaper handsPFPRaidRektSerShillSnapshotTelegram (TG)TradFiWAGMIWenAddress poisoningCold storageCustodyDue diligence (DYOR)Dusting attackExit scamFront runningHardware walletHoneypotHot walletMEVMultisigPhishingPump and dumpRug pullSandwich attackSelf custodySIM swapToken approvalTwo factor authenticationWallet drainerWash tradingAccount abstractionAppchainBlock explorerCirculating and total supplyConsensusData availabilityEVMFaucetFinalityForkFully diluted valuation (FDV)Gas warHalvingLayer 1Layer 2Layer 3MainnetMiningName serviceOptimistic rollupProof of stakeProof of workRollupShardingSidechainSlashingSmart contractStakingTestnetToken standardTokenomicsValidatorZero knowledge proofZK rollupArweave and the permawebComposabilityCross chain messagingdAppDecentralized identity (DID)DePINGameFi and play to earnIndexerInteroperabilityIPFSOnchain and offchainSession keysSmart accountSocialFiSoulbound tokenSybil resistanceToken gatingWeb2 vs Web3Web3
By the Orca Crypto teamUpdated 2026-09-28How we check this3 min readDefinition
Definition

Planting a lookalike address in your history so you copy the wrong one.

The attacker generates an address whose first and last characters match one you use often, then sends you a zero value transaction so it appears in your history.

Later you copy an address from your transaction list, glance at the first and last few characters, and send funds to the attacker instead.

In practice

Always verify the full address, or use an address book and name service names rather than copying from history.

What people get wrong

That the attacker somehow accessed your wallet. They did not. They sent you a worthless transaction from an address that looks like one you use, so that later you copy it out of your own history. The defense is never copying from transaction history.

Common questions

How does a lookalike address end up in my history?
The attacker sends you a worthless transaction from an address whose first and last characters match one you use. Later you copy it out of your history without checking the middle.
How do I avoid it?
Copy addresses from the source rather than from your transaction history, use a saved address book, and check the middle characters rather than the ends.

Where this comes up on the site

The guides that actually use this word, rather than a list of everything we have written.

Where to go next

More security terms

Back to the full encyclopedia

Want this explained out loud?

Some of these land faster in conversation than in writing. Sessions are one to one and you can ask anything, including the things that feel too obvious to ask.

Share this page

Was this page useful?