Address poisoning check
Look-alike addresses are planted in transaction histories so they get copied later. Paste the real address and the history; every address with the same start or end but a different middle is flagged.
How poisoning works
An attacker generates an address whose first and last characters match one you use, then sends a zero-value or tiny transfer from it — or a fake token transfer. It now sits in your history next to the real one. Copying “the last address I used” from the history copies theirs.
What protects against it
Copy addresses from the recipient's own source, not from the history. Compare the whole address. Where a hardware wallet is used, read the address on its screen before confirming.
A valid format does not mean the address belongs to the right person. It only means the address is well-formed. Compare the whole address with the source and send a small test amount first.
FAQ
What is an address poisoning attack?
Someone sends small or zero-value transfers from an address that looks like yours or a recipient's, so it appears in the history and gets copied by mistake.
Does a checksum protect against poisoning?
No. The look-alike is a real, valid address. Only comparing the whole address with a trusted source shows the difference.