Address Poisoning: The USDT Scam That Copies Your Wallet Address

Address poisoning is a scam that plants a look-alike wallet address in your transaction history, hoping you will copy it by mistake. It needs no hacking and no access to your wallet. It only needs you to be in a hurry once.

How the scam works

Scammers create an address that starts and ends with the same characters as one you use, then send you a tiny transfer from it. Step by step:

1. You send USDT to a real address you use often, for example TQx7…9fK2.
2. Bots watch the blockchain and spot that transfer.
3. The scammer generates an address that also begins TQx7 and ends 9fK2. The middle is different.
4. They send you a tiny or zero-value transfer from it, so it appears in your history right next to the real one.
5. Next time, you copy "the usual address" from your history, pick the fake one, and send your money to the scammer.

	Real address	Poisoned address
First 4 characters	TQx7	TQx7
Last 4 characters	9fK2	9fK2
Middle characters	Yours	Completely different
Where it came from	Your own payment	A tiny transfer you never asked for

How to spot a poisoned address

Unexpected tiny transfers are the warning sign. Be suspicious when you see:

• incoming transfers of 0 USDT, a fraction of a cent, or an unfamiliar token;
• two entries in your history that look almost identical;
• a transfer from an address you do not recognise, right after you made a payment.

Five habits that stop it

Never copy an address from your transaction history. Then:

1. Copy addresses from the source every time: the app or person you are paying, not your history.
2. Check the whole address, not just the beginning and end. Compare it in chunks of four characters.
3. Save trusted addresses in your wallet's address book and label them.
4. Send a small test first for large amounts, and check it arrived before sending the rest.
5. Ignore unexpected tokens and tiny transfers. Do not interact with them.

How this applies to Huzra orders

Each Huzra order shows the payment address inside the app, on the TRON (TRC20) network only. Copy it from your order screen every time, not from a previous payment in your wallet history, and check the full address before you confirm. If anything about an address you are given looks different, stop and ask support in the app before sending.

If you sent to a poisoned address

Blockchain transfers cannot be reversed, but act quickly anyway. Save the TXID, report the scam address to the exchange or wallet you used, and report it to the police. Be wary of anyone who contacts you offering to "recover" the funds for a fee: that is a second scam.

Frequently asked questions

Can address poisoning steal from my wallet directly? No. It only works if you send funds to the fake address yourself.

Why would a scammer send me money? The tiny transfer is the bait that puts their address in your history.

Should I send the dust back? No. Do not interact with it at all.

Does it happen on TRON? Yes. It happens on most popular networks, including TRON, where USDT transfers are common.

Is checking the first and last characters enough? No. That is exactly what the scam is designed to beat. Check the whole address.

Can my wallet hide these transfers? Some wallets hide or flag tiny transfers, but do not rely on it. The safest habit is never to copy from history.