# Address poisoning and the one habit that stops it

URL: https://www.caijing188.com/address-poisoning-habit/
Published: 2026-10-16T22:09:39+08:00 | Updated: 2026-10-27T22:10:00+08:00
Verified: 2026-10-27

## Quick answer
Address poisoning floods your history with addresses that share the first and last characters of a real counterparty. The attack works only if you copy from history instead of from a saved entry.

## Summary
Attackers generate a look-alike from your history and wait for you to copy the wrong row.

## Key takeaways
- Verify against a saved entry, not history.
- Send a small test first.
- Hide or ignore unsolicited transfers.

## FAQ
Q: Can a poisoned address steal funds directly?
A: No. It has to be copied and used by you. The attack is social, not cryptographic.
Q: Why do the first and last characters match?
A: Because interfaces truncate addresses, so those are the characters a user can see. Matching them is enough to fool a quick glance.