Binance Warns of Lookalike Wallet Addresses in Crypto Scams
Binance has warned cryptocurrency users about address poisoning scams in which attackers place lookalike wallet addresses into transaction histories, potentially tricking users into sending future payments to the wrong destination.
The exchange said the scheme relies on a simple weakness in how people retrieve wallet addresses. Rather than compromising a wallet or obtaining its private keys, According to the exchange, an attacker attempts to make a fraudulent address appear familiar enough that a user may copy it during a later transaction.
How Crypto Address Poisoning Works
The attack begins when a scammer identifies a wallet that has previously transferred funds to a particular recipient. Because blockchain transactions are publicly visible, the attacker can examine the wallet's activity and identify addresses that the owner may use again.
The scammer then creates another wallet address designed to resemble the legitimate destination. The fraudulent address can be made to share similar characters at the beginning and end, making it harder to distinguish when only shortened wallet addresses are displayed.
The attacker subsequently sends a zero-value or small transaction from the lookalike address to the target wallet. This causes the fraudulent address to appear in the wallet's transaction history alongside legitimate transactions.
Binance noted that the attacker does not need access to the victim's private keys to carry out the scheme.
The deception can become more difficult to detect when wallet interfaces display only selected characters from a long blockchain address. Two different addresses may therefore appear nearly identical in a shortened view while containing completely different characters in the middle.
Why Wallet History Can Become a Trap
The risk emerges when the wallet owner later prepares to send funds to a recipient they have used previously.
A user who relies on transaction history rather than retrieving a verified address may accidentally select the attacker's lookalike address. Once the transfer is approved, the cryptocurrency is sent to the fraudulent wallet rather than the intended recipient.
The presence of a small incoming transaction should not be treated as evidence that an address belongs to a trusted recipient. Its appearance in recent activity can nevertheless make the address seem legitimate or familiar, particularly when a payment is being prepared quickly.
The attack therefore exploits user behavior rather than directly breaking the security of the wallet itself.
Binance Recommends Verifying the Full Address
Binance advises users to check the complete destination address before approving a cryptocurrency transfer. It also recommends saving verified recipients in an address book rather than repeatedly selecting addresses from transaction history.
For larger payments, Binance recommends making a small test transaction first and confirming that it reaches the intended destination before sending the remaining funds.
These precautions are particularly relevant when wallet software shortens addresses or when users routinely copy destinations from recent transactions.
The technique has been observed on networks including Ethereum and BNB Smart Chain. While the attack itself can begin with a transaction involving little or no value, a subsequent mistaken payment could involve a substantially larger amount.
A blockchain transaction history records where previous activity occurred, but it does not establish that every address appearing there belongs to a trusted recipient. Verifying the complete destination before sending remains an important safeguard against address poisoning scams.
Writer: Marcus RenfieldCrypto Market Analyst & Onchain WriterMarcus Renfield covers cryptocurrency markets with a focus on onchain data, Bitcoin price action, and emerging market narratives. His writing examines how capital flows, network activity, and broader market structure influence short- and medium-term trends.He aims to provide clear, data-informed analysis for readers seeking a deeper understanding of crypto market dynamics.