tronorb.com

Address Poisoning on TRON: How the USDT Scam Works and How to Avoid It

Look-alike addresses in your transaction history are how many people lose USDT on TRON. How address poisoning works, the warning signs, and how to protect yourself.

· 2 min read · TronOrb team

Address poisoning is one of the most common ways people lose USDT on TRON — and it doesn't involve any hacking. The attacker simply gets you to copy the wrong address from your own transaction history.

How the scam works

  1. You send USDT to a real address, for example your exchange deposit address TXyZ…8Kq4.
  2. Within minutes, a bot generates a look-alike address with the same first and last characters — TXyZ…8Kq4 — and sends you a tiny or zero-value transfer (often a fake "USDT" token) from it.
  3. That transfer now sits in your wallet history, right next to the real one.
  4. Next time you pay, you copy the address from history. Wallets shorten addresses to the first and last characters, so the fake looks identical. The USDT goes to the attacker.

TRON is a frequent target because USDT transfers are cheap and huge in volume.

Signs you've been targeted

  • Tiny or zero-amount transfers you didn't expect, from addresses that look like ones you use.
  • Unknown tokens named "USDT" or "USDT-TRC20" appearing in your wallet — check them with our USDT contract checker.
  • Incoming transfers right after you made a payment.

Being targeted doesn't mean your wallet is compromised: the attacker can't move your funds. The danger is only you copying their address.

How to protect yourself

  • Never copy addresses from transaction history. Use your address book, a QR code or the original source (the exchange's deposit page).
  • Compare the whole address, not just the start and end. The middle characters give the fake away.
  • Save frequent recipients in your wallet's address book with a name.
  • Send a small test transfer to a new or rarely used address first.
  • Hide or ignore unknown tokens. Don't interact with airdropped tokens or visit links in their names.

I already sent to a poisoned address — what now?

TRON transactions can't be reversed. Report the address to the exchange you use and to TRONSCAN; if it's a large amount, file a police report. Be very careful with "recovery services" — many are scams that target victims a second time.