“Checking the first and last characters” is no longer protection. At all.
Scam Sniffer: someone lost about $50000 in USDT on Ethereum. The lookalike address matched the correct one in the first four and last six characters.
For comparison, recent cases:
- December 2025: 49999950 USDT, matched only three + four characters, plus a 0.005 USDT dust transfer into the victim’s history
- In August: about 100000 USDT, the lookalike had been planted in the history 66 days earlier
Address poisoning thrives on patience: the lookalike sits in the history for weeks, waiting for you to copy it from there.
My USDT is in Simple Earn Flexible, but sooner or later everyone withdraws. The rules are simple: use an address only from your address book, and check the whole thing, not just the ends.
Follow along if you don’t want to become the next line in a list like this — I’m collecting them.
#AddressPoisoning #ScamSniffer